$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft File: i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json) Hash identifier: Ws7KEdsr6w6Dp3H/mLsqBimsCucxg9mRZjNtE0FyJSE= Subject key identifier: 89:1A:9A:98:E0:D6:78:76:27:C6:9B:3C:66:9B:43:31:81:9D:9E:8F Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 Certificate issuer: /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft Manifest number: 145A Signing time: Fri 04 Apr 2025 18:49:23 +0000 Manifest this update: Fri 04 Apr 2025 18:49:23 +0000 Manifest next update: Fri 11 Apr 2025 18:49:23 +0000 Files and hashes: 1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: OkA0VAHGJrsJhmL/74seAeaSHGz0pVvMv52NWOH0dqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04 Validity Not Before: Apr 4 18:49:23 2025 GMT Not After : Apr 11 18:49:23 2025 GMT Subject: CN=67f029b3-0833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:02:80:08:7e:b7:55:fa:1b:eb:99:dd:f0: ac:27:b9:55:78:63:b0:54:98:4c:dd:b5:c2:dd:27: ba:40:50:0d:83:91:2a:6b:d0:58:4c:f9:06:b0:3f: c9:fb:d6:6f:8f:15:f5:b0:78:75:a1:92:12:f2:09: 6d:51:09:c6:04:1c:c2:03:b4:67:d5:16:97:b6:8e: b7:45:d3:3e:ff:55:81:46:c4:27:06:1e:be:89:f2: 7a:0c:7f:60:b8:29:7e:99:b7:22:a3:5b:d3:35:f8: eb:91:d7:d0:06:d8:0a:75:61:5f:b5:7c:ad:8a:ed: ce:fa:68:8b:c2:f7:1c:02:7a:5b:38:09:17:e8:e3: 85:3f:b6:4e:97:4c:24:b7:4f:77:f3:e9:90:59:29: b0:bc:00:43:55:f1:23:cd:38:2e:ea:39:bf:82:7f: 12:a3:ac:56:2e:ea:15:93:61:1c:d3:a6:88:0b:b9: 5c:5e:64:2e:33:e0:67:de:a7:80:b3:82:f9:5a:d5: ec:87:b7:bc:20:03:a3:96:cb:26:40:83:e8:20:d2: 1d:90:53:2e:e5:b3:38:9a:23:71:e7:9a:c0:e0:65: 39:9c:49:be:6a:9a:d7:ba:e4:63:d0:57:f8:95:f7: 10:48:ad:13:e0:a7:b7:69:e0:94:c6:ea:a5:b7:c0: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:9A:98:E0:D6:78:76:27:C6:9B:3C:66:9B:43:31:81:9D:9E:8F X509v3 Authority Key Identifier: keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:75:42:96:1a:16:a3:53:eb:66:e5:a5:8f:ce:86:21:15:47: 28:96:1e:c5:48:73:1e:87:b8:03:75:21:4b:e0:9d:f4:cb:1d: b7:19:2f:c4:91:ae:55:0a:06:af:b3:ff:c3:3d:fa:23:6e:45: dd:db:ac:be:a4:44:fa:14:01:b9:6f:81:a5:60:4f:c5:60:54: 2c:54:6f:61:8f:62:10:e3:70:63:cc:af:bc:67:24:3c:66:24: 68:58:c6:03:fb:e9:4a:04:65:ba:a8:13:e4:24:24:e7:ac:a9: 8e:dd:cb:97:36:3d:7e:91:e7:0e:d1:c4:dc:f7:c1:f1:a2:88: 72:b6:ad:28:3f:f9:6a:29:30:8e:42:ef:fc:e3:4c:d8:34:2c: d2:d4:c3:db:cc:a0:5d:a7:08:4e:93:4b:e2:06:64:3b:47:bb: 2b:3e:91:3a:b5:21:c4:26:47:7e:af:05:63:86:0f:e9:b8:71: 7f:6b:e8:25:d7:d2:f3:2c:d9:47:fa:a8:64:16:21:02:90:18: b0:04:c3:40:39:b2:9d:36:22:43:cd:24:d9:03:c2:0e:32:73: c2:16:52:22:52:fe:99:4e:a1:2d:8b:b2:db:77:1d:e8:b5:45: 6f:6a:7d:eb:70:04:0b:49:56:e4:2f:6c:8c:dd:72:d8:8a:f2: c7:1a:ae:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF ODQ1NkQyOTAwHhcNMjUwNDA0MTg0OTIzWhcNMjUwNDExMTg0OTIzWjAYMRYwFAYD VQQDEw02N2YwMjliMy0wODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19ACgAh+t1X6G+uZ3fCsJ7lVeGOwVJhM3bXC3Se6QFANg5Eqa9BYTPkGsD/J +9ZvjxX1sHh1oZIS8gltUQnGBBzCA7Rn1RaXto63RdM+/1WBRsQnBh6+ifJ6DH9g uCl+mbcio1vTNfjrkdfQBtgKdWFftXytiu3O+miLwvccAnpbOAkX6OOFP7ZOl0wk t0938+mQWSmwvABDVfEjzTgu6jm/gn8So6xWLuoVk2Ec06aIC7lcXmQuM+Bn3qeA s4L5WtXsh7e8IAOjlssmQIPoINIdkFMu5bM4miNx55rA4GU5nEm+aprXuuRj0Ff4 lfcQSK0T4Ke3aeCUxuqlt8AP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkampjg 1nh2J8abPGabQzGBnZ6PMB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQdUKWGhajU+tm5aWPzoYhFUcolh7FSHMeh7gDdSFL4J30yx23GS/E ka5VCgavs//DPfojbkXd26y+pET6FAG5b4GlYE/FYFQsVG9hj2IQ43BjzK+8ZyQ8 ZiRoWMYD++lKBGW6qBPkJCTnrKmO3cuXNj1+kecO0cTc98Hxoohytq0oP/lqKTCO Qu/840zYNCzS1MPbzKBdpwhOk0viBmQ7R7srPpE6tSHEJkd+rwVjhg/puHF/a+gl 19LzLNlH+qhkFiECkBiwBMNAObKdNiJDzSTZA8IOMnPCFlIiUv6ZTqEti7Lbdx3o tUVvan3rcAQLSVbkL2yM3XLYivLHGq6A -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:43 2025 by rpki-client