$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json) Hash identifier: kCbPAqv0/2yGED+nsFnse5HFLaHnpq+rewj8kpgEG3I= Subject key identifier: 7B:2A:58:B9:A9:82:C2:8D:BB:63:A1:56:71:DB:A9:9A:5A:62:07:76 Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft Manifest number: 0162 Signing time: Sat 31 May 2025 03:56:57 +0000 Manifest this update: Sat 31 May 2025 03:56:57 +0000 Manifest next update: Sat 07 Jun 2025 03:56:57 +0000 Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: 9ZGMZIZEtkQ1sGrb0jExwu52JPztwnhWYVF3yKJHRD4=) 2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: l3vFzxttEXhfOuZjeQF8CrGkxbV17axCXSipPqSoFKA=) 3: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: ra0yVXf7WKyMc/TV/KsDqYCa6PLBvgSOfzPKvq7nVBw=) 4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: VlIb3exIwpSPjFwHyuIwV8wlOpGvSIVB8uNPjyxZHoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Validity Not Before: May 31 03:56:57 2025 GMT Not After : Jun 7 03:56:57 2025 GMT Subject: CN=683a7e09-891f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:26:41:82:88:f5:ec:3c:08:8e:ef:07:6c: e5:15:ca:f5:78:8d:29:70:41:69:fc:90:8e:ca:f3: a3:5a:0d:fc:2c:ba:43:7f:46:03:9e:1e:e2:e5:22: 72:84:4e:d6:4c:94:7d:e8:d4:de:af:f4:28:1a:78: a5:20:7d:d8:81:16:5f:50:14:1b:56:cb:c2:f6:b2: 64:c5:ca:fe:c0:d8:ce:6c:84:c2:96:a7:fc:33:94: 57:87:32:4f:78:ec:8b:8b:98:70:41:57:da:de:ea: 34:b8:1b:ce:89:24:db:df:46:ba:29:63:10:9a:45: 78:ff:cf:89:66:81:8b:0e:b6:d1:23:30:f0:aa:9e: c0:61:21:74:37:2c:cb:be:9d:03:20:a0:0e:06:2e: 05:47:39:73:9f:70:db:9e:97:ca:e5:bf:0f:8f:39: 43:50:5a:18:1b:02:53:5c:f2:83:6a:fa:b5:7f:91: 34:af:40:2b:40:d8:29:9d:0b:e3:b6:8c:7e:a6:a1: 61:71:d8:23:83:59:43:b8:05:5e:ce:69:71:e1:3e: 9e:1a:1b:34:f8:38:8c:62:aa:72:d8:34:84:5d:ed: 50:f5:db:c1:a2:f1:95:cb:ae:88:c8:bc:e3:95:ab: 7b:b3:99:33:16:ec:b4:d1:2f:b6:8c:1b:c0:3f:52: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2A:58:B9:A9:82:C2:8D:BB:63:A1:56:71:DB:A9:9A:5A:62:07:76 X509v3 Authority Key Identifier: keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:93:ae:4f:73:d3:3d:a6:d0:ca:0a:14:3c:84:ec:d4:9d:fa: 30:cf:fc:92:ee:27:fe:c7:3c:bf:c1:ca:17:d0:9f:27:fe:ad: 2c:c9:f8:4c:65:11:12:66:69:5e:cd:e5:81:a3:31:c9:db:7d: 79:a8:91:21:f4:01:0c:b0:3d:c1:22:38:a2:3a:7d:5d:15:59: e5:d0:8b:2e:28:cc:c6:61:c8:3e:d1:49:aa:aa:45:f9:a2:1c: ac:cf:0d:de:68:70:d1:56:47:8f:e9:b9:a2:21:d8:b4:8e:f2: cf:0e:51:ae:f5:39:80:bd:fb:03:65:04:8e:b3:d5:81:a0:99: 0a:c5:db:63:03:5a:e4:65:c1:2b:56:a9:8f:55:65:05:27:5a: 51:62:46:d2:35:8f:9f:57:56:97:ca:b6:0c:49:60:10:e1:14: 7a:f4:1f:bb:0a:89:66:28:23:ad:a3:b5:4b:dd:6a:76:f3:3d: c4:03:25:5e:2a:63:e4:7e:53:1f:ef:29:d1:aa:1e:49:70:aa: 1f:4e:29:7e:00:58:69:1f:ad:3f:3e:aa:e3:d2:44:7b:94:0c: 09:e5:90:78:6f:59:2d:28:a9:37:2d:c9:c8:e4:17:21:91:6c: 4e:27:43:55:04:03:bd:f4:cc:2e:50:29:50:97:f4:0d:88:76: 13:26:6d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw MDZCQjUxODYwHhcNMjUwNTMxMDM1NjU3WhcNMjUwNjA3MDM1NjU3WjAYMRYwFAYD VQQDEw02ODNhN2UwOS04OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPEmQYKI9ew8CI7vB2zlFcr1eI0pcEFp/JCOyvOjWg38LLpDf0YDnh7i5SJy hE7WTJR96NTer/QoGnilIH3YgRZfUBQbVsvC9rJkxcr+wNjObITClqf8M5RXhzJP eOyLi5hwQVfa3uo0uBvOiSTb30a6KWMQmkV4/8+JZoGLDrbRIzDwqp7AYSF0NyzL vp0DIKAOBi4FRzlzn3DbnpfK5b8PjzlDUFoYGwJTXPKDavq1f5E0r0ArQNgpnQvj tox+pqFhcdgjg1lDuAVezmlx4T6eGhs0+DiMYqpy2DSEXe1Q9dvBovGVy66IyLzj lat7s5kzFuy00S+2jBvAP1JDYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsqWLmp gsKNu2OhVnHbqZpaYgd2MB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqk65Pc9M9ptDKChQ8hOzUnfowz/yS7if+xzy/wcoX0J8n/q0syfhM ZRESZmlezeWBozHJ2315qJEh9AEMsD3BIjiiOn1dFVnl0IsuKMzGYcg+0UmqqkX5 ohyszw3eaHDRVkeP6bmiIdi0jvLPDlGu9TmAvfsDZQSOs9WBoJkKxdtjA1rkZcEr VqmPVWUFJ1pRYkbSNY+fV1aXyrYMSWAQ4RR69B+7ColmKCOto7VL3Wp28z3EAyVe KmPkflMf7ynRqh5JcKofTil+AFhpH60/Pqrj0kR7lAwJ5ZB4b1ktKKk3LcnI5Bch kWxOJ0NVBAO99MwuUClQl/QNiHYTJm0z -----END CERTIFICATE-----Generated at Sat May 31 17:26:12 2025 by rpki-client