$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: IAn5RQTtWfYTIvDlw4tE0fo5ApKxu1XagrXKCX9+D98= Subject key identifier: 8F:33:2A:93:E3:50:6C:11:06:55:D1:B4:83:52:0A:B3:09:BC:CC:4E Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 14 Signing time: Fri 11 Apr 2025 07:14:29 +0000 Manifest this update: Fri 11 Apr 2025 07:14:28 +0000 Manifest next update: Fri 18 Apr 2025 07:14:28 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: QwHc4Tifewvoupii+030lsPN7gStTTe3oxHSMcz490Q=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: Apr 11 07:14:28 2025 GMT Not After : Apr 18 07:14:28 2025 GMT Subject: CN=67f8c155-3979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:07:0e:12:be:db:7e:a0:0a:7a:57:07:6b: 80:82:aa:a1:d0:27:dd:b5:1f:1a:f5:46:5a:c7:e7: 37:ea:8a:d2:86:9b:f4:76:c9:2b:05:33:d0:74:76: b3:99:e5:3f:6f:dd:2d:b6:a8:c0:59:37:a4:66:a7: 85:3a:7c:c0:97:30:d7:ce:98:c4:14:9d:d4:44:ef: fd:81:62:63:77:27:4d:ea:5f:48:5d:d2:59:67:73: 48:e9:d9:68:62:2f:a2:1e:34:2a:41:6d:75:ce:e1: fb:10:67:23:c3:7a:7e:13:01:d7:22:c5:84:fc:87: 8e:30:82:b0:51:17:4d:c5:9a:52:0a:e5:23:d9:bc: ec:34:7f:e8:0c:2c:e3:97:40:4a:5a:e6:01:59:bd: e3:b4:c7:63:b2:71:b2:33:7b:79:8a:8c:85:e4:04: a6:0b:c7:b2:67:bd:16:11:b4:27:05:33:eb:14:b4: fb:cb:5f:d0:f1:d6:f8:b3:9c:fe:1e:e9:29:66:bc: 38:7c:7f:33:05:ea:82:55:b1:c6:75:aa:81:50:ab: 82:18:9c:2f:98:b8:b2:24:c6:80:1a:ca:9a:83:25: 72:90:85:b8:82:7d:27:63:6d:c7:0a:9d:47:00:5c: 10:5b:8e:69:3d:88:40:3e:4e:8d:3b:dd:bd:92:17: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:33:2A:93:E3:50:6C:11:06:55:D1:B4:83:52:0A:B3:09:BC:CC:4E X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:49:35:69:6d:0c:63:66:fb:29:20:62:fe:17:24:1d:f9:41: 95:db:3c:83:64:4e:a5:31:45:29:45:4b:0b:61:a1:4f:ba:c0: 6c:ea:02:0e:cc:b1:42:ab:15:3f:7a:50:7b:a5:f0:e1:d6:9b: 24:49:fa:97:21:b8:86:21:3c:63:7a:4a:26:70:65:65:c9:ed: be:c9:b7:6d:2e:b9:86:46:80:36:9d:05:2b:f1:31:d3:09:54: 27:03:70:79:d2:f8:5a:70:d4:36:e9:5c:ed:eb:1e:a2:9a:08: 1d:55:12:a8:5c:aa:2f:c2:63:69:1b:36:a6:ad:16:48:01:3e: 90:7b:f2:78:f3:18:bc:60:50:8f:49:84:0a:6d:17:5a:80:ca: 01:d5:02:e9:ab:e0:60:55:49:c4:a6:21:20:8a:f6:e5:ab:08: a1:9f:08:89:14:56:9e:d8:19:ed:cc:79:61:5e:17:ed:bb:b1: a4:48:13:52:71:83:e5:49:9c:0f:dc:f3:83:3a:f7:7e:a2:e2: fc:17:3e:60:31:3f:ad:5b:e2:3f:9f:69:b7:ef:5d:c8:b7:20: 04:39:42:e5:38:7d:4b:e6:ec:82:f9:09:7d:f7:30:51:33:8e: fc:f9:3a:f5:ac:34:cf:6d:9b:ac:91:34:bb:dd:11:b3:4b:66: c9:77:d9:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA0MTEwNzE0MjhaFw0yNTA0MTgwNzE0MjhaMBgxFjAUBgNV BAMTDTY3ZjhjMTU1LTM5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC05gcOEr7bfqAKelcHa4CCqqHQJ921Hxr1RlrH5zfqitKGm/R2ySsFM9B0drOZ 5T9v3S22qMBZN6Rmp4U6fMCXMNfOmMQUndRE7/2BYmN3J03qX0hd0llnc0jp2Whi L6IeNCpBbXXO4fsQZyPDen4TAdcixYT8h44wgrBRF03FmlIK5SPZvOw0f+gMLOOX QEpa5gFZveO0x2OycbIze3mKjIXkBKYLx7JnvRYRtCcFM+sUtPvLX9Dx1viznP4e 6SlmvDh8fzMF6oJVscZ1qoFQq4IYnC+YuLIkxoAaypqDJXKQhbiCfSdjbccKnUcA XBBbjmk9iEA+To073b2SF2OhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjzMqk+NQ bBEGVdG0g1IKswm8zE4wHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFdJNWltDGNm+ykgYv4XJB35QZXbPINkTqUxRSlFSwthoU+6wGzqAg7M sUKrFT96UHul8OHWmyRJ+pchuIYhPGN6SiZwZWXJ7b7Jt20uuYZGgDadBSvxMdMJ VCcDcHnS+Fpw1DbpXO3rHqKaCB1VEqhcqi/CY2kbNqatFkgBPpB78njzGLxgUI9J hAptF1qAygHVAumr4GBVScSmISCK9uWrCKGfCIkUVp7YGe3MeWFeF+27saRIE1Jx g+VJnA/c84M6936i4vwXPmAxP61b4j+fabfvXci3IAQ5QuU4fUvm7IL5CX33MFEz jvz5OvWsNM9tm6yRNLvdEbNLZsl32Xs= -----END CERTIFICATE-----Generated at Sat Apr 12 17:47:56 2025 by rpki-client