$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: /eS0mcG9bi/eIqm4BbnmzKc4ieAVF8Ir8eP6AuQufLI= Subject key identifier: 3D:A1:D7:05:94:9E:8F:2A:5E:1E:57:8D:55:1C:57:F1:E7:23:FC:0C Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 028E Signing time: Thu 17 Apr 2025 01:14:21 +0000 Manifest this update: Thu 17 Apr 2025 01:14:20 +0000 Manifest next update: Thu 24 Apr 2025 01:14:20 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: LFbsEChpKWCJGmge0N139ToOTXD96BE9HxCHiGi9Y7g=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Apr 17 01:14:20 2025 GMT Not After : Apr 24 01:14:20 2025 GMT Subject: CN=680055ec-cd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:84:b0:d4:59:9e:6a:b4:7e:e9:21:1b:11: c0:9e:02:87:a2:d9:74:8d:3b:94:e5:40:fd:fa:56: a8:40:dc:81:21:fc:46:34:64:ca:d7:e2:0d:fa:6c: c3:fa:ff:72:51:79:22:42:ae:95:6d:ce:da:f6:ff: bb:2e:f1:b6:86:48:52:e0:dd:d4:26:c5:17:57:21: fb:9b:a9:0c:fc:a1:7c:72:ff:b6:7f:2d:ea:bf:65: 46:fa:bc:89:c6:89:68:92:1b:f7:63:f3:58:e8:df: 6e:e9:95:0c:15:4c:10:91:b2:43:c3:9d:c6:38:db: d9:f0:1c:ea:0e:26:92:17:44:ed:7d:f7:4d:20:e0: 88:9b:9e:6e:14:96:a3:f4:08:44:47:d6:cc:57:f1: 13:38:92:73:ce:52:89:fe:f2:16:6c:21:7d:bf:2b: 14:a1:9f:a1:05:92:15:71:14:80:eb:34:e1:0a:45: f5:0c:d6:0f:d8:60:77:f6:3c:4e:65:7b:0d:d6:7d: 0f:85:33:c3:fc:eb:35:c7:7f:d5:b6:1f:ca:9e:f2: 08:96:ba:ae:5c:2b:75:16:fd:a4:53:86:dd:83:72: a7:a2:5b:37:70:50:46:c2:da:f2:3e:ee:90:99:7d: 1d:09:67:8e:7d:ea:57:71:d8:c1:4f:49:31:6e:db: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A1:D7:05:94:9E:8F:2A:5E:1E:57:8D:55:1C:57:F1:E7:23:FC:0C X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:88:a3:03:ad:74:91:c9:23:c3:d1:93:9f:71:46:94:2a:e1: a3:4f:46:46:9f:7e:24:6d:e1:10:91:6f:6f:41:e6:b6:7e:23: 31:d4:0c:9c:a1:25:6c:95:d9:ab:50:2e:49:09:49:27:11:6a: ff:c4:76:eb:73:3d:8d:ca:96:b6:1c:e8:c8:d4:dc:69:87:9e: c4:59:0d:7b:90:71:d7:d9:2d:15:7c:3d:3e:76:6e:a0:64:93: ac:f8:8a:66:60:3b:50:26:91:2f:21:f1:6b:81:da:f7:f6:43: 5d:5a:7c:59:49:f6:b5:38:ab:fe:39:76:9b:5c:7f:6e:e0:e9: e4:c3:6a:47:f2:a5:8f:42:cb:89:ac:89:71:2f:6d:59:0a:e1: 84:74:3b:85:6b:b4:5b:08:3a:7b:43:dd:bf:6c:c1:60:57:fa: e8:b7:77:05:32:aa:2a:93:cd:84:cd:1a:f0:cb:ba:23:5c:d8: 66:dd:99:7e:62:8e:1b:55:c3:1b:76:c9:ee:e9:e2:7a:fc:e3: 46:02:f6:79:11:4e:3b:1d:db:dc:c0:f0:f6:fc:19:8b:9c:eb: 29:65:6d:ca:58:ec:bd:be:ea:25:e1:4d:de:c3:5b:2c:24:5a: 87:50:5e:89:17:b1:b1:ce:6b:7b:16:60:f0:e6:9d:18:5e:aa: db:1f:b3:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwNDE3MDExNDIwWhcNMjUwNDI0MDExNDIwWjAYMRYwFAYD VQQDEw02ODAwNTVlYy1jZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19GEsNRZnmq0fukhGxHAngKHotl0jTuU5UD9+laoQNyBIfxGNGTK1+IN+mzD +v9yUXkiQq6Vbc7a9v+7LvG2hkhS4N3UJsUXVyH7m6kM/KF8cv+2fy3qv2VG+ryJ xolokhv3Y/NY6N9u6ZUMFUwQkbJDw53GONvZ8BzqDiaSF0TtffdNIOCIm55uFJaj 9AhER9bMV/ETOJJzzlKJ/vIWbCF9vysUoZ+hBZIVcRSA6zThCkX1DNYP2GB39jxO ZXsN1n0PhTPD/Os1x3/Vth/KnvIIlrquXCt1Fv2kU4bdg3Knols3cFBGwtryPu6Q mX0dCWeOfepXcdjBT0kxbtteFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2h1wWU no8qXh5XjVUcV/HnI/wMMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfiKMDrXSRySPD0ZOfcUaUKuGjT0ZGn34kbeEQkW9vQea2fiMx1Ayc oSVsldmrUC5JCUknEWr/xHbrcz2Nypa2HOjI1Nxph57EWQ17kHHX2S0VfD0+dm6g ZJOs+IpmYDtQJpEvIfFrgdr39kNdWnxZSfa1OKv+OXabXH9u4Onkw2pH8qWPQsuJ rIlxL21ZCuGEdDuFa7RbCDp7Q92/bMFgV/rot3cFMqoqk82EzRrwy7ojXNhm3Zl+ Yo4bVcMbdsnu6eJ6/ONGAvZ5EU47HdvcwPD2/BmLnOspZW3KWOy9vuol4U3ew1ss JFqHUF6JF7Gxzmt7FmDw5p0YXqrbH7OG -----END CERTIFICATE-----Generated at Fri Apr 18 02:16:18 2025 by rpki-client