$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: LYskd6xmH3demNKW1WhplBc3j5azixsdnNlD+w6qksU= Subject key identifier: 4F:F1:2B:D8:8B:22:8A:95:2F:D1:00:33:83:FA:6C:7D:13:A9:29:DD Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 18F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 18F2 Signing time: Fri 14 Feb 2025 16:52:32 +0000 Manifest this update: Fri 14 Feb 2025 16:52:31 +0000 Manifest next update: Fri 21 Feb 2025 16:52:31 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: FSRIq3nb9EHoBSG1cA7g3KoR49eFhDctDX5wJwy8REY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6386 (0x18f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18 Validity Not Before: Feb 14 16:52:31 2025 GMT Not After : Feb 21 16:52:31 2025 GMT Subject: CN=67af74d0-c99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:34:2b:b2:d6:23:bc:63:64:12:13:6e:e8: de:fd:22:6e:b0:5e:bc:b5:39:13:53:0f:0c:a7:3a: ba:30:b9:54:18:f5:df:c9:a0:16:06:18:e6:d0:5a: e6:fc:1b:f5:13:21:19:ae:10:bb:e0:80:61:88:a7: 46:56:2f:0a:1c:26:f5:bc:8c:75:5d:bc:db:1e:5a: fc:4b:4f:b2:18:21:8b:4b:62:4f:5e:9a:f0:b4:af: d0:60:ca:a4:af:c4:4e:5f:27:8e:ad:96:88:f4:43: 78:65:fa:2c:0e:6f:14:d9:67:fa:77:25:42:4f:09: 54:4d:54:e2:49:d2:47:99:4f:ac:f5:09:b3:c8:4b: 68:44:5c:fb:c5:79:65:22:7d:da:61:bc:62:ca:fa: f2:91:e8:d1:23:9d:ac:99:c1:0c:2f:b7:f7:95:e2: cb:71:9f:6e:35:83:23:5a:54:a6:6f:ae:14:ca:3e: f6:ed:86:cd:76:4c:5f:43:3e:c1:81:9c:07:19:cf: 36:b4:79:47:9b:4b:41:0e:4f:03:9d:5d:d1:b3:e8: e7:c7:d4:f4:bc:8d:c7:c9:6e:06:c2:2b:5b:ea:6b: 7f:4e:8f:77:ee:f7:67:a7:ce:9f:78:17:0b:f0:6d: c2:1c:62:01:35:16:a1:03:33:4a:82:70:38:73:6b: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F1:2B:D8:8B:22:8A:95:2F:D1:00:33:83:FA:6C:7D:13:A9:29:DD X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b1:91:f0:c8:ca:35:d1:30:a8:fe:9e:6c:17:84:dc:08:06: c9:33:ad:4e:ff:14:04:33:f5:9f:a8:f6:36:3a:07:f0:27:c0: 79:25:15:b8:91:1b:30:93:a9:59:13:46:c9:68:22:d5:56:e5: 0b:c9:28:48:93:22:7c:1d:78:40:1d:49:12:35:6d:ea:a8:2b: b2:b4:63:4e:ab:96:65:b4:1d:1f:44:2d:a9:ea:33:19:32:14: 91:73:9b:c9:9f:ea:60:03:10:e1:14:13:87:f6:b1:62:2b:4e: ff:01:65:3d:c7:48:23:cb:ed:ba:e8:90:67:e2:3d:d7:48:f6: 24:9b:55:12:b4:46:ee:10:16:b3:b7:a1:f4:bf:d6:17:dd:41: b7:12:fa:63:38:7b:b3:37:db:3c:16:bc:67:6d:8a:25:8a:d2: 7d:8c:e6:f1:63:18:86:5c:7f:bf:66:97:0c:c1:46:d2:0e:9c: 83:13:d7:a0:c0:91:29:23:ad:fa:f0:c4:20:f2:1e:a6:cf:2d: b7:61:81:c1:b9:77:31:56:6c:6f:b4:87:c8:a0:ac:ef:20:28: bf:eb:19:fd:30:8a:43:af:a4:95:67:a0:8c:63:82:bb:b1:3c: 73:6b:54:46:61:4a:61:04:e3:6d:d2:5e:2d:8d:c7:9d:93:0e: 49:90:00:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwMjE0MTY1MjMxWhcNMjUwMjIxMTY1MjMxWjAYMRYwFAYD VQQDEw02N2FmNzRkMC1jOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1k0K7LWI7xjZBITbuje/SJusF68tTkTUw8Mpzq6MLlUGPXfyaAWBhjm0Frm /Bv1EyEZrhC74IBhiKdGVi8KHCb1vIx1XbzbHlr8S0+yGCGLS2JPXprwtK/QYMqk r8ROXyeOrZaI9EN4ZfosDm8U2Wf6dyVCTwlUTVTiSdJHmU+s9QmzyEtoRFz7xXll In3aYbxiyvrykejRI52smcEML7f3leLLcZ9uNYMjWlSmb64Uyj727YbNdkxfQz7B gZwHGc82tHlHm0tBDk8DnV3Rs+jnx9T0vI3HyW4Gwitb6mt/To937vdnp86feBcL 8G3CHGIBNRahAzNKgnA4c2uyywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/xK9iL IoqVL9EAM4P6bH0TqSndMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXsZHwyMo10TCo/p5sF4TcCAbJM61O/xQEM/WfqPY2OgfwJ8B5JRW4 kRswk6lZE0bJaCLVVuULyShIkyJ8HXhAHUkSNW3qqCuytGNOq5ZltB0fRC2p6jMZ MhSRc5vJn+pgAxDhFBOH9rFiK07/AWU9x0gjy+266JBn4j3XSPYkm1UStEbuEBaz t6H0v9YX3UG3EvpjOHuzN9s8FrxnbYolitJ9jObxYxiGXH+/ZpcMwUbSDpyDE9eg wJEpI6368MQg8h6mzy23YYHBuXcxVmxvtIfIoKzvICi/6xn9MIpDr6SVZ6CMY4K7 sTxza1RGYUphBONt0l4tjcedkw5JkADl -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:36 2025 by rpki-client