$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: QRoY94MjyDupaXQh9ZctAuyK8faNRha8jL0cc052NxA= Subject key identifier: 8C:31:25:D5:35:08:98:63:AF:3F:20:D7:13:47:F8:97:C1:05:15:B5 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 18ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 18E3 Signing time: Fri 04 Apr 2025 16:31:26 +0000 Manifest this update: Fri 04 Apr 2025 16:31:25 +0000 Manifest next update: Fri 11 Apr 2025 16:31:25 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: z3S/tCFCyZrKUQsAwvLGaXGKWdyPmSZToHg6GaiFaw4=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: ee6x0IQnWxU26dMdjthmXNqeRQ+45nsz1rLe7eGNses=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6381 (0x18ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61 Validity Not Before: Apr 4 16:31:25 2025 GMT Not After : Apr 11 16:31:25 2025 GMT Subject: CN=67f0095e-806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:96:a2:2b:e5:76:7c:20:bb:8b:6b:80:e8: 14:fc:d2:d9:e0:5c:2c:c4:62:7f:5b:b1:3a:e7:d9: 6a:9d:4b:45:44:67:fc:f8:1f:97:9d:d1:80:13:91: ae:88:00:b3:8b:bc:07:14:5d:a3:0d:df:4f:fc:d3: 99:b1:98:7e:f8:38:62:9d:01:3e:db:e8:46:b8:25: d3:82:82:02:28:e0:16:ae:af:2c:4f:c1:f9:04:20: f7:c9:9a:ec:d7:b3:06:19:cc:53:5b:e6:23:4e:56: 3b:ca:6d:f1:45:45:15:2c:2e:49:d0:48:63:2a:59: 53:ff:93:20:d6:6e:e2:ed:ef:ab:ed:5b:c4:8d:cd: 45:43:62:df:de:26:b2:5a:d1:87:4f:89:1e:18:9b: da:44:bf:d8:ba:4e:86:c0:14:8f:0c:dc:a2:52:25: 66:72:85:6a:88:c5:c6:4c:1c:48:62:2c:50:99:35: 81:57:48:95:cc:1e:3a:06:bb:33:e1:dc:fd:0d:a5: b3:73:34:df:79:5d:34:02:76:70:f0:47:28:97:35: 06:2e:73:01:68:40:0b:28:f5:b1:1e:04:c6:b6:17: 97:61:30:21:3c:99:ee:70:32:6e:d2:64:b5:87:a4: 4f:3b:ee:11:98:b4:6e:d1:e8:3b:0a:f7:7b:db:a6: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:31:25:D5:35:08:98:63:AF:3F:20:D7:13:47:F8:97:C1:05:15:B5 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:1e:7e:07:46:f4:a9:0a:14:95:ab:ac:eb:49:c4:4a:1c: fe:e3:3d:76:4a:8c:6c:04:69:f7:2e:eb:9d:cb:ce:a3:e7:5f: bf:f4:2d:3a:be:41:bf:cf:35:5a:c9:14:c6:aa:4a:29:6c:a3: c9:0f:0f:a0:4a:e4:d8:4d:24:f2:6d:f5:63:13:c5:31:34:74: 18:d7:b8:4a:35:0e:1a:7e:da:da:7c:0f:7f:5d:ac:00:9c:e0: 92:46:67:b3:2b:7c:05:a7:61:a9:a4:97:3a:5f:a4:24:8d:1d: f5:3b:78:7c:f6:47:b7:f9:67:a3:ad:3f:6e:f8:35:15:20:f2: fd:b0:97:e3:ec:15:c2:14:d9:03:d4:20:3b:2f:97:05:36:fb: 4a:68:da:b3:24:4e:1e:b1:83:6f:01:5e:ca:c0:72:02:70:53: 6f:37:98:76:09:b9:08:93:e7:ac:8f:9c:e6:20:c7:1b:86:14: 4b:9e:bf:d1:b3:0d:67:28:80:d8:9f:a5:5b:f9:07:6c:e3:05: f9:52:cd:d7:c9:bb:db:39:1b:91:19:d8:50:97:f7:ad:9e:65: 11:73:3b:c3:40:d5:45:4c:ed:03:26:c9:7e:2c:32:23:6f:7f: a8:2c:27:2e:06:ea:56:5a:16:7b:9f:eb:cb:e2:be:0d:73:9a: c4:1f:cb:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUwNDA0MTYzMTI1WhcNMjUwNDExMTYzMTI1WjAYMRYwFAYD VQQDEw02N2YwMDk1ZS04MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ICWoivldnwgu4trgOgU/NLZ4FwsxGJ/W7E659lqnUtFRGf8+B+XndGAE5Gu iACzi7wHFF2jDd9P/NOZsZh++DhinQE+2+hGuCXTgoICKOAWrq8sT8H5BCD3yZrs 17MGGcxTW+YjTlY7ym3xRUUVLC5J0EhjKllT/5Mg1m7i7e+r7VvEjc1FQ2Lf3iay WtGHT4keGJvaRL/Yuk6GwBSPDNyiUiVmcoVqiMXGTBxIYixQmTWBV0iVzB46Brsz 4dz9DaWzczTfeV00AnZw8EcolzUGLnMBaEALKPWxHgTGtheXYTAhPJnucDJu0mS1 h6RPO+4RmLRu0eg7Cvd726bl6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwxJdU1 CJhjrz8g1xNH+JfBBRW1MB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCneR5+B0b0qQoUlaus60nEShz+4z12SoxsBGn3Luudy86j51+/9C06 vkG/zzVayRTGqkopbKPJDw+gSuTYTSTybfVjE8UxNHQY17hKNQ4aftrafA9/XawA nOCSRmezK3wFp2GppJc6X6QkjR31O3h89ke3+WejrT9u+DUVIPL9sJfj7BXCFNkD 1CA7L5cFNvtKaNqzJE4esYNvAV7KwHICcFNvN5h2CbkIk+esj5zmIMcbhhRLnr/R sw1nKIDYn6Vb+Qds4wX5Us3XybvbORuRGdhQl/etnmURczvDQNVFTO0DJsl+LDIj b3+oLCcuBupWWhZ7n+vL4r4Nc5rEH8tC -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:32 2025 by rpki-client