$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: bMzN2tnfLieX27SSXhanhjQ0IPoSt60NnWTaRY2/4ZQ= Subject key identifier: E5:25:66:02:8F:7F:A9:83:00:F4:AE:69:F1:90:36:CC:7F:1D:6E:3F Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 0849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 0842 Signing time: Tue 08 Apr 2025 20:36:29 +0000 Manifest this update: Tue 08 Apr 2025 20:36:28 +0000 Manifest next update: Tue 15 Apr 2025 20:36:28 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: h536bflk174wyA1lejdrNktoIucVxhlIHI0dl+PqPuo=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: p0a0nQBisH4VKwtpLEiKDNLpUVAu9yIvpOIZZoB51RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3 Validity Not Before: Apr 8 20:36:28 2025 GMT Not After : Apr 15 20:36:28 2025 GMT Subject: CN=67f588cc-0e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:87:12:95:21:3a:51:74:43:1a:fc:fa:ff: 0a:e6:a8:ec:47:aa:b0:0b:7a:63:a8:b2:83:7c:ef: 7f:51:33:d7:e2:4f:ea:3c:63:cf:46:f2:a5:17:98: 29:d9:33:0a:6a:44:13:c0:15:5e:6e:e6:a7:db:6d: 5a:5a:d8:aa:40:64:e1:cf:9d:9f:f9:c6:3b:fb:23: ff:c4:a2:1e:e7:a8:a9:6b:b2:0d:32:e4:0e:d6:a5: 53:5b:a2:e7:61:6e:41:18:58:ad:b3:a1:09:fa:9b: 5a:f9:7e:59:c0:1c:f0:86:db:af:c3:79:45:a0:49: db:31:e3:0b:0b:96:5d:d8:a8:e8:32:1e:12:6a:3d: 66:73:7c:60:5d:3b:55:a7:54:f5:a0:48:05:bc:11: d4:8e:1a:d1:d3:5a:e3:a9:75:36:95:31:8b:8d:00: 18:cb:95:86:bc:99:e2:6b:51:80:c1:bf:32:15:a1: 3b:4d:5e:03:ad:4c:a1:3b:3c:ce:00:7e:1a:2d:01: 2c:b5:ec:e4:56:76:25:a0:f9:28:12:a8:72:e7:14: 52:a0:49:b7:f3:33:58:a0:ce:e7:98:f5:1b:54:8e: 0f:f5:b8:9c:49:17:74:f3:fa:04:ac:33:aa:d2:1b: 01:bf:c6:29:10:02:c6:3e:27:7a:de:30:b5:f5:46: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:66:02:8F:7F:A9:83:00:F4:AE:69:F1:90:36:CC:7F:1D:6E:3F X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:03:8a:65:75:10:4b:d7:45:22:11:44:d8:70:cb:4e:06:34: 3a:9a:71:11:ab:ef:71:b9:c5:80:c8:f7:6b:4f:f0:93:5f:d6: 0e:ec:3c:b3:ee:21:ba:f4:76:20:e1:96:79:a5:08:87:e9:b4: 25:09:8b:3d:20:fc:de:d5:ed:ee:90:5e:b1:29:91:35:6d:77: 11:16:b6:17:a9:02:a7:f6:06:6d:24:a9:93:b1:52:6e:ce:1e: 61:fb:1f:e0:bb:9d:d7:bc:83:30:a9:18:eb:dc:e4:19:28:6a: ba:93:7b:d9:1a:ad:b0:2c:50:3c:e0:2f:21:9b:b8:54:ed:ee: c3:a5:e8:23:93:28:ea:f9:70:3b:62:ab:92:22:63:bf:a9:c5: e9:04:2c:5e:f9:42:75:d9:51:45:46:cb:9b:c6:b9:89:f4:a3: 6b:66:44:4e:2b:80:23:1a:6b:ee:72:00:89:5a:d1:fc:4e:47: e2:28:19:df:96:65:a6:39:f4:f5:f3:e1:ff:bf:b4:a6:b9:0f: bf:c4:5f:75:a1:bb:4b:51:8c:2e:c3:1f:83:f8:ce:ec:a2:97: c5:fd:57:8c:a1:e6:13:ca:3b:ef:34:08:33:7d:54:8e:c9:4f: bc:f9:30:80:51:59:d2:6c:57:f4:a3:de:55:26:70:3e:92:a2: 55:c8:1f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUwNDA4MjAzNjI4WhcNMjUwNDE1MjAzNjI4WjAYMRYwFAYD VQQDEw02N2Y1ODhjYy0wZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOSHEpUhOlF0Qxr8+v8K5qjsR6qwC3pjqLKDfO9/UTPX4k/qPGPPRvKlF5gp 2TMKakQTwBVebuan221aWtiqQGThz52f+cY7+yP/xKIe56ipa7INMuQO1qVTW6Ln YW5BGFits6EJ+pta+X5ZwBzwhtuvw3lFoEnbMeMLC5Zd2KjoMh4Saj1mc3xgXTtV p1T1oEgFvBHUjhrR01rjqXU2lTGLjQAYy5WGvJnia1GAwb8yFaE7TV4DrUyhOzzO AH4aLQEstezkVnYloPkoEqhy5xRSoEm38zNYoM7nmPUbVI4P9bicSRd08/oErDOq 0hsBv8YpEALGPid63jC19UZ0HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUlZgKP f6mDAPSuafGQNsx/HW4/MB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKA4pldRBL10UiEUTYcMtOBjQ6mnERq+9xucWAyPdrT/CTX9YO7Dyz 7iG69HYg4ZZ5pQiH6bQlCYs9IPze1e3ukF6xKZE1bXcRFrYXqQKn9gZtJKmTsVJu zh5h+x/gu53XvIMwqRjr3OQZKGq6k3vZGq2wLFA84C8hm7hU7e7Dpegjkyjq+XA7 YquSImO/qcXpBCxe+UJ12VFFRsubxrmJ9KNrZkROK4AjGmvucgCJWtH8TkfiKBnf lmWmOfT18+H/v7SmuQ+/xF91obtLUYwuwx+D+M7sopfF/VeMoeYTyjvvNAgzfVSO yU+8+TCAUVnSbFf0o95VJnA+kqJVyB8B -----END CERTIFICATE-----Generated at Wed Apr 9 09:50:03 2025 by rpki-client