$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: r2kAh7OCVRjDKS5bWahIMt85n13fydTVxiskWEscRUQ= Subject key identifier: CF:8A:9B:96:78:A9:23:81:52:3F:4B:74:AD:76:E9:F6:97:D7:63:D0 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 37 Signing time: Sat 31 May 2025 07:09:45 +0000 Manifest this update: Sat 31 May 2025 07:09:44 +0000 Manifest next update: Sat 07 Jun 2025 07:09:44 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: kik00FFm8NSCT0Qbr1tNKBwwTPhn2azVpxzcn1FaNzk=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: May 31 07:09:44 2025 GMT Not After : Jun 7 07:09:44 2025 GMT Subject: CN=683aab38-9c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:4c:12:48:34:48:c8:f2:f0:43:6b:19:48: 03:50:64:df:09:34:e6:f0:9e:bf:4f:a4:d1:b4:af: ca:eb:0b:8c:03:ee:3b:58:cf:ad:5a:e7:27:28:85: 7e:56:ff:d3:f8:a0:8d:bb:1d:b5:b7:8d:04:25:1e: fe:6c:5f:32:16:d2:7d:db:20:a1:a5:6a:86:4e:f5: eb:37:7b:9d:c5:26:d6:5b:e6:d9:a4:eb:c5:28:71: 3f:d0:bc:13:9c:18:c7:6e:be:0d:70:26:eb:fc:ce: fe:46:ca:b4:90:b4:9d:bb:9d:9e:93:93:0d:f7:60: 80:07:18:7a:19:f9:ae:9e:c9:64:d4:d0:b7:08:e5: 5e:38:3c:02:8e:f8:a7:c2:a8:45:ef:ff:74:b8:32: 0d:0c:50:a7:e0:4b:57:c0:0a:6d:d0:63:40:ef:0e: cf:56:bd:fe:fe:ce:2b:95:2e:e0:f1:99:4a:4b:6b: fa:6a:30:85:38:3a:e1:9a:9a:1c:e3:71:7b:34:20: 49:89:2f:0f:71:02:51:4b:f6:87:a0:f8:0b:ef:6e: 9f:ef:62:46:d6:37:e3:e4:41:1b:7d:9e:f3:8f:40: 37:29:0e:66:30:02:fe:9e:b9:e6:57:2e:b7:7c:2b: 72:a2:f7:21:73:58:81:da:76:c0:aa:64:a3:a8:7b: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8A:9B:96:78:A9:23:81:52:3F:4B:74:AD:76:E9:F6:97:D7:63:D0 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:38:4d:fd:d1:48:11:a0:5f:f3:f8:e5:96:31:21:f5:1d:44: 7b:83:0d:50:af:4c:29:9b:2e:4c:96:56:8c:00:26:a5:a1:3a: f4:12:03:83:78:9c:80:31:92:d3:84:8f:66:29:da:5f:a9:b0: 57:01:88:4d:91:31:aa:73:cc:09:92:3d:3b:1a:83:cb:c1:eb: 05:cb:4a:29:f2:d2:43:f5:f6:ab:f3:7b:27:47:88:5e:a8:20: f0:22:b0:a6:58:27:c9:c7:0a:4f:eb:bc:a3:a6:28:bd:8c:70: b8:fc:4e:e5:24:62:64:4a:bb:c4:11:46:16:e9:f9:b8:22:10: 0f:b8:d7:7c:f3:fd:f8:82:01:2c:f9:9b:99:02:60:d3:3f:b1: 20:de:18:59:18:b0:33:dd:3f:2b:87:22:56:9d:ab:51:d4:2a: e9:da:59:42:6f:ae:f2:f1:e0:83:fa:45:88:b5:7b:6a:e1:36: 6e:74:b2:9a:62:2b:45:1f:9d:f9:64:45:a8:32:9b:8f:c5:2a: b0:0e:8f:c7:2e:34:74:be:00:8f:57:23:25:8b:54:35:ba:0c: 73:06:d6:9c:bd:4d:b2:3f:08:7f:07:6e:c3:cb:e4:0a:62:7a: 2b:86:b1:bc:ba:da:4a:b3:da:9c:fa:0d:91:c3:ea:82:61:1f: 15:6e:4a:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Qjc1OTExMC8GA1UEBRMoRkI0QjY4M0ZCQTREQjZBQzFBNUFDNTA4ODA3RkM3RUE0 OTZDNUVDNTAeFw0yNTA1MzEwNzA5NDRaFw0yNTA2MDcwNzA5NDRaMBgxFjAUBgNV BAMTDTY4M2FhYjM4LTljOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW9kwSSDRIyPLwQ2sZSANQZN8JNObwnr9PpNG0r8rrC4wD7jtYz61a5ycohX5W /9P4oI27HbW3jQQlHv5sXzIW0n3bIKGlaoZO9es3e53FJtZb5tmk68UocT/QvBOc GMduvg1wJuv8zv5GyrSQtJ27nZ6Tkw33YIAHGHoZ+a6eyWTU0LcI5V44PAKO+KfC qEXv/3S4Mg0MUKfgS1fACm3QY0DvDs9Wvf7+ziuVLuDxmUpLa/pqMIU4OuGamhzj cXs0IEmJLw9xAlFL9oeg+Avvbp/vYkbWN+PkQRt9nvOPQDcpDmYwAv6eueZXLrd8 K3Ki9yFzWIHadsCqZKOoe/6ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz4qblnip I4FSP0t0rXbp9pfXY9AwHwYDVR0jBBgwFoAU+0toP7pNtqwaWsUIgH/H6klsXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNzU5LzY5QzNCRUU2RUI2 NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTB0b1A3cE50cXdhV3NVSWdIX0g2a2xzWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NzU5LzY5QzNCRUU2RUI2NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3 YVdzVUlnSF9INmtsc1hzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQ4Tf3RSBGgX/P45ZYxIfUdRHuDDVCvTCmbLkyWVowAJqWhOvQSA4N4 nIAxktOEj2Yp2l+psFcBiE2RMapzzAmSPTsag8vB6wXLSiny0kP19qvzeydHiF6o IPAisKZYJ8nHCk/rvKOmKL2McLj8TuUkYmRKu8QRRhbp+bgiEA+413zz/fiCASz5 m5kCYNM/sSDeGFkYsDPdPyuHIladq1HUKunaWUJvrvLx4IP6RYi1e2rhNm50sppi K0UfnflkRagym4/FKrAOj8cuNHS+AI9XIyWLVDW6DHMG1py9TbI/CH8HbsPL5Api eiuGsby62kqz2pz6DZHD6oJhHxVuSu8= -----END CERTIFICATE-----Generated at Sat May 31 17:47:15 2025 by rpki-client