$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: X6DL1AhosQiABpE8+ZpTMHQHYe28NluPABGtMIEcc+Q= Subject key identifier: F7:42:FB:75:87:66:07:C1:3D:0E:52:EB:7C:18:7D:EE:95:B6:CA:A3 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 0182 Signing time: Sat 05 Apr 2025 03:06:16 +0000 Manifest this update: Sat 05 Apr 2025 03:06:16 +0000 Manifest next update: Sat 12 Apr 2025 03:06:16 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: aLhHiqn9LZ5WU7Ich5asQBVlm5a7UEn5O5yk+Tft9ZE=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: /+RFC3ph8TBdVcE4Ho9sjOY2q50Lm+IUGN0ewBHECtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701 Validity Not Before: Apr 5 03:06:16 2025 GMT Not After : Apr 12 03:06:16 2025 GMT Subject: CN=67f09e28-ce33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:58:df:d7:e2:b9:53:03:a0:9d:ea:59:34: 22:65:39:cd:a8:f0:0a:b9:28:8f:df:12:49:a0:9b: 3d:3a:70:1d:96:1e:1b:96:8c:13:12:70:0c:b9:db: 76:fb:14:4e:45:a6:43:08:4d:17:99:c2:70:05:cb: 30:0a:c5:16:73:93:61:71:0e:97:67:e0:7c:bb:2b: a5:d2:6c:9e:7b:9e:93:19:37:78:1d:90:9d:d0:40: d8:7a:0f:3a:7d:94:d0:35:22:ba:aa:14:b6:04:df: 76:b7:60:45:a2:32:95:0d:85:4a:cd:15:6e:5c:a1: de:5c:87:a0:88:76:08:d2:56:63:dd:4a:7a:97:7e: a7:f4:84:af:2f:90:5a:39:40:ab:7b:2d:91:37:32: 78:75:2b:d4:15:8c:38:d6:17:2c:2d:e7:e3:41:5b: 86:80:11:ca:cf:27:25:f1:ce:44:73:9b:df:11:39: 03:15:2b:f9:7b:72:c9:4f:c8:8b:dc:7f:ab:03:a6: c5:71:f4:21:dc:40:4c:c8:d7:89:e0:3d:48:c4:ea: c1:e4:97:46:7f:f4:e5:1a:a4:2a:63:28:7d:3d:dd: 58:9a:f4:53:dd:17:0f:18:50:8f:21:4f:7d:3d:10: 9a:5f:75:ca:87:2d:99:bb:e5:d7:2f:91:2f:52:06: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:42:FB:75:87:66:07:C1:3D:0E:52:EB:7C:18:7D:EE:95:B6:CA:A3 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:06:db:08:ba:01:5b:2d:e8:69:af:b2:23:be:cc:66:10:91: fe:06:a1:7c:21:4e:d3:6c:7b:16:7d:dc:e7:e8:61:db:62:0d: ef:19:52:07:1b:1d:54:c7:e1:e8:6a:25:06:8b:64:d0:a0:26: ba:62:60:b6:87:d4:47:5e:da:53:8f:4f:36:1b:bf:97:cb:d3: 1f:65:8b:9c:40:45:22:21:ae:02:0c:35:8a:45:94:6f:db:e1: 3d:3c:d6:f4:9c:3f:7d:19:3d:e9:b6:d3:d1:63:e2:f7:55:c0: 9d:47:f3:22:d3:81:bb:d9:0e:93:8b:b5:3f:01:cc:fb:0a:4a: 30:79:82:17:3c:16:28:e6:7e:b4:e9:9d:e2:fb:ca:82:8c:6d: 6b:06:ad:1c:64:6a:7b:49:b9:c1:c8:5f:e4:04:0e:84:bb:fc: 2e:75:5f:9c:e7:17:1e:f6:e4:02:5f:80:da:0d:95:af:61:53: ea:08:87:e9:1c:df:6b:47:d7:f9:59:0c:9a:fa:db:cf:e5:b0: 96:ba:87:c5:b0:b0:c9:4c:81:d2:c5:10:03:22:39:1c:a3:d3: 4b:0d:4a:3d:ef:32:25:ea:99:32:57:51:a8:9f:a4:bd:6a:5d: 99:f4:9a:a3:11:ea:a8:c3:91:9f:74:13:d1:c6:71:c1:be:7f: 6c:32:d3:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjUwNDA1MDMwNjE2WhcNMjUwNDEyMDMwNjE2WjAYMRYwFAYD VQQDEw02N2YwOWUyOC1jZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugJY39fiuVMDoJ3qWTQiZTnNqPAKuSiP3xJJoJs9OnAdlh4blowTEnAMudt2 +xRORaZDCE0XmcJwBcswCsUWc5NhcQ6XZ+B8uyul0myee56TGTd4HZCd0EDYeg86 fZTQNSK6qhS2BN92t2BFojKVDYVKzRVuXKHeXIegiHYI0lZj3Up6l36n9ISvL5Ba OUCrey2RNzJ4dSvUFYw41hcsLefjQVuGgBHKzycl8c5Ec5vfETkDFSv5e3LJT8iL 3H+rA6bFcfQh3EBMyNeJ4D1IxOrB5JdGf/TlGqQqYyh9Pd1YmvRT3RcPGFCPIU99 PRCaX3XKhy2Zu+XXL5EvUgY+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdC+3WH ZgfBPQ5S63wYfe6VtsqjMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVBtsIugFbLehpr7IjvsxmEJH+BqF8IU7TbHsWfdzn6GHbYg3vGVIH Gx1Ux+HoaiUGi2TQoCa6YmC2h9RHXtpTj082G7+Xy9MfZYucQEUiIa4CDDWKRZRv 2+E9PNb0nD99GT3pttPRY+L3VcCdR/Mi04G72Q6Ti7U/Acz7CkoweYIXPBYo5n60 6Z3i+8qCjG1rBq0cZGp7SbnByF/kBA6Eu/wudV+c5xce9uQCX4DaDZWvYVPqCIfp HN9rR9f5WQya+tvP5bCWuofFsLDJTIHSxRADIjkco9NLDUo97zIl6pkyV1Gon6S9 al2Z9JqjEeqow5GfdBPRxnHBvn9sMtMT -----END CERTIFICATE-----Generated at Sat Apr 5 19:25:38 2025 by rpki-client