$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: PP/It+j5wXtZugH9p7DiMkGSBe2eU3Tb8Fsg77i9o5k= Subject key identifier: F8:EF:AD:71:A5:E6:0A:58:4D:F3:66:89:A6:2B:69:91:73:7A:2B:B8 Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 060A Signing time: Wed 12 Mar 2025 22:26:05 +0000 Manifest this update: Wed 12 Mar 2025 22:26:05 +0000 Manifest next update: Wed 19 Mar 2025 22:26:05 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: rmilRd2VL2f4k1HAEMT9c7zix0ECGja/w3iRaXc2c5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 22:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F Validity Not Before: Mar 12 22:26:05 2025 GMT Not After : Mar 19 22:26:05 2025 GMT Subject: CN=67d209fd-1a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:bc:57:ac:9b:ee:59:a0:ff:b1:be:c1:30: 1f:f2:cb:36:10:78:a1:76:31:c0:62:39:7c:cc:73: c9:aa:23:3d:cc:ea:b1:aa:f8:f0:11:12:1e:57:39: ad:de:da:a9:90:b8:c3:4a:95:16:dd:d8:e1:6c:3a: 20:9a:74:8d:cd:17:87:d2:0d:96:c5:84:ec:74:08: 75:b4:f2:1f:db:ca:be:00:98:e7:49:63:c6:0c:d0: aa:a3:0f:71:dc:29:77:9e:db:80:ce:32:51:34:5b: 6a:fa:3d:c2:d5:86:c6:df:51:26:9d:8f:50:00:33: 0a:73:92:08:bd:c9:31:12:ec:f1:36:db:f8:96:db: 62:39:0c:de:c9:68:31:a4:f1:8b:dc:ab:57:72:cb: 41:20:db:78:08:b6:75:fb:2a:4f:9c:10:b0:a0:ab: 14:94:48:34:2f:ec:65:f8:29:00:56:9e:e5:3d:06: 85:c0:53:1d:2d:93:64:61:a4:e5:67:a3:ba:e5:2f: 31:3e:1a:63:24:b1:ec:68:df:67:69:be:e1:56:75: 57:dc:96:c8:47:26:ec:56:c8:71:bf:0a:1a:ce:70: 41:d3:7b:b8:ce:91:13:42:20:c6:14:0e:51:ee:a9: 85:93:c7:28:80:b3:7f:0c:f6:69:9f:33:fd:66:5a: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EF:AD:71:A5:E6:0A:58:4D:F3:66:89:A6:2B:69:91:73:7A:2B:B8 X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:85:19:5f:31:16:73:44:a8:68:ee:bb:5b:bc:34:f6:6e:d6: 04:ac:26:06:6c:6e:74:83:82:6a:77:09:22:f7:ac:e6:93:39: 76:ec:43:54:24:47:70:6c:74:e3:77:e1:7d:80:ed:6c:31:3a: 76:44:ca:ec:6f:04:0c:63:3e:a1:30:83:26:7a:18:d4:70:e6: 6d:56:a3:56:93:de:9d:9a:fd:20:78:c1:aa:b1:40:15:eb:77: ac:dd:ec:2d:a6:59:a4:80:ed:47:71:1e:27:48:04:9d:78:03: ce:f7:e7:d6:df:17:64:0b:aa:98:31:ed:2e:0d:32:e4:4c:93: ac:c5:99:7c:35:2f:9a:fe:cf:fb:4b:11:73:eb:8c:a9:c0:15: a0:f2:dd:f3:66:a6:07:df:13:8f:01:66:17:a4:a3:46:72:f2: 1b:12:2f:93:ed:f7:80:73:32:d0:17:00:6a:55:cd:5e:c0:7e: 76:91:29:d7:3d:ca:1d:ff:51:cb:2f:e6:8b:fa:bd:2d:27:86: 17:74:eb:0f:06:35:f0:d5:83:30:5b:15:c3:47:75:c9:8e:1e: 44:1e:f6:e6:7f:dc:2a:22:58:05:1c:8f:25:c5:2a:46:27:06: 7f:f8:22:18:bf:3f:9b:e0:93:59:f0:34:c7:90:ec:99:65:aa: 1e:39:30:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwMzEyMjIyNjA1WhcNMjUwMzE5MjIyNjA1WjAYMRYwFAYD VQQDEw02N2QyMDlmZC0xYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPW8V6yb7lmg/7G+wTAf8ss2EHihdjHAYjl8zHPJqiM9zOqxqvjwERIeVzmt 3tqpkLjDSpUW3djhbDogmnSNzReH0g2WxYTsdAh1tPIf28q+AJjnSWPGDNCqow9x 3Cl3ntuAzjJRNFtq+j3C1YbG31EmnY9QADMKc5IIvckxEuzxNtv4lttiOQzeyWgx pPGL3KtXcstBINt4CLZ1+ypPnBCwoKsUlEg0L+xl+CkAVp7lPQaFwFMdLZNkYaTl Z6O65S8xPhpjJLHsaN9nab7hVnVX3JbIRybsVshxvwoaznBB03u4zpETQiDGFA5R 7qmFk8cogLN/DPZpnzP9ZlpsswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjvrXGl 5gpYTfNmiaYraZFzeiu4MB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhRlfMRZzRKho7rtbvDT2btYErCYGbG50g4Jqdwki96zmkzl27ENU JEdwbHTjd+F9gO1sMTp2RMrsbwQMYz6hMIMmehjUcOZtVqNWk96dmv0geMGqsUAV 63es3ewtplmkgO1HcR4nSASdeAPO9+fW3xdkC6qYMe0uDTLkTJOsxZl8NS+a/s/7 SxFz64ypwBWg8t3zZqYH3xOPAWYXpKNGcvIbEi+T7feAczLQFwBqVc1ewH52kSnX Pcod/1HLL+aL+r0tJ4YXdOsPBjXw1YMwWxXDR3XJjh5EHvbmf9wqIlgFHI8lxSpG JwZ/+CIYvz+b4JNZ8DTHkOyZZaoeOTCP -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:54 2025 by rpki-client