$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: mA83GutNbTO4EeCRMd1BHGrjfLemyGmFOayftJoFTiY= Subject key identifier: CD:C7:7B:A4:81:33:66:B5:0B:99:F2:16:63:0D:74:C9:66:17:4C:3E Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 0312 Signing time: Sat 05 Apr 2025 01:20:52 +0000 Manifest this update: Sat 05 Apr 2025 01:20:52 +0000 Manifest next update: Sat 12 Apr 2025 01:20:52 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: OQctmTFn5n5sUs2XMVpi2oIQTOyT09VZmGH2uSf5+9Q=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4 Validity Not Before: Apr 5 01:20:52 2025 GMT Not After : Apr 12 01:20:52 2025 GMT Subject: CN=67f08574-39b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:42:c9:f4:64:e8:fc:4f:fa:1c:9f:07:29: d1:56:7c:3c:4b:f9:5d:f2:e1:be:98:d2:e2:eb:52: 21:f4:c8:e1:00:74:14:00:08:b3:4c:6c:b1:2f:87: eb:8d:9d:ac:22:dd:79:de:f7:af:60:ca:20:67:b1: fb:70:0a:4f:33:48:61:40:05:c2:ae:93:c8:12:cd: e3:40:ee:f9:fd:78:68:f1:91:f0:d4:6b:bc:7f:c4: d2:6c:18:8a:92:25:be:36:8e:0c:24:37:81:48:83: d2:e9:73:d3:00:f5:d8:01:0a:e2:ca:9f:e3:1c:48: e5:14:25:8e:ce:6d:8a:00:66:ca:8a:ed:82:90:50: 95:d5:fa:05:72:f2:10:f0:a8:a8:23:8f:75:bf:4c: 37:d6:c9:91:0d:c6:22:1f:3b:f4:56:8c:d4:62:c7: 77:a4:d6:dc:46:22:e4:62:ae:e0:eb:03:dd:f5:b5: 0f:dd:01:71:65:19:66:f0:f3:64:3a:a4:20:a1:ff: 92:fc:30:e6:5d:cf:b1:07:a7:98:24:a6:76:1b:7d: ff:f8:4c:93:7b:11:ce:f8:bb:9f:54:52:f0:28:d2: b7:84:cf:27:3f:c3:0e:d4:71:7a:bf:89:4e:41:36: a3:13:ac:15:08:4a:45:e5:99:31:63:3e:21:bb:17: eb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C7:7B:A4:81:33:66:B5:0B:99:F2:16:63:0D:74:C9:66:17:4C:3E X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:45:92:89:fd:64:76:dc:4a:05:1d:fe:34:a1:de:d7:da:f6: eb:c7:f0:35:65:8f:9b:61:f4:2e:34:64:45:79:95:e8:15:ed: 33:29:fc:f0:97:53:a3:73:43:c4:92:09:f2:b3:7a:87:ae:21: c7:40:cc:11:53:f1:83:d6:33:c0:25:ef:0b:71:c2:e3:3d:b6: 15:3b:49:9e:5c:a9:06:7f:5b:1c:71:ba:c3:54:a8:f8:15:01: 6c:0f:53:cd:d0:ce:61:52:2b:b4:79:56:60:ae:e6:bf:55:1b: 69:21:6e:e0:41:4a:a6:8f:b3:67:70:fe:0f:48:2d:19:35:07: f8:e4:9d:14:c1:51:61:68:13:10:34:8a:11:b1:fc:0f:93:aa: 23:67:11:7e:51:0c:78:cc:20:48:63:69:2c:8a:b3:b9:84:c8: b4:c4:ee:9f:51:8e:5c:a2:11:63:ea:62:a1:f2:3f:39:a7:4f: ea:24:48:75:d7:15:21:6b:22:f3:d0:d3:05:3e:f7:99:3e:4b: a6:74:4d:4e:49:e3:f5:2a:09:fa:89:62:78:63:4c:78:42:d9: b5:a1:ad:37:28:46:cc:9d:ed:f5:3c:fc:52:91:49:da:f2:6f: c1:60:85:d6:cc:7c:ce:30:1a:9a:9f:9f:d8:d7:d5:b3:bd:ae: 75:8c:92:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwNDA1MDEyMDUyWhcNMjUwNDEyMDEyMDUyWjAYMRYwFAYD VQQDEw02N2YwODU3NC0zOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl5CyfRk6PxP+hyfBynRVnw8S/ld8uG+mNLi61Ih9MjhAHQUAAizTGyxL4fr jZ2sIt153vevYMogZ7H7cApPM0hhQAXCrpPIEs3jQO75/Xho8ZHw1Gu8f8TSbBiK kiW+No4MJDeBSIPS6XPTAPXYAQriyp/jHEjlFCWOzm2KAGbKiu2CkFCV1foFcvIQ 8KioI491v0w31smRDcYiHzv0VozUYsd3pNbcRiLkYq7g6wPd9bUP3QFxZRlm8PNk OqQgof+S/DDmXc+xB6eYJKZ2G33/+EyTexHO+LufVFLwKNK3hM8nP8MO1HF6v4lO QTajE6wVCEpF5ZkxYz4huxfruwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3He6SB M2a1C5nyFmMNdMlmF0w+MB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABRZKJ/WR23EoFHf40od7X2vbrx/A1ZY+bYfQuNGRFeZXoFe0zKfzw l1Ojc0PEkgnys3qHriHHQMwRU/GD1jPAJe8LccLjPbYVO0meXKkGf1sccbrDVKj4 FQFsD1PN0M5hUiu0eVZgrua/VRtpIW7gQUqmj7NncP4PSC0ZNQf45J0UwVFhaBMQ NIoRsfwPk6ojZxF+UQx4zCBIY2ksirO5hMi0xO6fUY5cohFj6mKh8j85p0/qJEh1 1xUhayLz0NMFPveZPkumdE1OSeP1Kgn6iWJ4Y0x4Qtm1oa03KEbMne31PPxSkUna 8m/BYIXWzHzOMBqan5/Y19Wzva51jJKQ -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:59 2025 by rpki-client