$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: g8yduQ2NOSYKxTbnsET59s6j5hGvqZW8Z1dTQ8hjjD4= Subject key identifier: C7:AB:49:7C:47:55:96:34:2F:A3:5D:BE:2D:D4:CF:4E:D9:EA:1B:B8 Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 0611 Signing time: Mon 14 Apr 2025 22:31:51 +0000 Manifest this update: Mon 14 Apr 2025 22:31:50 +0000 Manifest next update: Mon 21 Apr 2025 22:31:50 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: frUXOuXkmFvk9SsIxJYfoBX6p3sEKJy3f6UOYmtGHQ8=) 2: E6F39362983B11EBBDA9EC64C4F9AE02.roa (hash: 7YHVzUjF5bpdBZPdZI94Q5Pcl5r21oJ6Xy3gjX6ma8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 22:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Apr 14 22:31:50 2025 GMT Not After : Apr 21 22:31:50 2025 GMT Subject: CN=67fd8cd6-9092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:e8:95:16:f8:88:66:e7:4b:60:ce:ee:77: d7:07:17:cf:2c:1d:81:52:58:3c:5a:b3:e3:a6:91: fa:53:61:73:b9:00:55:5e:64:e2:68:56:c0:3d:2e: 6d:ed:c9:ca:e3:25:31:46:2c:a9:98:aa:10:f1:67: 9a:0b:8f:06:1f:f0:0b:82:2b:ec:b9:d3:50:7c:9e: aa:9f:67:57:36:60:a0:26:d7:0a:5e:6c:ca:6e:d1: bf:0b:d9:a5:17:e8:d1:26:e8:fd:54:ab:29:2b:0e: 02:b9:19:ea:a9:23:70:1c:17:ef:93:f8:2b:84:25: 20:ab:e4:ed:50:68:81:e7:29:5e:7d:03:2c:7c:4b: 82:a5:f2:ce:98:70:e0:3d:74:26:02:7b:7a:30:3c: 16:4f:b2:bb:79:fa:51:60:6b:3b:b5:fb:de:00:c5: a2:2a:8e:75:05:5c:fd:01:e4:e9:6f:15:73:3d:03: ac:27:d9:4f:1e:b6:fe:e8:43:58:e2:53:39:6c:40: f1:b2:12:57:9a:fc:fd:21:0f:56:37:ae:09:06:b5: 3e:b9:d3:18:7b:3f:6d:84:e1:a4:bc:84:e8:b1:3e: f1:38:b6:40:6c:79:70:13:37:a5:e9:0b:49:f6:b2: 53:19:6e:9b:e9:67:50:66:03:3b:68:98:2e:32:e0: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:49:7C:47:55:96:34:2F:A3:5D:BE:2D:D4:CF:4E:D9:EA:1B:B8 X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:35:4f:9d:2a:0a:7f:8b:17:b8:d5:76:88:0c:74:e1:6d:86: 2a:2f:b3:d5:09:43:cb:c2:2f:39:91:3c:8c:b6:77:53:ad:2c: 15:6c:77:ab:6d:13:71:36:13:31:a4:bd:0e:b4:0a:4e:e9:23: 5c:ee:25:d2:3d:43:d0:b5:eb:6b:2c:aa:20:71:c1:a7:95:5e: 43:c4:08:34:0a:a1:39:a8:0e:a5:0a:0f:09:25:46:76:a2:79: e1:81:ec:a5:5d:35:d5:59:29:84:b5:63:2a:ff:6c:fc:53:72: 64:5e:44:2c:64:7d:a3:95:14:9c:a4:74:6c:4c:44:03:fc:8c: 79:31:7c:14:10:a9:e4:c9:b7:49:b1:8f:0a:77:df:ad:9d:0d: 85:30:95:bf:b4:b0:ef:d7:92:77:97:e5:4f:0d:2d:65:ee:b6: ce:52:11:2c:72:d3:b4:73:06:e5:b4:62:3c:99:9a:08:2c:5b: 53:50:6c:b6:b8:98:a9:38:06:d0:95:3c:44:7e:39:fb:f3:a6: 7f:06:fe:31:a3:cb:ac:05:78:6d:5e:d7:85:2f:ed:29:ff:e8: 0b:92:c5:ee:9f:40:4d:8d:93:8e:66:be:aa:40:10:01:19:1e: 58:67:fa:ad:cf:29:97:cf:37:61:4d:5f:92:5c:ba:87:80:a2: 79:3d:23:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjUwNDE0MjIzMTUwWhcNMjUwNDIxMjIzMTUwWjAYMRYwFAYD VQQDEw02N2ZkOGNkNi05MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJLolRb4iGbnS2DO7nfXBxfPLB2BUlg8WrPjppH6U2FzuQBVXmTiaFbAPS5t 7cnK4yUxRiypmKoQ8WeaC48GH/ALgivsudNQfJ6qn2dXNmCgJtcKXmzKbtG/C9ml F+jRJuj9VKspKw4CuRnqqSNwHBfvk/grhCUgq+TtUGiB5ylefQMsfEuCpfLOmHDg PXQmAnt6MDwWT7K7efpRYGs7tfveAMWiKo51BVz9AeTpbxVzPQOsJ9lPHrb+6ENY 4lM5bEDxshJXmvz9IQ9WN64JBrU+udMYez9thOGkvITosT7xOLZAbHlwEzel6QtJ 9rJTGW6b6WdQZgM7aJguMuDbgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMerSXxH VZY0L6Ndvi3Uz07Z6hu4MB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNNU+dKgp/ixe41XaIDHThbYYqL7PVCUPLwi85kTyMtndTrSwVbHer bRNxNhMxpL0OtApO6SNc7iXSPUPQtetrLKogccGnlV5DxAg0CqE5qA6lCg8JJUZ2 onnhgeylXTXVWSmEtWMq/2z8U3JkXkQsZH2jlRScpHRsTEQD/Ix5MXwUEKnkybdJ sY8Kd9+tnQ2FMJW/tLDv15J3l+VPDS1l7rbOUhEsctO0cwbltGI8mZoILFtTUGy2 uJipOAbQlTxEfjn786Z/Bv4xo8usBXhtXteFL+0p/+gLksXun0BNjZOOZr6qQBAB GR5YZ/qtzymXzzdhTV+SXLqHgKJ5PSMW -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:34 2025 by rpki-client