$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: gCe6PI1EAX2ExTKkZA8QaLufzt1zSDyP64U1hSc5aQA= Subject key identifier: 41:85:CA:31:EF:DD:59:82:42:7B:87:62:82:D4:3B:D6:A9:08:C9:E3 Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: AA Signing time: Sat 29 Mar 2025 05:33:43 +0000 Manifest this update: Sat 29 Mar 2025 05:33:43 +0000 Manifest next update: Sat 05 Apr 2025 05:33:43 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: ZJQeqpIKZKz6gtUMLzc6iz/HVOd0OtExtRuG0h3hqQU=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699 Validity Not Before: Mar 29 05:33:43 2025 GMT Not After : Apr 5 05:33:43 2025 GMT Subject: CN=67e78637-8953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:c3:94:59:8b:b1:2c:23:7b:59:ff:c8:da: b6:8b:c1:fa:b1:52:b1:6c:27:af:ed:00:6d:4d:0d: 2f:bf:83:fb:a9:08:5c:10:64:e1:1e:01:57:4b:6d: 7d:ba:52:6c:39:10:d4:50:48:14:04:f6:86:03:0c: 70:63:1b:e9:c4:0d:46:e1:b5:ac:07:d0:65:bb:95: 91:1e:ff:cf:ae:7d:fb:2e:6f:8f:30:b7:d8:b0:5b: 6c:f2:8a:ae:39:53:ac:9c:ee:64:f0:92:10:f7:73: 04:01:b7:af:d7:a2:23:43:5b:49:61:51:a5:8f:3a: e3:0d:f2:9f:b2:72:08:15:8a:4f:5a:cd:7b:f2:96: 39:75:a3:45:df:f6:d7:e8:0d:6d:f7:da:24:ac:6c: 9e:f5:ef:79:24:eb:f6:17:8c:da:0b:83:d7:89:f0: 50:1d:1e:f8:c1:95:22:48:f0:7a:a1:8f:97:0b:31: 9e:de:3a:05:24:77:41:d9:17:e4:d0:a2:08:6d:a9: de:84:de:ac:27:a6:e6:b6:88:7d:db:5c:7c:54:ce: 69:7a:51:a8:71:ff:20:7f:24:9b:1c:24:42:d7:7f: 01:bb:41:6e:9a:20:d7:cb:7e:85:d7:b0:d3:b7:09: 19:56:7f:b8:fa:75:a9:21:30:0d:7f:cd:ea:cc:ec: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:CA:31:EF:DD:59:82:42:7B:87:62:82:D4:3B:D6:A9:08:C9:E3 X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:63:15:4b:52:a9:48:52:c6:63:39:65:ab:96:8a:e5:77:b0: d1:b9:16:2d:10:aa:73:dc:bf:ce:0c:df:12:14:b2:ec:ce:a0: bd:20:49:7b:f3:0e:f3:79:88:1a:26:39:78:d6:90:2d:5c:dd: 09:9e:da:63:11:79:48:be:67:94:9b:82:f2:75:7e:fb:0a:c3: 5a:fd:23:20:fc:9c:8d:83:b9:1d:2c:2f:02:f2:55:1e:69:fc: b6:a1:e4:17:6c:b5:d0:24:44:86:74:83:c1:bb:11:30:11:05: 12:b2:db:2a:92:8e:d6:01:dc:2a:de:9d:80:6c:8a:ec:a0:17: 31:7f:d3:0b:bb:dd:43:86:32:23:68:00:d4:78:5b:5c:ab:cf: 8d:23:1d:c6:c4:e2:7d:10:12:cd:e7:cf:5c:d3:9b:34:64:b9: fa:4b:45:e8:5c:c2:41:dc:b6:d1:7a:e4:05:bc:89:67:57:ba: a4:81:b7:bc:72:5e:2f:88:f7:13:24:19:18:eb:5c:94:8a:ea: 75:c0:86:9a:bf:99:5b:bd:53:3f:92:79:0f:8c:a5:e8:11:61: 12:1f:e4:be:c9:01:d3:4a:3d:67:e3:04:e9:29:d0:78:f7:32: f6:b7:7c:39:6d:e7:7a:58:99:f0:19:65:af:11:fe:56:b5:86: ae:9b:80:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUwMzI5MDUzMzQzWhcNMjUwNDA1MDUzMzQzWjAYMRYwFAYD VQQDEw02N2U3ODYzNy04OTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWvDlFmLsSwje1n/yNq2i8H6sVKxbCev7QBtTQ0vv4P7qQhcEGThHgFXS219 ulJsORDUUEgUBPaGAwxwYxvpxA1G4bWsB9Blu5WRHv/Prn37Lm+PMLfYsFts8oqu OVOsnO5k8JIQ93MEAbev16IjQ1tJYVGljzrjDfKfsnIIFYpPWs178pY5daNF3/bX 6A1t99okrGye9e95JOv2F4zaC4PXifBQHR74wZUiSPB6oY+XCzGe3joFJHdB2Rfk 0KIIbanehN6sJ6bmtoh921x8VM5pelGocf8gfySbHCRC138Bu0FumiDXy36F17DT twkZVn+4+nWpITANf83qzOwbEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGFyjHv 3VmCQnuHYoLUO9apCMnjMB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmYxVLUqlIUsZjOWWrlorld7DRuRYtEKpz3L/ODN8SFLLszqC9IEl7 8w7zeYgaJjl41pAtXN0JntpjEXlIvmeUm4LydX77CsNa/SMg/JyNg7kdLC8C8lUe afy2oeQXbLXQJESGdIPBuxEwEQUSstsqko7WAdwq3p2AbIrsoBcxf9MLu91DhjIj aADUeFtcq8+NIx3GxOJ9EBLN589c05s0ZLn6S0XoXMJB3LbReuQFvIlnV7qkgbe8 cl4viPcTJBkY61yUiup1wIaav5lbvVM/knkPjKXoEWESH+S+yQHTSj1n4wTpKdB4 9zL2t3w5bed6WJnwGWWvEf5WtYaum4Ar -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:35 2025 by rpki-client