$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json) Hash identifier: qriljm8Kpcyyf67gYL9M7sCkdJ0pKSgdWakn30ZnuSk= Subject key identifier: 16:CF:55:BE:C4:78:8D:59:45:E8:B4:3C:A8:D2:FD:CD:CA:79:E7:1D Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft Manifest number: 014B Signing time: Sat 05 Apr 2025 03:36:38 +0000 Manifest this update: Sat 05 Apr 2025 03:36:38 +0000 Manifest next update: Sat 12 Apr 2025 03:36:38 +0000 Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: 7SXL5sUbWimWsygl5qobL8aqYZVonteb2uxNGMf7HS0=) 2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: SF9Y/S/Ql9q4YuiPXmmr85flblCi8Ls3X2BfxxKztwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E293 Validity Not Before: Apr 5 03:36:38 2025 GMT Not After : Apr 12 03:36:38 2025 GMT Subject: CN=67f0a546-87c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:eb:51:d6:7a:d2:ef:24:5b:e6:7d:44:b5: 0c:9c:34:bb:03:c4:14:c5:23:27:72:8b:f9:9f:95: c2:31:41:19:d2:77:f8:2e:f7:96:aa:18:6d:29:f9: 51:b7:01:b1:73:63:da:da:78:cb:41:ac:17:f0:37: 56:d4:9d:71:2e:ef:d6:6d:ea:b3:66:d5:86:8b:da: ed:3a:09:e1:48:73:8e:4a:4c:79:2d:ed:5b:7c:06: a1:f2:a6:e7:d5:54:74:69:d9:e0:63:9e:78:b0:d2: d6:f6:c1:75:d7:53:19:ed:c5:43:be:17:b5:a8:23: a2:77:e3:0a:45:91:ed:11:77:c4:49:df:36:cb:4a: b0:cb:c0:1b:2b:33:85:66:a5:80:28:9e:d3:0d:de: 6b:b5:6b:4a:6e:26:96:5a:8c:23:c9:cb:f4:46:c7: 83:6f:40:0c:ff:2d:07:d1:cc:be:96:28:80:75:03: 84:10:ea:22:55:a1:d8:3a:f8:15:45:be:7c:51:6d: 8a:1d:c6:73:35:71:b6:f7:23:43:f7:78:43:08:e1: 55:79:a8:1a:ee:0e:28:79:26:4c:b5:f4:b9:17:b6: ad:66:a3:bb:f6:dc:d5:6e:d2:b5:a8:07:8c:3a:dc: 91:dd:2d:07:d0:6b:58:67:7b:b0:d6:78:f3:66:2b: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:55:BE:C4:78:8D:59:45:E8:B4:3C:A8:D2:FD:CD:CA:79:E7:1D X509v3 Authority Key Identifier: keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2b:8f:57:37:65:32:41:de:34:b9:10:49:4f:14:b1:6a:84: e3:48:d9:52:a8:34:1d:90:b9:44:18:1f:3b:bc:67:95:3e:51: 7b:53:f1:79:b7:f6:11:aa:72:16:ce:be:ce:ba:3c:fa:0a:6d: 8a:64:b0:5e:89:00:e3:bc:96:b3:93:86:7f:ce:9f:65:60:63: 0e:bd:b2:d6:f4:c1:eb:bb:74:75:a0:37:37:a7:ef:8d:b9:91: 99:5b:ab:fc:5c:c3:27:8b:98:3e:4d:eb:4a:d7:f3:23:f6:c3: 9e:4b:0b:c3:aa:b4:a4:4a:94:47:99:ac:76:cd:f5:2d:dd:93: 6e:8c:7c:a0:18:2b:2a:f8:1e:df:1d:77:e9:fc:d8:ad:e2:a1: b3:ab:c8:be:dc:01:48:ca:0e:16:83:7e:e3:50:69:06:41:0b: 41:b6:8f:bc:9f:3d:1c:4d:56:b1:6a:e2:07:6d:ee:1f:ba:f8: fc:e4:69:a0:d7:a8:be:21:40:27:e6:ee:b5:49:5c:1d:61:47: 19:bd:16:01:41:f6:51:10:bb:ff:23:cc:06:68:ee:fa:71:ba: 95:cb:dd:70:e0:02:81:ff:42:b1:28:e9:ae:11:f0:72:87:04: 75:19:ce:c7:40:4e:0e:5d:17:c5:1c:48:7e:d6:e3:46:68:d8: 76:69:9c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3 MkZGRDE4NDkwHhcNMjUwNDA1MDMzNjM4WhcNMjUwNDEyMDMzNjM4WjAYMRYwFAYD VQQDEw02N2YwYTU0Ni04N2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGbrUdZ60u8kW+Z9RLUMnDS7A8QUxSMncov5n5XCMUEZ0nf4LveWqhhtKflR twGxc2Pa2njLQawX8DdW1J1xLu/WbeqzZtWGi9rtOgnhSHOOSkx5Le1bfAah8qbn 1VR0adngY554sNLW9sF111MZ7cVDvhe1qCOid+MKRZHtEXfESd82y0qwy8AbKzOF ZqWAKJ7TDd5rtWtKbiaWWowjycv0RseDb0AM/y0H0cy+liiAdQOEEOoiVaHYOvgV Rb58UW2KHcZzNXG29yND93hDCOFVeaga7g4oeSZMtfS5F7atZqO79tzVbtK1qAeM OtyR3S0H0GtYZ3uw1njzZisLeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbPVb7E eI1ZRei0PKjS/c3KeecdMB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3 REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm TWpMNDE3QzRPVnB5XzlHRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArK49XN2UyQd40uRBJTxSxaoTjSNlSqDQdkLlEGB87vGeVPlF7U/F5 t/YRqnIWzr7Oujz6Cm2KZLBeiQDjvJazk4Z/zp9lYGMOvbLW9MHru3R1oDc3p++N uZGZW6v8XMMni5g+TetK1/Mj9sOeSwvDqrSkSpRHmax2zfUt3ZNujHygGCsq+B7f HXfp/Nit4qGzq8i+3AFIyg4Wg37jUGkGQQtBto+8nz0cTVaxauIHbe4fuvj85Gmg 16i+IUAn5u61SVwdYUcZvRYBQfZRELv/I8wGaO76cbqVy91w4AKB/0KxKOmuEfBy hwR1Gc7HQE4OXRfFHEh+1uNGaNh2aZye -----END CERTIFICATE-----Generated at Mon Apr 7 01:45:14 2025 by rpki-client