$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: aJ6ruBsG3oBYIWMwShMStCI1ZjaoGKvCsG39LLc2mus= Subject key identifier: 8A:49:D3:49:F0:67:31:06:4F:2D:6D:CE:E8:D9:E7:00:37:72:0B:76 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0E33 Signing time: Thu 10 Apr 2025 17:46:21 +0000 Manifest this update: Thu 10 Apr 2025 17:46:21 +0000 Manifest next update: Thu 17 Apr 2025 17:46:21 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: gkeXmCItLTRdHaS/tV2lY/pwrqqhZIIYwFmxbpIkDvU=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3643 (0xe3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Apr 10 17:46:21 2025 GMT Not After : Apr 17 17:46:21 2025 GMT Subject: CN=67f803ed-9d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:c6:9b:24:5e:cd:aa:53:d9:2b:f9:81:47: d9:54:a6:f3:56:2d:0b:b2:41:16:c5:01:55:5c:1d: 13:46:60:2e:0e:e8:a7:c9:91:ac:97:c4:9c:0a:1b: a3:ef:45:3c:32:6b:2f:bf:f2:13:73:4f:1c:cd:ed: 4e:fc:b2:7c:e1:cf:db:a1:fe:6d:64:35:e5:83:5e: 0b:f4:b5:3f:f3:02:89:c7:22:e1:bb:8c:e6:50:b7: b6:b6:30:1a:3c:af:2d:48:58:6e:dc:79:56:27:61: a9:d7:6f:71:4b:3c:5e:3b:13:43:a8:bd:87:32:0a: 9e:2e:7c:a2:68:05:65:bd:45:63:44:23:99:db:85: 43:5b:01:99:e7:d7:0e:f3:d9:6d:cc:75:0b:9f:f3: 20:84:e2:f9:82:d5:2a:53:69:40:86:b0:b8:59:8d: 51:7c:82:42:f5:ba:0a:be:0e:da:b4:aa:38:18:fb: 17:00:69:c7:bf:69:87:85:72:28:e3:dd:03:0e:95: f4:cc:7b:08:69:25:7a:0b:3a:e1:dd:4a:a7:e3:6f: 23:8f:0a:be:d5:2f:0f:e3:61:18:ec:b2:a3:ea:bb: 65:58:af:03:22:9d:68:2f:47:8a:5f:39:7a:37:28: ab:86:c9:8a:23:36:38:d1:ae:74:8b:77:a8:dd:be: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:49:D3:49:F0:67:31:06:4F:2D:6D:CE:E8:D9:E7:00:37:72:0B:76 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:be:c4:50:5c:08:01:30:ad:65:3f:0a:6c:81:47:ae:a6:87: 18:ff:00:6c:11:83:08:a0:2d:61:f2:3c:53:44:46:79:95:8c: 99:25:e5:36:a1:3e:2b:ca:8d:ca:bc:34:95:c4:f4:74:4e:dd: 3b:0c:72:0b:c6:25:13:25:cb:43:57:16:6b:9f:62:84:21:f5: 57:02:e0:f4:c9:3c:df:c4:0c:6f:bd:59:2d:30:d2:0b:ff:c1: 93:f0:7b:1a:44:5b:86:50:2c:cf:99:55:db:bb:f0:df:9f:c0: 8b:07:7b:3f:bb:bd:56:f1:09:d7:69:85:e0:d5:b6:06:b6:c9: 21:eb:76:89:c0:5a:9d:2d:a8:52:fb:29:cf:a8:b2:ce:d9:60: 7a:bd:f3:59:27:e0:ca:ee:6a:cb:ee:5f:6e:b5:8a:31:46:a8: 7e:bb:0f:da:ce:9e:55:0e:cc:de:7e:b1:2d:db:27:c9:8f:9a: 08:6e:d1:56:03:b4:10:5b:a4:f4:97:20:01:bf:55:40:61:65: ce:c4:e6:27:c0:dd:b9:93:5b:ed:f5:8e:93:69:aa:e9:e4:1a: 11:d5:42:76:f1:17:89:b7:fd:1c:17:0c:bf:2c:13:ba:b9:6c: ad:27:3f:3a:b0:94:b0:26:04:81:fc:d7:45:07:4e:ef:19:41: 33:0b:3b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUwNDEwMTc0NjIxWhcNMjUwNDE3MTc0NjIxWjAYMRYwFAYD VQQDEw02N2Y4MDNlZC05ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TXGmyRezapT2Sv5gUfZVKbzVi0LskEWxQFVXB0TRmAuDuinyZGsl8ScChuj 70U8Mmsvv/ITc08cze1O/LJ84c/bof5tZDXlg14L9LU/8wKJxyLhu4zmULe2tjAa PK8tSFhu3HlWJ2Gp129xSzxeOxNDqL2HMgqeLnyiaAVlvUVjRCOZ24VDWwGZ59cO 89ltzHULn/MghOL5gtUqU2lAhrC4WY1RfIJC9boKvg7atKo4GPsXAGnHv2mHhXIo 490DDpX0zHsIaSV6Czrh3Uqn428jjwq+1S8P42EY7LKj6rtlWK8DIp1oL0eKXzl6 NyirhsmKIzY40a50i3eo3b7i+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpJ00nw ZzEGTy1tzujZ5wA3cgt2MB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOvsRQXAgBMK1lPwpsgUeupocY/wBsEYMIoC1h8jxTREZ5lYyZJeU2 oT4ryo3KvDSVxPR0Tt07DHILxiUTJctDVxZrn2KEIfVXAuD0yTzfxAxvvVktMNIL /8GT8HsaRFuGUCzPmVXbu/Dfn8CLB3s/u71W8QnXaYXg1bYGtskh63aJwFqdLahS +ynPqLLO2WB6vfNZJ+DK7mrL7l9utYoxRqh+uw/azp5VDszefrEt2yfJj5oIbtFW A7QQW6T0lyABv1VAYWXOxOYnwN25k1vt9Y6Taarp5BoR1UJ28ReJt/0cFwy/LBO6 uWytJz86sJSwJgSB/NdFB07vGUEzCzsf -----END CERTIFICATE-----Generated at Sat Apr 12 19:02:33 2025 by rpki-client