$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: Uh9g4JtRA+P5VU4Av/AJp0MkO7ZxymJa1hAEsnEnmw4= Subject key identifier: 2C:E2:52:00:A0:8E:1E:CA:AA:0F:84:55:70:B7:45:01:0C:0B:44:31 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 07E7 Signing time: Wed 02 Apr 2025 20:59:23 +0000 Manifest this update: Wed 02 Apr 2025 20:59:22 +0000 Manifest next update: Wed 09 Apr 2025 20:59:22 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: mt8kWsEUbXxqWVvB4z3gDcSwTaYJ1T4XL6IkQ3WWWdY=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82 Validity Not Before: Apr 2 20:59:22 2025 GMT Not After : Apr 9 20:59:22 2025 GMT Subject: CN=67eda52b-d72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:0d:cd:cb:5c:b9:45:5e:43:91:e3:86:6e: 0b:a6:41:03:9e:4f:09:7d:a8:80:91:8a:3d:40:b7: 7c:06:2c:cd:57:e8:5e:d5:26:58:64:21:64:a7:2c: d3:b2:61:16:91:4c:69:23:7b:1b:e2:53:f3:9a:49: 7f:3d:09:3f:6c:07:31:53:28:c3:47:15:74:f1:fa: 28:a9:65:4d:bf:ef:48:b6:c9:40:9b:d6:97:c5:33: ac:08:73:86:f9:ce:a1:d0:f2:0b:f0:90:e3:d9:2c: 84:56:e0:80:b2:0b:65:4f:96:f3:a1:a4:66:6d:02: 80:f7:78:13:ac:2e:ac:92:ad:23:c5:3b:12:9c:ac: cb:42:7b:e0:5f:d5:81:2f:23:5e:2d:2b:af:ea:21: d4:d7:2e:b7:82:74:ef:4c:0c:4d:64:eb:7e:04:b3: 20:3f:5f:e8:36:57:86:77:65:49:58:29:6e:77:03: d5:f4:3a:d5:7f:e1:ac:16:75:50:06:96:53:f2:cf: 5f:d1:2d:e1:cb:02:de:8d:e0:80:ff:9c:37:51:23: 81:2a:29:ba:5a:71:fe:15:34:76:ba:35:a7:b1:7d: 55:f2:88:a4:91:66:e6:d3:9e:5b:1e:1f:3a:79:1b: 3b:ac:06:7e:49:40:c4:8c:bf:13:36:22:cf:7a:7f: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E2:52:00:A0:8E:1E:CA:AA:0F:84:55:70:B7:45:01:0C:0B:44:31 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e4:c4:9c:2e:bf:1a:e0:0e:db:cb:e5:91:f2:81:2b:df:3e: 76:cc:94:96:8a:c8:3c:ca:db:fc:a4:7b:21:2b:61:8c:79:64: 75:14:f7:79:b7:e2:51:eb:8b:b2:85:54:51:ad:12:49:fa:5a: 0e:54:11:7f:e0:5f:30:8d:2e:e7:8b:54:2f:bd:2c:69:8c:b4: dc:a3:fa:24:1e:90:8b:39:36:8d:fa:e8:8a:49:ac:7a:c5:a3: e2:20:de:88:f7:c9:5d:41:e0:cb:fd:e3:ae:ba:22:5c:26:10: 90:29:57:fa:de:59:e5:86:eb:28:75:d9:cf:0b:05:f3:fb:d3: f7:19:61:ec:65:1d:7c:2a:9c:c7:62:89:65:2c:e4:7c:da:fb: ab:a0:9b:f4:21:e5:70:fb:59:a3:72:96:ff:63:b3:a6:ef:b8: c7:ca:3a:50:f1:92:48:6c:b8:40:ff:97:94:9a:08:d3:ff:28: 81:35:2c:42:78:a5:17:34:0e:c0:cf:d0:5e:c3:07:43:be:2a: c9:1e:ab:0c:06:26:16:53:38:7e:cd:3b:78:79:1c:43:6c:75: 24:39:f5:a9:36:f7:80:df:33:30:b4:5e:e3:2c:e1:9e:bf:9b: 3d:86:52:88:78:fd:33:47:34:89:00:a4:81:9d:6a:e4:e8:37: af:f0:1f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUwNDAyMjA1OTIyWhcNMjUwNDA5MjA1OTIyWjAYMRYwFAYD VQQDEw02N2VkYTUyYi1kNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOcNzctcuUVeQ5Hjhm4LpkEDnk8JfaiAkYo9QLd8BizNV+he1SZYZCFkpyzT smEWkUxpI3sb4lPzmkl/PQk/bAcxUyjDRxV08fooqWVNv+9ItslAm9aXxTOsCHOG +c6h0PIL8JDj2SyEVuCAsgtlT5bzoaRmbQKA93gTrC6skq0jxTsSnKzLQnvgX9WB LyNeLSuv6iHU1y63gnTvTAxNZOt+BLMgP1/oNleGd2VJWCludwPV9DrVf+GsFnVQ BpZT8s9f0S3hywLejeCA/5w3USOBKim6WnH+FTR2ujWnsX1V8oikkWbm055bHh86 eRs7rAZ+SUDEjL8TNiLPen9e/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCziUgCg jh7Kqg+EVXC3RQEMC0QxMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh5MScLr8a4A7by+WR8oEr3z52zJSWisg8ytv8pHshK2GMeWR1FPd5 t+JR64uyhVRRrRJJ+loOVBF/4F8wjS7ni1QvvSxpjLTco/okHpCLOTaN+uiKSax6 xaPiIN6I98ldQeDL/eOuuiJcJhCQKVf63lnlhusoddnPCwXz+9P3GWHsZR18KpzH YollLOR82vuroJv0IeVw+1mjcpb/Y7Om77jHyjpQ8ZJIbLhA/5eUmgjT/yiBNSxC eKUXNA7Az9BewwdDvirJHqsMBiYWUzh+zTt4eRxDbHUkOfWpNveA3zMwtF7jLOGe v5s9hlKIeP0zRzSJAKSBnWrk6Dev8B8m -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:16 2025 by rpki-client