$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: /FD5VfYUI09D9a/pu7muFXpR3PMj9Os6gwL1s3Pzbxw= Subject key identifier: AC:A8:55:28:8C:88:54:7C:DD:A3:F4:4A:44:8D:15:41:9D:40:BE:3C Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:16:38 +0000 Manifest this update: Sat 31 May 2025 07:16:37 +0000 Manifest next update: Sat 07 Jun 2025 07:16:37 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: +7waspiqO2SSU/xhn35lJnvC0aI1DEvTgrI/QT9adZ0=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: May 31 07:16:37 2025 GMT Not After : Jun 7 07:16:37 2025 GMT Subject: CN=683aacd5-2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:89:9b:b4:53:2f:be:cc:31:19:cf:01:f4: 42:8d:60:b0:51:ff:f5:a4:e0:de:16:83:02:c8:17: 26:4a:ad:a3:79:b3:c8:76:29:02:df:f1:61:b9:e2: 9e:d5:b1:c2:7b:71:b3:28:8f:18:e9:17:2e:e2:a7: 44:fa:0f:d7:32:48:e0:9d:73:07:69:c3:c4:e4:0a: 0e:3e:3f:5d:cf:4d:26:f8:f2:72:d4:a7:69:cc:fa: c4:99:79:f5:26:67:c4:18:18:ad:61:79:c3:99:1b: 16:5e:16:f2:3b:4b:74:4f:39:5e:9a:27:ae:26:e3: b2:eb:4d:f5:61:9c:a1:05:d9:fa:71:7a:81:2b:8a: 66:c7:a6:17:2c:e1:d4:ea:2f:35:e0:b6:52:2b:81: df:5e:4a:10:25:5e:58:94:8a:71:7c:63:3c:96:1f: 97:a7:0c:0b:cc:25:21:1e:78:ac:60:bb:43:32:c3: 91:12:75:a9:df:a8:1b:02:82:27:cb:78:1d:77:c2: 1d:8e:6e:07:3e:a7:eb:b1:31:e1:fb:05:aa:14:d5: 81:b4:54:b2:21:96:bc:56:6a:a4:4f:51:eb:27:99: 7d:da:e7:f0:b4:84:67:91:9e:77:cf:ea:42:2b:77: 1a:bd:ab:33:4d:4a:d0:c4:42:41:1f:c9:da:bb:de: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:55:28:8C:88:54:7C:DD:A3:F4:4A:44:8D:15:41:9D:40:BE:3C X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:da:f7:3f:2a:47:ae:eb:e9:76:05:73:fc:f6:22:dc:95:c7: ad:fa:23:c6:83:61:47:57:d4:97:d5:ac:6e:06:1a:7d:ae:94: 55:1d:a0:6a:f5:10:fe:e0:fc:ff:a7:c7:b5:b5:80:35:4b:a3: d3:f1:d5:b3:2b:50:5a:81:04:51:12:b4:8a:00:00:60:c6:c6: 85:ac:b9:37:c2:91:23:84:3e:6b:cd:48:29:43:11:70:51:9e: ac:0a:c1:c9:c3:e6:d1:d7:e0:bb:d4:45:af:2b:9a:57:a7:75: 2c:e7:b7:cd:95:7b:07:23:bd:de:58:c3:c1:7a:6d:6b:c8:93: 0d:96:8b:81:81:7d:ad:07:8a:59:59:9e:35:24:b0:17:6a:38: 19:79:c2:45:8d:0d:e5:70:3d:33:84:6d:4e:e6:d0:f1:2b:9f: f8:82:81:29:d5:d9:7e:44:49:ef:80:7f:dc:20:89:9a:d9:42: 39:92:e9:a6:36:e8:71:75:0d:d8:6d:03:35:e8:db:fa:d8:34: b9:ec:81:1e:dd:b1:d3:7c:5b:76:b7:1c:b8:a5:a4:fc:bc:ca: e7:8c:3f:10:a0:d4:b3:1f:5d:7f:5b:bb:94:71:ce:a0:9f:b1: 35:0c:58:f6:23:a9:49:d7:aa:a2:35:8c:e1:68:7b:22:b9:3d: cf:ce:23:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA1MzEwNzE2MzdaFw0yNTA2MDcwNzE2MzdaMBgxFjAUBgNV BAMTDTY4M2FhY2Q1LTI1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYYombtFMvvswxGc8B9EKNYLBR//Wk4N4WgwLIFyZKraN5s8h2KQLf8WG54p7V scJ7cbMojxjpFy7ip0T6D9cySOCdcwdpw8TkCg4+P13PTSb48nLUp2nM+sSZefUm Z8QYGK1hecOZGxZeFvI7S3RPOV6aJ64m47LrTfVhnKEF2fpxeoErimbHphcs4dTq LzXgtlIrgd9eShAlXliUinF8YzyWH5enDAvMJSEeeKxgu0Myw5ESdanfqBsCgifL eB13wh2Obgc+p+uxMeH7BaoU1YG0VLIhlrxWaqRPUesnmX3a5/C0hGeRnnfP6kIr dxq9qzNNStDEQkEfydq73oqzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrKhVKIyI VHzdo/RKRI0VQZ1AvjwwHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIza9z8qR67r6XYFc/z2ItyVx636I8aDYUdX1JfVrG4GGn2ulFUdoGr1 EP7g/P+nx7W1gDVLo9Px1bMrUFqBBFEStIoAAGDGxoWsuTfCkSOEPmvNSClDEXBR nqwKwcnD5tHX4LvURa8rmlendSznt82Vewcjvd5Yw8F6bWvIkw2Wi4GBfa0HillZ njUksBdqOBl5wkWNDeVwPTOEbU7m0PErn/iCgSnV2X5ESe+Af9wgiZrZQjmS6aY2 6HF1DdhtAzXo2/rYNLnsgR7dsdN8W3a3HLilpPy8yueMPxCg1LMfXX9bu5RxzqCf sTUMWPYjqUnXqqI1jOFoeyK5Pc/OI1o= -----END CERTIFICATE-----Generated at Sat May 31 17:07:41 2025 by rpki-client