$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft File: 19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json) Hash identifier: 9cVUWBuGn/vTWqVYWzJLuQmIE04F6AhjMH+DRde9/b0= Subject key identifier: 87:18:B4:C6:D9:7C:82:6E:A0:7C:5E:E0:C8:7D:3C:CA:7D:6C:22:BD Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF Certificate issuer: /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft Manifest number: 04AC Signing time: Sat 31 May 2025 00:06:27 +0000 Manifest this update: Sat 31 May 2025 00:06:26 +0000 Manifest next update: Sat 07 Jun 2025 00:06:26 +0000 Files and hashes: 1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: 9CBSjFoUSxFpAC9RDGIPIS0p4IkXcd2UVLi8KgkyYr8=) 2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: mvkJO23Rhne3EOWrAQ2tX8d2RfjeSAd4lU2tWfhmNuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Validity Not Before: May 31 00:06:26 2025 GMT Not After : Jun 7 00:06:26 2025 GMT Subject: CN=683a4803-5d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:df:33:ca:2c:73:f1:9f:d3:d6:8f:a8:4a: df:87:68:72:1d:23:9e:32:22:4a:b8:fb:78:c9:9b: 0c:46:88:95:17:60:67:85:3c:5a:b4:d0:9c:3c:0e: 17:c1:36:4f:a0:01:c1:fa:51:5f:b1:0f:9c:3f:6b: 28:36:ad:e2:d5:3c:e2:7a:20:77:e1:03:33:23:b7: 7c:1d:ef:f1:23:a3:38:c8:81:61:7d:6c:1f:97:d3: b1:d5:c4:b6:f4:c5:d7:2b:42:b8:e1:bd:e7:a1:49: 13:80:1f:be:28:6c:3a:f8:88:df:be:f4:35:1e:ec: 5b:39:6e:27:77:80:c4:c3:d4:f4:c8:9d:90:dd:70: 46:a1:cf:79:fa:8c:f7:52:30:f0:14:4a:b2:48:ca: 29:31:41:47:61:32:6c:9a:d6:d5:d1:f4:b4:3b:0f: 15:23:e7:d2:e3:58:2d:31:d6:3d:ac:5c:c5:91:2c: 43:7c:ee:08:0e:33:db:3c:5c:04:41:c7:5e:34:93: 17:33:16:4d:cf:06:1d:14:8d:96:1b:42:75:41:16: 16:0a:a9:f1:50:f7:34:b7:05:79:d4:7a:cb:50:f8: 25:91:3a:96:9a:51:0c:35:3a:7e:53:5a:32:16:c5: f8:9b:89:72:bb:1f:43:da:d4:58:52:4d:b1:30:c2: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:18:B4:C6:D9:7C:82:6E:A0:7C:5E:E0:C8:7D:3C:CA:7D:6C:22:BD X509v3 Authority Key Identifier: keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:42:93:d7:d8:6a:01:af:ce:82:b0:db:2b:04:ab:42:88:f2: 6b:9a:b8:e5:38:f1:6f:11:03:a5:1d:6a:e3:cf:47:d0:27:aa: 56:6a:5f:18:b7:f6:f7:6c:20:e7:61:dd:8b:da:a8:38:ac:f6: 9f:91:0d:92:f2:46:7c:c3:29:5f:38:83:60:e6:37:11:8a:59: 77:9c:f9:6e:47:20:77:2e:f9:cd:3d:96:2d:ac:cf:29:0b:31: bf:58:df:2e:d5:57:ab:b4:af:6b:43:a3:fd:e8:d7:72:1b:d1: b8:bc:40:b5:0a:d2:a7:0d:b9:fe:3b:81:40:fb:2a:66:ce:38: 7e:a1:32:e1:bf:0e:31:f9:d8:7d:87:3b:01:b2:3e:43:7a:33: e7:c8:96:fa:36:d4:f7:42:92:e5:96:12:ae:da:97:60:38:95: 4b:47:ae:cc:33:55:85:d8:30:1e:85:36:75:47:61:83:7f:be: 23:96:65:2d:06:3f:b2:c6:1b:35:34:2e:22:57:34:9d:b6:40: 7d:4b:bb:e8:68:a6:c2:93:44:1d:3d:41:6d:92:58:8e:ef:8c: 70:7c:bc:2b:b3:1a:53:62:08:97:b9:de:7e:53:23:d6:f1:19: b5:4d:68:b1:0a:75:9e:2c:de:40:ce:fa:af:bb:19:04:96:f3: 4d:23:0f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC ODk3NEFBREYwHhcNMjUwNTMxMDAwNjI2WhcNMjUwNjA3MDAwNjI2WjAYMRYwFAYD VQQDEw02ODNhNDgwMy01ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kbfM8osc/Gf09aPqErfh2hyHSOeMiJKuPt4yZsMRoiVF2BnhTxatNCcPA4X wTZPoAHB+lFfsQ+cP2soNq3i1TzieiB34QMzI7d8He/xI6M4yIFhfWwfl9Ox1cS2 9MXXK0K44b3noUkTgB++KGw6+IjfvvQ1HuxbOW4nd4DEw9T0yJ2Q3XBGoc95+oz3 UjDwFEqySMopMUFHYTJsmtbV0fS0Ow8VI+fS41gtMdY9rFzFkSxDfO4IDjPbPFwE QcdeNJMXMxZNzwYdFI2WG0J1QRYWCqnxUPc0twV51HrLUPglkTqWmlEMNTp+U1oy FsX4m4lyux9D2tRYUk2xMMKvHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcYtMbZ fIJuoHxe4Mh9PMp9bCK9MB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTBCOC8xN0RFRkYxNDJGRjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMt dVdVLWppUjJfOC00bDBxdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsQpPX2GoBr86CsNsrBKtCiPJrmrjlOPFvEQOlHWrjz0fQJ6pWal8Y t/b3bCDnYd2L2qg4rPafkQ2S8kZ8wylfOINg5jcRill3nPluRyB3LvnNPZYtrM8p CzG/WN8u1VertK9rQ6P96NdyG9G4vEC1CtKnDbn+O4FA+ypmzjh+oTLhvw4x+dh9 hzsBsj5DejPnyJb6NtT3QpLllhKu2pdgOJVLR67MM1WF2DAehTZ1R2GDf74jlmUt Bj+yxhs1NC4iVzSdtkB9S7voaKbCk0QdPUFtkliO74xwfLwrsxpTYgiXud5+UyPW 8Rm1TWixCnWeLN5AzvqvuxkElvNNIw8g -----END CERTIFICATE-----Generated at Sat May 31 16:49:14 2025 by rpki-client