$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json) Hash identifier: hZloWxkodwrgaTb0zXsbd6mPCPjxBAJYgvXwDQzIY3U= Subject key identifier: 08:1F:88:B5:EC:80:7B:EE:CE:13:A3:13:1A:67:38:E5:E8:CF:1C:6E Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft Manifest number: 0140 Signing time: Fri 25 Apr 2025 03:27:24 +0000 Manifest this update: Fri 25 Apr 2025 03:27:24 +0000 Manifest next update: Fri 02 May 2025 03:27:24 +0000 Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: Z5jdPhcftbTyOXyjAD6MopqlAWbOoHD+C/ucGc9tmJs=) 2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: YBS7N1V85GEsKAdkA8SgTeGUq7xGqu6t+13xBrFpNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Validity Not Before: Apr 25 03:27:24 2025 GMT Not After : May 2 03:27:24 2025 GMT Subject: CN=680b011c-5ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:7c:9c:31:cd:58:28:7f:a7:79:2a:c6:86: 82:1f:f3:d0:44:88:80:e0:69:97:c8:cd:ea:60:e0: c3:7f:04:cd:b9:fa:09:4d:fe:7a:6b:44:88:f8:cc: 83:3b:fc:93:d3:7f:69:42:bb:bc:ba:88:40:cc:8a: a0:e6:80:ae:20:c2:a1:2e:79:20:9e:17:8e:0c:e6: 66:9e:4c:72:4f:05:6b:c1:44:8d:d3:37:1d:7d:50: ac:a5:d8:c7:09:13:a0:e7:65:5a:5a:a6:6b:38:d3: fb:19:1f:2a:c0:50:88:04:08:ff:4b:eb:dd:af:0a: 76:fb:c0:47:a4:18:07:8a:9a:3d:af:2c:d0:e1:a2: 5b:e9:b5:10:c2:95:54:93:30:7c:b7:39:87:ea:96: ae:33:68:f8:e1:30:c3:6f:62:e5:0f:25:a5:b3:f4: fc:60:48:85:7a:d6:04:25:04:ac:5c:95:54:df:a7: 14:f3:a5:64:3b:b3:a3:d8:a8:3b:ac:c6:95:b9:8b: 1b:21:e4:14:e0:c4:d1:b2:a7:81:d4:fd:a1:83:03: 31:55:9b:b3:0b:15:c3:34:a1:6b:b1:5f:d1:2f:b0: 29:80:0e:ab:4e:fe:98:14:88:4f:dc:32:d5:ea:cb: e5:c6:e2:31:72:bd:15:fb:7b:be:2d:fe:d0:b7:5a: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1F:88:B5:EC:80:7B:EE:CE:13:A3:13:1A:67:38:E5:E8:CF:1C:6E X509v3 Authority Key Identifier: keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:14:45:e7:a6:52:0e:24:39:33:8a:cb:50:23:46:58:d7:d7: 05:fb:43:f6:8b:2d:93:3b:a2:48:36:44:13:0a:de:66:f3:1d: 1d:ac:2b:55:c1:68:fb:5b:2a:5a:2c:e7:4a:af:0f:73:1a:58: 47:48:1b:13:39:60:9b:7a:a3:ab:2f:37:ea:7a:0f:f4:09:d2: 38:53:b3:51:4b:fc:da:ba:2d:4e:79:8a:dd:cb:db:1a:e0:16: 2f:3f:90:1e:ae:e2:24:ef:db:fb:79:51:18:7a:8e:06:01:75: bb:04:ef:01:22:70:02:21:88:38:a3:b1:e2:b5:53:cc:c3:7d: f7:2a:ed:bc:d6:5d:89:0e:2f:27:e6:3c:3f:cd:23:9f:c5:25: 13:b8:fe:f1:8b:70:af:73:1b:fe:9d:69:19:50:78:7e:bd:94: be:e5:bf:d8:cc:e1:98:df:0b:c4:57:38:fb:f5:40:34:fd:5c: 05:7f:c7:da:3f:b3:0d:6f:0f:c4:01:66:79:f8:ab:d8:ff:a7: 4c:21:83:76:e9:59:d9:72:cb:ac:43:90:f0:71:61:e9:46:9d: 75:c5:c4:23:bf:ee:f1:f4:b2:c1:60:59:49:8a:13:86:5b:af: 36:d2:19:ed:fa:5f:95:53:6d:d1:fe:65:db:04:70:00:50:14: 6f:c1:e2:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF MzA0N0U1MDcwHhcNMjUwNDI1MDMyNzI0WhcNMjUwNTAyMDMyNzI0WjAYMRYwFAYD VQQDEw02ODBiMDExYy01YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wd8nDHNWCh/p3kqxoaCH/PQRIiA4GmXyM3qYODDfwTNufoJTf56a0SI+MyD O/yT039pQru8uohAzIqg5oCuIMKhLnkgnheODOZmnkxyTwVrwUSN0zcdfVCspdjH CROg52VaWqZrONP7GR8qwFCIBAj/S+vdrwp2+8BHpBgHipo9ryzQ4aJb6bUQwpVU kzB8tzmH6pauM2j44TDDb2LlDyWls/T8YEiFetYEJQSsXJVU36cU86VkO7Oj2Kg7 rMaVuYsbIeQU4MTRsqeB1P2hgwMxVZuzCxXDNKFrsV/RL7ApgA6rTv6YFIhP3DLV 6svlxuIxcr0V+3u+Lf7Qt1qaJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgfiLXs gHvuzhOjExpnOOXozxxuMB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3 RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1 UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x cmpxeXdNS3YzUVRqQkg1UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWFEXnplIOJDkzistQI0ZY19cF+0P2iy2TO6JINkQTCt5m8x0drCtV wWj7WypaLOdKrw9zGlhHSBsTOWCbeqOrLzfqeg/0CdI4U7NRS/zaui1OeYrdy9sa 4BYvP5AeruIk79v7eVEYeo4GAXW7BO8BInACIYg4o7HitVPMw333Ku281l2JDi8n 5jw/zSOfxSUTuP7xi3Cvcxv+nWkZUHh+vZS+5b/YzOGY3wvEVzj79UA0/VwFf8fa P7MNbw/EAWZ5+KvY/6dMIYN26VnZcsusQ5DwcWHpRp11xcQjv+7x9LLBYFlJihOG W6820hnt+l+VU23R/mXbBHAAUBRvweKd -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:24 2025 by rpki-client