$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: aC0g0xrQRzXrNmUUX97BedM0pUczV2ClBP7SYilr234= Subject key identifier: F5:06:BB:41:D9:E5:C6:27:1C:C4:7A:D3:EE:02:C7:C1:65:42:8F:DF Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 42 Signing time: Thu 13 Mar 2025 05:30:56 +0000 Manifest this update: Thu 13 Mar 2025 05:30:56 +0000 Manifest next update: Thu 20 Mar 2025 05:30:56 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: OWbeRMSxNHnoLeqpnryevQGGjgH3BAS3ziaENBBNfso=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7 Validity Not Before: Mar 13 05:30:56 2025 GMT Not After : Mar 20 05:30:56 2025 GMT Subject: CN=67d26d90-d542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:a7:16:9e:45:49:8d:b0:18:1f:d6:82:1c: 69:cc:2e:bf:db:44:44:2a:7b:fc:f7:cc:f0:0b:78: 39:d9:16:c7:34:0e:7f:d3:8f:85:d6:ee:f9:a5:c6: be:f3:f4:d4:19:6b:ed:5b:f2:15:e8:62:0e:a4:f7: ec:de:49:41:c6:d4:1c:57:31:35:1e:f3:01:cc:ab: e6:ab:b4:3b:21:bb:04:3d:11:5c:2a:46:25:6b:c5: d1:33:fc:51:e4:e3:d9:84:b5:51:0e:9b:ea:97:cc: 1e:b9:e6:df:88:45:3f:90:f1:ce:84:dd:64:6c:db: 84:9a:19:b8:f2:6e:c9:57:96:49:49:11:f1:93:11: 36:ef:d1:ed:c7:d2:c8:63:21:ee:7e:0c:ca:4e:0e: f0:80:22:43:8e:be:98:02:36:8d:2e:62:e7:22:3f: 5b:d2:a7:dc:06:a0:a5:8c:e6:53:78:45:c5:a7:b9: 40:65:b3:ec:58:dd:51:ba:55:b8:b2:a9:ea:31:5b: a7:89:04:6b:d8:72:8b:6f:70:52:ac:bf:8a:af:1c: 32:29:43:59:ac:31:68:0a:19:15:f7:61:04:9d:1f: 93:84:7c:25:4d:41:f8:df:4d:1c:2f:9e:6d:96:45: d2:6a:b3:71:8f:07:a1:7f:63:9e:a1:d8:e5:6b:e7: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:06:BB:41:D9:E5:C6:27:1C:C4:7A:D3:EE:02:C7:C1:65:42:8F:DF X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:02:f6:8f:17:09:62:45:7e:ad:21:da:99:78:98:92:bb:47: 97:ce:bf:1d:06:6d:cf:20:4d:83:3a:1d:41:d9:14:ba:70:4b: 71:de:0e:67:58:56:cf:b4:9a:15:84:6d:9c:ef:67:8b:09:67: d7:95:2c:ab:ca:c0:a7:19:b8:92:51:b0:13:19:e9:20:f6:c5: 73:9d:2c:b9:a6:e2:be:b4:0a:01:b7:5b:53:e9:0c:0d:2e:b4: 70:64:e7:8b:78:ac:0e:03:29:af:51:72:d8:d4:00:b7:4b:89: 22:46:40:2d:78:6e:05:ce:f5:2c:7f:7c:50:b4:77:a1:0b:c8: 31:85:5e:54:e3:32:c1:12:e3:93:7d:3a:63:72:c0:83:03:ac: 78:70:dc:ac:54:18:6c:e5:48:c6:91:3d:1d:06:ec:97:1d:3e: 1c:5c:c9:62:43:5c:f3:39:15:e0:1f:29:e9:69:18:72:b0:75: 11:84:b6:fe:37:5d:dc:ae:23:d8:46:b3:c1:ea:b7:e8:4d:c5: ae:70:c8:95:5a:12:0e:bf:81:cd:5d:01:14:37:0f:7b:b1:03: 6a:8c:f4:f4:e8:17:a0:92:c2:0d:71:29:50:db:6a:59:5f:fc: 11:02:93:20:d0:af:03:a2:18:7c:67:4b:0e:43:b4:cf:25:80: f2:4b:df:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNDRCQzc4RURFNjNENUI2MjJCN0JBQzAzQjM0OTk2QjJG RTQyRTMyNzAeFw0yNTAzMTMwNTMwNTZaFw0yNTAzMjAwNTMwNTZaMBgxFjAUBgNV BAMTDTY3ZDI2ZDkwLWQ1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe9KcWnkVJjbAYH9aCHGnMLr/bREQqe/z3zPALeDnZFsc0Dn/Tj4XW7vmlxr7z 9NQZa+1b8hXoYg6k9+zeSUHG1BxXMTUe8wHMq+artDshuwQ9EVwqRiVrxdEz/FHk 49mEtVEOm+qXzB655t+IRT+Q8c6E3WRs24SaGbjybslXlklJEfGTETbv0e3H0shj Ie5+DMpODvCAIkOOvpgCNo0uYuciP1vSp9wGoKWM5lN4RcWnuUBls+xY3VG6Vbiy qeoxW6eJBGvYcotvcFKsv4qvHDIpQ1msMWgKGRX3YQSdH5OEfCVNQfjfTRwvnm2W RdJqs3GPB6F/Y56h2OVr5/cPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9Qa7Qdnl xiccxHrT7gLHwWVCj98wHwYDVR0jBBgwFoAURLx47eY9W2Ire6wDs0mWsv5C4ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0EyNDUxMTQ2OUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkx4NDdlWTlXMklyZTZ3RHMwbVdzdjVDNHljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0EyNDUxMTQ2OUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJ cmU2d0RzMG1Xc3Y1QzR5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUC9o8XCWJFfq0h2pl4mJK7R5fOvx0Gbc8gTYM6HUHZFLpwS3HeDmdY Vs+0mhWEbZzvZ4sJZ9eVLKvKwKcZuJJRsBMZ6SD2xXOdLLmm4r60CgG3W1PpDA0u tHBk54t4rA4DKa9RctjUALdLiSJGQC14bgXO9Sx/fFC0d6ELyDGFXlTjMsES45N9 OmNywIMDrHhw3KxUGGzlSMaRPR0G7JcdPhxcyWJDXPM5FeAfKelpGHKwdRGEtv43 XdyuI9hGs8Hqt+hNxa5wyJVaEg6/gc1dARQ3D3uxA2qM9PToF6CSwg1xKVDballf /BECkyDQrwOiGHxnSw5DtM8lgPJL37w= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:57 2025 by rpki-client