$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: W1W6QuSJ+zPUCDyfbIydYvm3dNVTzhwbWKfhnEserXM= Subject key identifier: 6B:07:7C:2C:91:8E:EF:14:08:C7:DC:0B:83:42:42:D5:90:1E:1D:CD Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 07A6 Signing time: Thu 24 Apr 2025 21:02:02 +0000 Manifest this update: Thu 24 Apr 2025 21:02:01 +0000 Manifest next update: Thu 01 May 2025 21:02:01 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: NsczdKv3VTWfv+xoHJF1MLvv7O0jO5wghA8SrUURf0I=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: Tk3zd3kJs7FVwUnCzK94Ya9JQUucKwZVZD3xS0qi9h0=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: QPOScDhLbSem7EfyQv+IglAvdNBeL1gmTR/fHqHYi/U=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yXWA4LSCd0uYWLhyjey4cRiXnTeij5tyOPeHFK/GEnI=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: jC47VXQ7X10kF2hNnEFJirs3Fm0J2Ob/emgxhii1hxs=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Jb8I0/Lc4UMJqWNSduuz7/92FhDDdVwS995fKcTS0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Apr 24 21:02:01 2025 GMT Not After : May 1 21:02:01 2025 GMT Subject: CN=680aa6ca-74c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:5a:d6:d7:54:2c:8b:42:de:6f:7e:0a:85: da:36:f1:6d:45:b3:79:4d:c7:01:1f:22:61:5c:8a: 65:78:d2:60:a2:f9:d1:6f:8c:6c:41:99:5d:b3:28: fe:d7:98:32:78:2e:f9:f4:34:21:a8:bf:fd:92:80: e9:f4:9a:03:a9:5c:4c:36:a3:41:7d:38:eb:bf:9e: 50:32:da:1f:5d:60:d6:65:f6:70:ea:c5:63:66:02: 15:65:7f:ae:42:27:96:59:76:83:23:7e:eb:ea:87: 23:5b:be:bd:32:6e:5e:71:aa:93:e6:86:7e:8e:5b: 9d:61:68:87:79:d8:e8:b9:ac:ae:29:fe:11:08:a0: e0:73:a2:ec:68:3c:83:ab:32:c4:db:4c:d7:af:99: c1:ce:f0:77:33:e7:c0:50:82:12:6b:8b:d1:9a:91: dc:89:71:87:bc:a7:ee:4b:a2:d6:a3:81:e6:f0:b2: b7:5c:2f:ad:8e:e3:64:68:82:32:3a:89:07:c4:2b: 35:ae:81:b9:bc:da:47:41:fc:4b:f2:0b:e7:e5:b4: 02:dd:fc:c1:c0:27:6f:fe:03:9e:26:61:88:6d:f9: bb:5b:25:53:f3:32:66:b0:d5:42:07:3f:1d:2f:6f: 2f:53:04:08:2e:16:cd:a9:7b:9c:d9:20:4c:0a:a9: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:7C:2C:91:8E:EF:14:08:C7:DC:0B:83:42:42:D5:90:1E:1D:CD X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:61:7b:82:e3:bb:09:7e:98:2c:bd:b2:39:88:36:f7:1a:fb: 24:b7:2c:b1:91:0b:bf:47:49:37:2f:55:42:b5:ba:07:63:29: 1b:c6:59:25:e0:3b:12:d9:0b:8e:55:a7:2c:b6:3a:0c:de:b7: 23:54:14:df:ff:dc:54:85:21:f7:85:35:9f:dd:b4:2f:3c:18: 08:3c:9b:03:e5:50:ca:43:98:d4:17:09:d1:e4:9d:db:ef:55: dc:00:ca:4e:5d:75:1b:38:11:e2:39:62:11:17:97:d1:b9:21: b4:73:68:d4:c5:90:26:f3:71:5f:72:b0:01:fb:91:30:f5:c6: 24:06:ff:b6:ce:a7:60:a2:77:ce:ef:6a:16:7d:cf:64:08:55: fa:a4:5c:83:05:70:b8:75:ad:fe:6e:c3:ac:83:98:c3:62:21: 91:ba:b6:c1:1a:01:95:bb:a0:92:df:bd:41:92:a7:e6:f6:49: 7d:30:29:f2:8f:58:68:83:90:5d:42:be:d2:71:35:16:ba:c7: 04:c1:51:07:8b:c5:36:29:aa:88:14:5d:c2:71:51:f4:f0:a4: 01:cf:af:9f:07:22:b0:c2:21:40:3a:66:5f:7d:ce:97:30:34: 69:0b:51:58:2b:95:15:71:c5:a0:8b:3c:72:33:00:2e:12:8a: 6e:cc:cf:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUwNDI0MjEwMjAxWhcNMjUwNTAxMjEwMjAxWjAYMRYwFAYD VQQDEw02ODBhYTZjYS03NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4e5a1tdULItC3m9+CoXaNvFtRbN5TccBHyJhXIpleNJgovnRb4xsQZldsyj+ 15gyeC759DQhqL/9koDp9JoDqVxMNqNBfTjrv55QMtofXWDWZfZw6sVjZgIVZX+u QieWWXaDI37r6ocjW769Mm5ecaqT5oZ+jludYWiHedjouayuKf4RCKDgc6LsaDyD qzLE20zXr5nBzvB3M+fAUIISa4vRmpHciXGHvKfuS6LWo4Hm8LK3XC+tjuNkaIIy OokHxCs1roG5vNpHQfxL8gvn5bQC3fzBwCdv/gOeJmGIbfm7WyVT8zJmsNVCBz8d L28vUwQILhbNqXuc2SBMCqkIvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsHfCyR ju8UCMfcC4NCQtWQHh3NMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgYXuC47sJfpgsvbI5iDb3GvsktyyxkQu/R0k3L1VCtboHYykbxlkl 4DsS2QuOVacstjoM3rcjVBTf/9xUhSH3hTWf3bQvPBgIPJsD5VDKQ5jUFwnR5J3b 71XcAMpOXXUbOBHiOWIRF5fRuSG0c2jUxZAm83FfcrAB+5Ew9cYkBv+2zqdgonfO 72oWfc9kCFX6pFyDBXC4da3+bsOsg5jDYiGRurbBGgGVu6CS371Bkqfm9kl9MCny j1hog5BdQr7ScTUWuscEwVEHi8U2KaqIFF3CcVH08KQBz6+fByKwwiFAOmZffc6X MDRpC1FYK5UVccWgizxyMwAuEopuzM8m -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:57 2025 by rpki-client