$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json) Hash identifier: SGgPgVN5PNX3X62a0hQb0o/KK5AuERvR9hrlqootPU4= Subject key identifier: 98:4C:24:F4:EB:24:71:ED:55:07:3E:62:33:78:F9:40:1D:7F:8B:80 Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft Manifest number: 0716 Signing time: Fri 18 Apr 2025 21:53:49 +0000 Manifest this update: Fri 18 Apr 2025 21:53:49 +0000 Manifest next update: Fri 25 Apr 2025 21:53:49 +0000 Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: R7B7fnsei8J4NewxNi8S3pz/ecQ0wzEewc04w3KZEaE=) 2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: 3vNGkA3tCUjQbATswchBY3GI0Vd54z+gZRifmc/PxUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Apr 18 21:53:49 2025 GMT Not After : Apr 25 21:53:49 2025 GMT Subject: CN=6802c9ed-c636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:31:e9:68:36:22:45:54:c4:c5:df:11:90:6d: 61:e1:d4:2d:77:40:c3:49:30:73:7f:29:b4:1b:75: f2:be:c0:23:f1:26:62:36:a2:4c:21:3a:a0:54:88: b5:8a:b7:54:27:60:58:2f:a5:39:ce:d7:e1:bc:2d: 58:9d:d9:be:df:58:d0:30:0d:f5:3c:59:1a:2a:fb: f2:d6:2d:c2:f2:43:30:d4:0d:66:69:8c:5a:6f:7c: 39:aa:a1:ae:b1:fb:3f:94:f9:c9:4a:72:06:38:01: bc:55:59:11:01:bd:90:eb:86:d3:5d:11:60:bc:57: c6:12:0d:19:d1:53:04:d5:59:56:e8:bb:80:4f:db: b2:6a:35:06:2a:24:65:13:19:6c:b7:64:25:76:c3: 70:6d:b7:f7:87:05:28:f8:0c:96:c0:6c:70:93:02: 90:56:40:a6:fc:d8:e2:68:04:e6:ea:84:65:77:ed: 77:4c:20:d0:a7:32:17:f9:ee:2a:8a:6b:6a:90:ba: 49:7f:d9:d6:da:74:23:92:6a:69:fe:56:8e:34:15: 7a:9b:7c:4d:39:56:ce:12:a9:27:28:4a:2b:c1:78: fa:18:ac:d5:2c:bc:a1:0c:3e:1a:c5:ef:38:93:eb: dc:46:e1:cf:c8:8d:6d:57:25:45:75:ad:d6:5c:af: 51:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:24:F4:EB:24:71:ED:55:07:3E:62:33:78:F9:40:1D:7F:8B:80 X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fb:98:9a:3d:14:b7:5c:c6:78:b3:9d:f8:c4:9b:35:5c:2c: ef:32:1f:14:52:07:ba:40:3a:61:be:4a:0e:84:28:bf:4b:e0: b2:f1:a6:3f:31:50:ae:c3:93:34:4c:f7:05:51:e1:33:c5:fa: 60:c7:78:5b:4a:ae:9c:62:a9:8c:3b:29:75:0e:5c:89:48:60: 54:48:d4:04:4b:55:06:59:33:e6:fb:27:93:4d:6c:49:b0:66: a6:0e:13:a6:cb:38:02:2c:33:e0:22:40:ee:7f:a0:62:60:7d: 61:de:b3:93:46:42:66:9a:f1:35:a0:54:e6:70:63:95:e4:31: d1:84:d9:12:97:dc:1c:9c:c5:99:52:d5:8b:c4:64:f0:fd:69: 32:08:62:4e:ba:da:2e:11:a0:8c:86:fa:99:a6:98:2d:4c:2a: 56:00:0e:71:e9:20:00:e6:33:2a:87:9b:62:41:76:a5:f9:e7: f6:43:f4:ec:d4:62:74:29:7f:74:95:dd:06:ec:73:99:20:24: 4c:db:de:9c:49:05:1e:8a:bb:47:0c:8e:9d:81:17:d5:bb:7b: 9a:72:0e:4b:f5:f4:c6:bb:ce:36:fe:13:e1:41:51:d6:f1:dd: eb:a9:d4:b1:13:17:7b:53:5e:a4:6b:fd:5e:a5:e6:e9:66:ab: a3:e5:28:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjUwNDE4MjE1MzQ5WhcNMjUwNDI1MjE1MzQ5WjAYMRYwFAYD VQQDEw02ODAyYzllZC1jNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8THpaDYiRVTExd8RkG1h4dQtd0DDSTBzfym0G3XyvsAj8SZiNqJMITqgVIi1 irdUJ2BYL6U5ztfhvC1Yndm+31jQMA31PFkaKvvy1i3C8kMw1A1maYxab3w5qqGu sfs/lPnJSnIGOAG8VVkRAb2Q64bTXRFgvFfGEg0Z0VME1VlW6LuAT9uyajUGKiRl Exlst2QldsNwbbf3hwUo+AyWwGxwkwKQVkCm/NjiaATm6oRld+13TCDQpzIX+e4q imtqkLpJf9nW2nQjkmpp/laONBV6m3xNOVbOEqknKEorwXj6GKzVLLyhDD4axe84 k+vcRuHPyI1tVyVFda3WXK9RoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhMJPTr JHHtVQc+YjN4+UAdf4uAMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX+5iaPRS3XMZ4s534xJs1XCzvMh8UUge6QDphvkoOhCi/S+Cy8aY/ MVCuw5M0TPcFUeEzxfpgx3hbSq6cYqmMOyl1DlyJSGBUSNQES1UGWTPm+yeTTWxJ sGamDhOmyzgCLDPgIkDuf6BiYH1h3rOTRkJmmvE1oFTmcGOV5DHRhNkSl9wcnMWZ UtWLxGTw/WkyCGJOutouEaCMhvqZppgtTCpWAA5x6SAA5jMqh5tiQXal+ef2Q/Ts 1GJ0KX90ld0G7HOZICRM296cSQUeirtHDI6dgRfVu3uacg5L9fTGu842/hPhQVHW 8d3rqdSxExd7U16ka/1epebpZquj5Sgk -----END CERTIFICATE-----Generated at Sat Apr 19 01:04:04 2025 by rpki-client