$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft File: apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json) Hash identifier: Efir6hTjKytSEFCTnC88swHu2qlWfRV1I9Mb3/pcl/4= Subject key identifier: 73:2F:C9:04:14:4E:6C:EA:3F:0D:95:C2:1F:82:C1:E1:A6:96:21:67 Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 Certificate issuer: /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft Manifest number: 053A Signing time: Sun 20 Apr 2025 23:07:25 +0000 Manifest this update: Sun 20 Apr 2025 23:07:25 +0000 Manifest next update: Sun 27 Apr 2025 23:07:25 +0000 Files and hashes: 1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: W2yTfyayp5Fmmv5rRT5MJSSgZiRa4gAZm1kMD7OFCUA=) 2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: ZnpRalcn1+UDz0Qh9MVT7PEHG3mXFgwSlTQlnQVlTtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Validity Not Before: Apr 20 23:07:25 2025 GMT Not After : Apr 27 23:07:25 2025 GMT Subject: CN=68057e2d-1882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:51:5b:fe:46:a2:30:b1:8b:71:69:7f:70: 4e:c9:8e:c5:ec:c6:76:26:9e:08:5c:7c:ad:88:02: 9c:25:22:98:9b:3c:70:45:dc:5e:3d:e6:8c:71:d5: 34:c7:3b:79:c4:a3:9c:01:09:d1:82:7d:79:76:d2: 62:62:ed:6d:d5:3f:41:8b:ef:b3:ea:ca:e1:44:40: 35:4a:24:b1:3c:3a:8a:46:6a:ab:a7:b4:2d:c1:be: 91:24:64:13:97:24:c9:0a:ff:af:68:18:af:2a:cc: d8:14:d3:99:fc:5c:4b:c8:8a:7e:9d:21:fc:94:da: cd:bd:2d:2f:4a:b7:f6:69:ff:a6:a2:8a:9b:f9:c2: cf:c1:d8:e2:a3:3f:76:25:0f:fa:aa:9c:b1:e2:30: 73:84:00:b6:4a:1e:1f:e3:6c:6a:4c:3c:ef:74:d9: b3:5c:f6:75:af:09:38:9b:a1:e4:21:0d:9c:16:a0: f5:13:13:0c:70:8c:2d:65:0d:b2:5a:36:fa:86:54: 82:9e:19:f7:3b:77:b8:8f:fc:9f:43:e7:5d:1e:8c: 4f:02:fd:6d:f0:f1:bd:0a:be:7b:31:99:e7:23:7b: b5:34:d2:44:06:ac:43:03:48:4d:57:66:11:3d:cc: 63:ca:db:6d:e1:a2:95:50:27:47:ef:61:09:72:0b: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2F:C9:04:14:4E:6C:EA:3F:0D:95:C2:1F:82:C1:E1:A6:96:21:67 X509v3 Authority Key Identifier: keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:b1:c9:20:46:9e:27:bc:c4:e0:a7:a1:6f:8a:20:e3:5c: 20:4e:a9:fe:88:ff:34:d0:19:06:8c:d2:43:95:b3:01:e4:04: c2:9a:e7:75:13:0e:1a:1e:92:2a:f6:ea:25:a1:ed:83:d0:3b: 2c:92:b7:bb:5e:07:ed:3c:28:53:ba:d6:8b:91:3a:4f:72:56: a0:89:89:59:fd:3c:2e:00:9f:34:01:a2:d7:36:1f:69:23:34: aa:58:82:0e:65:36:39:10:7c:f8:b3:f6:c7:d2:84:18:6e:d6: 5b:2c:f3:df:1c:81:05:e9:a6:d9:5a:0e:b1:d1:af:04:23:d6: e9:09:e4:8f:1b:6d:20:5d:e5:77:8d:fa:14:9a:be:43:19:0d: c3:b8:3c:87:f6:3f:70:2d:7d:26:32:87:62:f8:42:31:4f:e7: ba:85:93:2b:3a:55:6d:9d:6d:6b:88:d8:4f:98:54:5b:60:ff: 86:98:35:30:26:56:49:b7:10:33:8e:db:ce:ad:a1:6e:86:87: 4b:40:72:b9:24:fb:af:2a:66:a5:0f:bd:3a:bf:99:75:96:34: 04:8d:77:15:58:37:a2:a5:3f:30:12:a8:fe:90:81:15:04:b8: c7:db:9c:f3:4a:8a:9f:16:be:39:e7:43:73:64:30:b9:4c:37: 0f:a8:9a:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBMEMxMTAvBgNVBAUTKDZBOTU0ODFDRThGNDBERDg4OTVEMUZCN0FFRTkwRTU5 NTlCQTgzQzEwHhcNMjUwNDIwMjMwNzI1WhcNMjUwNDI3MjMwNzI1WjAYMRYwFAYD VQQDEw02ODA1N2UyZC0xODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm5RW/5GojCxi3Fpf3BOyY7F7MZ2Jp4IXHytiAKcJSKYmzxwRdxePeaMcdU0 xzt5xKOcAQnRgn15dtJiYu1t1T9Bi++z6srhREA1SiSxPDqKRmqrp7Qtwb6RJGQT lyTJCv+vaBivKszYFNOZ/FxLyIp+nSH8lNrNvS0vSrf2af+mooqb+cLPwdjioz92 JQ/6qpyx4jBzhAC2Sh4f42xqTDzvdNmzXPZ1rwk4m6HkIQ2cFqD1ExMMcIwtZQ2y Wjb6hlSCnhn3O3e4j/yfQ+ddHoxPAv1t8PG9Cr57MZnnI3u1NNJEBqxDA0hNV2YR Pcxjyttt4aKVUCdH72EJcguebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMvyQQU TmzqPw2Vwh+CweGmliFnMB8GA1UdIwQYMBaAFGqVSBzo9A3YiV0ft67pDllZuoPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REEwQy9CNkRFMTMxMkYw NDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERkaUpYUi0zcnVrT1dWbTZn OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwVklIT2owRGRpSlhSLTNydWtPV1ZtNmc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REEwQy9CNkRFMTMxMkYwNDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERk aUpYUi0zcnVrT1dWbTZnOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9krHJIEaeJ7zE4Kehb4og41wgTqn+iP800BkGjNJDlbMB5ATCmud1 Ew4aHpIq9uoloe2D0Dsskre7XgftPChTutaLkTpPclagiYlZ/TwuAJ80AaLXNh9p IzSqWIIOZTY5EHz4s/bH0oQYbtZbLPPfHIEF6abZWg6x0a8EI9bpCeSPG20gXeV3 jfoUmr5DGQ3DuDyH9j9wLX0mModi+EIxT+e6hZMrOlVtnW1riNhPmFRbYP+GmDUw JlZJtxAzjtvOraFuhodLQHK5JPuvKmalD706v5l1ljQEjXcVWDeipT8wEqj+kIEV BLjH25zzSoqfFr4550NzZDC5TDcPqJqx -----END CERTIFICATE-----Generated at Tue Apr 22 16:38:27 2025 by rpki-client