$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: PoIWfHMf+HHfrIW5mZ2+h1VX8ob8wbL9s2M1vV4CDTs= Subject key identifier: C1:13:E3:D0:A5:8F:D6:51:A8:73:39:E0:2A:D5:AB:F7:98:DD:90:FF Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 037E Signing time: Fri 25 Apr 2025 00:37:48 +0000 Manifest this update: Fri 25 Apr 2025 00:37:48 +0000 Manifest next update: Fri 02 May 2025 00:37:48 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: BrKOC5gp67wGbMr9TEL/sGU+QPbOr2K/k/H/ELKpzcw=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: RNcRlm2wXA2LTmrbU4YLnCSJL/XH7jtpKjrey/Lilq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Apr 25 00:37:48 2025 GMT Not After : May 2 00:37:48 2025 GMT Subject: CN=680ad95c-75a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:d5:cc:83:56:f4:1f:55:32:e5:3e:6c:98: c7:92:61:54:2b:3c:d6:e2:fa:4e:e3:8f:62:e8:b8: 50:6a:a4:94:ac:6c:98:16:31:94:b6:72:cf:1f:31: 34:a5:67:f3:80:36:ce:2f:bb:f4:da:3d:5f:65:93: 0b:f1:55:43:ec:fb:dd:04:dd:01:a2:d9:f2:22:40: f9:97:1a:02:5d:b4:94:01:36:7c:19:5c:38:15:23: 7a:08:16:22:d3:ba:b3:aa:43:f2:8e:d7:80:cf:e7: 21:c8:ed:31:50:75:4d:3c:54:2b:c1:c3:9a:cf:a6: de:37:98:c6:b0:d0:bb:cd:22:17:2f:ec:12:86:d3: 78:4a:fe:7f:1f:00:df:ad:14:f1:fb:66:45:8b:5a: f8:0d:09:b0:f7:2a:85:5c:a4:8c:57:4b:b2:69:47: 6c:01:d0:40:4c:a9:61:fe:13:50:31:23:52:bd:31: 9d:68:6c:42:a1:0f:2e:5c:82:51:ca:fc:e3:11:7c: bf:23:2a:1c:fd:21:8e:47:13:39:8b:b9:63:77:a5: 32:9f:df:dd:9c:37:ab:00:4f:0a:63:de:c3:af:17: c2:bb:33:8e:d3:dd:84:3b:20:fd:cd:08:74:ae:04: c2:94:da:95:dc:d6:d4:f0:58:4b:f4:c4:54:ef:e1: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:13:E3:D0:A5:8F:D6:51:A8:73:39:E0:2A:D5:AB:F7:98:DD:90:FF X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c1:36:26:36:6e:75:b6:de:a2:aa:5f:80:f9:92:a5:61:50: 8a:34:29:57:f8:c9:b1:75:52:b5:39:62:0d:8e:10:2b:a6:7e: 0e:ca:c7:ab:7f:e8:96:b2:27:cc:2f:70:c1:1e:4f:ae:60:66: 8f:51:09:e0:51:a9:a7:08:c4:78:07:bc:64:8a:1c:6b:04:18: 34:dc:74:91:32:44:73:93:86:e9:ca:d3:2d:f6:41:6c:06:46: 9a:c4:46:87:b3:c8:de:1f:7a:e9:27:06:a8:ee:26:85:e6:8f: 8c:91:e7:c6:5c:b7:47:7a:f8:76:07:0d:e2:dd:c0:bc:47:37: 86:59:08:71:fa:73:18:9a:34:da:96:7b:32:05:3e:e1:55:3b: af:b9:0a:e0:26:62:2a:d2:5e:d4:2a:0e:05:b4:59:49:88:72: a3:72:24:12:92:81:0e:9d:d0:44:a1:91:57:eb:d4:f2:b3:34: 32:84:ac:b1:4b:37:00:29:e1:d5:75:40:cb:da:8c:03:b5:6d: f0:cb:f0:cc:1e:d9:d0:71:5b:fb:30:28:5e:ce:1d:3e:b4:3d: ca:a0:a0:95:64:71:5e:9d:20:af:da:87:dc:c8:a7:13:3f:af: 12:45:2b:7f:f8:4b:0b:1d:fa:4d:ef:88:9f:44:01:5a:ad:48: a7:49:0b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwNDI1MDAzNzQ4WhcNMjUwNTAyMDAzNzQ4WjAYMRYwFAYD VQQDEw02ODBhZDk1Yy03NWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusrVzINW9B9VMuU+bJjHkmFUKzzW4vpO449i6LhQaqSUrGyYFjGUtnLPHzE0 pWfzgDbOL7v02j1fZZML8VVD7PvdBN0BotnyIkD5lxoCXbSUATZ8GVw4FSN6CBYi 07qzqkPyjteAz+chyO0xUHVNPFQrwcOaz6beN5jGsNC7zSIXL+wShtN4Sv5/HwDf rRTx+2ZFi1r4DQmw9yqFXKSMV0uyaUdsAdBATKlh/hNQMSNSvTGdaGxCoQ8uXIJR yvzjEXy/Iyoc/SGORxM5i7ljd6Uyn9/dnDerAE8KY97DrxfCuzOO092EOyD9zQh0 rgTClNqV3NbU8FhL9MRU7+F1awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMET49Cl j9ZRqHM54CrVq/eY3ZD/MB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMwTYmNm51tt6iql+A+ZKlYVCKNClX+MmxdVK1OWINjhArpn4Oyser f+iWsifML3DBHk+uYGaPUQngUamnCMR4B7xkihxrBBg03HSRMkRzk4bpytMt9kFs BkaaxEaHs8jeH3rpJwao7iaF5o+MkefGXLdHevh2Bw3i3cC8RzeGWQhx+nMYmjTa lnsyBT7hVTuvuQrgJmIq0l7UKg4FtFlJiHKjciQSkoEOndBEoZFX69TyszQyhKyx SzcAKeHVdUDL2owDtW3wy/DMHtnQcVv7MChezh0+tD3KoKCVZHFenSCv2ofcyKcT P68SRSt/+EsLHfpN74ifRAFarUinSQs0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:57 2025 by rpki-client