$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: iOHBlegdOrIDBGdj08Nab2avMJkrCtjoNHwoXf7mzG4= Subject key identifier: 8D:AE:31:10:67:42:49:62:AE:7C:78:3F:5C:2C:30:39:2D:A0:55:8B Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 18FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 18FF Signing time: Wed 12 Mar 2025 16:24:34 +0000 Manifest this update: Wed 12 Mar 2025 16:24:33 +0000 Manifest next update: Wed 19 Mar 2025 16:24:33 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: mwSc5VZw67CLwem+mia3biWiSrNiD6tok9ZrEwwOu20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 16:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6399 (0x18ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18 Validity Not Before: Mar 12 16:24:33 2025 GMT Not After : Mar 19 16:24:33 2025 GMT Subject: CN=67d1b542-0bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:64:6c:6d:09:dd:75:a1:4f:5e:6c:1f:08:39: 14:8a:55:4e:5c:7c:73:ec:f0:9f:bc:f7:64:65:3a: e2:54:0a:43:a5:d5:90:cb:ec:1f:10:bc:f7:63:37: fb:c1:55:81:55:f6:93:43:c0:8a:e6:c3:64:1c:75: 17:d5:fe:63:5c:f8:cc:e2:78:7e:2c:ba:dd:da:18: da:fd:86:8b:e0:dd:48:f6:2d:bd:d9:b3:ef:86:48: 17:5b:d4:ca:a2:d7:83:1f:c9:e8:7a:31:bd:9f:77: 2f:62:2f:ea:d3:f0:02:e9:04:ac:15:d3:83:68:3d: dc:47:29:d0:a8:66:f4:08:be:1a:d4:e8:32:fa:a9: 60:f1:0a:bf:da:b9:d2:e3:39:d3:c2:89:8b:b3:9b: 78:09:c0:3a:4b:23:cf:1b:2b:f1:2e:6a:f6:6c:d5: 56:7c:55:88:8b:2a:91:f5:4c:d9:78:6f:fe:f4:8d: 08:69:e0:9b:90:98:3f:a6:0f:db:14:54:f5:4c:3d: 57:90:99:a8:69:4d:9e:40:2f:1d:b0:31:48:fb:0b: 3f:d4:24:e7:24:dc:de:65:74:c7:bc:71:61:c4:a9: 0c:c8:2e:61:be:69:fc:cc:bf:bf:77:40:1d:50:1d: 2f:77:dd:66:3d:d1:22:10:36:4d:73:63:8a:2a:de: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:31:10:67:42:49:62:AE:7C:78:3F:5C:2C:30:39:2D:A0:55:8B X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ec:9b:79:53:ed:3b:b2:b8:a3:dd:c7:bc:66:c5:ed:2f:99: a6:df:bd:0a:5d:da:7d:24:ed:90:59:73:ae:8a:1e:86:2c:47: 5e:ff:96:8c:2a:1e:2d:19:72:c4:3a:5c:12:1f:26:1b:63:78: c7:6e:e5:14:21:56:7a:8d:18:ec:95:1d:f4:fa:70:6e:f7:f5: a1:14:9d:6a:f0:19:1d:ff:96:20:91:af:72:58:69:8a:3d:48: 8e:a8:8e:c1:82:64:e3:43:dc:46:30:0b:a4:c0:9f:c2:99:72: 8b:d6:1f:28:0e:33:20:40:63:4d:9e:d2:7c:9f:1b:46:71:67: 3e:5e:9f:b1:d0:98:0a:29:f3:b4:c4:f3:3f:2a:cf:e3:02:5e: 81:39:ee:31:7f:c8:c1:22:f8:5a:b7:68:e0:75:2a:df:8e:10: 8b:a1:7c:1b:60:ee:d3:c1:9d:04:59:0b:1d:77:0f:0d:07:08: 8b:bd:4b:6c:1d:80:48:12:a2:4d:13:53:cb:83:84:81:85:43: bc:f9:ee:48:69:1f:e9:a8:68:bb:e9:93:e8:a4:46:34:2c:b0: 7d:9d:8c:56:6d:ab:fc:cb:cc:6f:1f:e1:0b:20:98:aa:20:75: 38:66:fd:46:22:ac:47:b8:94:0b:3c:25:74:61:c7:d7:1b:c6: 62:f1:70:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwMzEyMTYyNDMzWhcNMjUwMzE5MTYyNDMzWjAYMRYwFAYD VQQDEw02N2QxYjU0Mi0wYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mRsbQnddaFPXmwfCDkUilVOXHxz7PCfvPdkZTriVApDpdWQy+wfELz3Yzf7 wVWBVfaTQ8CK5sNkHHUX1f5jXPjM4nh+LLrd2hja/YaL4N1I9i292bPvhkgXW9TK oteDH8noejG9n3cvYi/q0/AC6QSsFdODaD3cRynQqGb0CL4a1Ogy+qlg8Qq/2rnS 4znTwomLs5t4CcA6SyPPGyvxLmr2bNVWfFWIiyqR9UzZeG/+9I0IaeCbkJg/pg/b FFT1TD1XkJmoaU2eQC8dsDFI+ws/1CTnJNzeZXTHvHFhxKkMyC5hvmn8zL+/d0Ad UB0vd91mPdEiEDZNc2OKKt63EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2uMRBn Qklirnx4P1wsMDktoFWLMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA17Jt5U+07srij3ce8ZsXtL5mm370KXdp9JO2QWXOuih6GLEde/5aM Kh4tGXLEOlwSHyYbY3jHbuUUIVZ6jRjslR30+nBu9/WhFJ1q8Bkd/5Ygka9yWGmK PUiOqI7BgmTjQ9xGMAukwJ/CmXKL1h8oDjMgQGNNntJ8nxtGcWc+Xp+x0JgKKfO0 xPM/Ks/jAl6BOe4xf8jBIvhat2jgdSrfjhCLoXwbYO7TwZ0EWQsddw8NBwiLvUts HYBIEqJNE1PLg4SBhUO8+e5IaR/pqGi76ZPopEY0LLB9nYxWbav8y8xvH+ELIJiq IHU4Zv1GIqxHuJQLPCV0YcfXG8Zi8XAJ -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:42 2025 by rpki-client