$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json) Hash identifier: sHsGRD0sAdbIW1AE7Dc0Ddx+H6EcucCfMk2x/SPZimQ= Subject key identifier: B4:89:F7:68:44:6D:A9:4B:92:72:25:33:66:12:60:7E:9E:51:9F:66 Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:54:39 +0000 Manifest this update: Fri 25 Apr 2025 05:54:39 +0000 Manifest next update: Fri 02 May 2025 05:54:39 +0000 Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: MiCBTFnnBh4zLWANrfA9Sb0eZuXPtFrRct9GZGP9qsY=) 2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: Y1QGQN0nXso2hopLjYxap7U6L3vOEJ5sbYbcbURZoVc=) 3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: Apr 25 05:54:39 2025 GMT Not After : May 2 05:54:39 2025 GMT Subject: CN=680b239f-22c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:6a:bc:08:db:d7:40:52:4c:80:69:4a:3c: e0:d5:1a:25:81:d8:26:93:8c:82:f5:1d:03:b8:3a: 45:20:14:71:42:6c:9f:8f:3e:ae:b6:7e:5a:76:41: 57:68:58:ca:ab:5f:93:5d:37:93:91:ec:4f:dd:96: 8b:0f:28:08:1a:61:fd:99:be:97:d9:9b:3f:7e:48: 57:1b:a7:35:83:34:32:18:be:e3:8a:75:54:f0:eb: 5f:ee:13:14:2d:8a:5c:0a:d1:fb:ed:e5:4f:6e:9a: bf:c8:70:8c:f6:37:62:da:1d:9b:6b:4a:52:86:67: 41:d5:6e:49:32:60:ec:c3:69:77:30:56:f8:68:28: 39:38:12:5c:f2:a3:34:ca:53:b3:56:c2:f4:39:60: 56:77:6b:8e:97:fd:df:0b:45:80:eb:4a:ca:68:e9: 4c:96:a7:fb:e4:94:c6:9e:62:6b:c8:32:36:1e:d5: 97:6a:51:cb:33:1f:d4:87:ba:96:4a:0b:6f:6a:95: 86:cb:23:12:ce:95:1f:06:dc:4b:ab:12:c4:53:87: 9b:8f:63:35:24:a2:38:36:be:4a:ea:99:47:8a:e4: 68:f7:71:d3:b3:b6:fa:00:fa:17:86:fd:66:09:a0: 99:63:8e:d5:58:a6:50:09:9c:bf:54:c5:d4:2f:49: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:89:F7:68:44:6D:A9:4B:92:72:25:33:66:12:60:7E:9E:51:9F:66 X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f1:bf:fc:db:97:5b:c6:85:f1:26:f2:4f:91:c5:92:ee:ac: bb:f0:62:85:6b:4e:a4:70:30:12:01:e1:34:ad:76:da:ba:1f: b6:3d:7f:81:54:f4:45:07:6a:89:5c:b2:64:e1:2a:83:bf:fc: 4b:8a:f2:31:c7:bd:e7:67:ba:72:28:bb:c3:6e:15:62:e9:18: 80:33:44:e4:03:ee:15:70:12:ba:9a:89:16:81:05:c0:56:a3: 0a:67:a7:73:f9:df:d1:dd:60:1d:3a:9a:29:a4:c5:08:f4:23: 33:7c:8a:e3:50:d1:c8:0f:3b:93:9a:f2:8a:4a:51:bb:bb:a2: d2:41:81:76:8a:cb:80:a1:87:d0:fb:ac:a9:a7:48:1e:eb:37: c8:a4:dd:11:e4:68:17:0a:1b:16:d7:ad:f0:6c:2d:5b:ce:3b: f9:14:f1:10:92:be:b3:9e:e1:39:23:87:74:f9:b2:f1:d1:fc: 3c:7b:d0:a8:6a:98:ca:22:2f:68:46:89:d6:7b:88:1a:40:be: f8:c3:10:f4:55:34:ff:db:73:33:f1:1e:74:a3:a9:9c:5c:2c: 9b:d6:4e:ee:4d:5d:3b:67:6b:87:6d:8f:5c:ea:c1:19:2d:22: 8f:fa:ab:c4:62:3f:db:15:11:20:8e:a6:c6:ef:93:41:3b:71: 4d:9c:20:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjczNjExMC8GA1UEBRMoMzBCRTFFQjlEM0FDNDlEMEFGRUUxMzUzQzNGOUQxMTY3 QTAwN0IxNzAeFw0yNTA0MjUwNTU0MzlaFw0yNTA1MDIwNTU0MzlaMBgxFjAUBgNV BAMTDTY4MGIyMzlmLTIyYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/uWq8CNvXQFJMgGlKPODVGiWB2CaTjIL1HQO4OkUgFHFCbJ+PPq62flp2QVdo WMqrX5NdN5OR7E/dlosPKAgaYf2ZvpfZmz9+SFcbpzWDNDIYvuOKdVTw61/uExQt ilwK0fvt5U9umr/IcIz2N2LaHZtrSlKGZ0HVbkkyYOzDaXcwVvhoKDk4ElzyozTK U7NWwvQ5YFZ3a46X/d8LRYDrSspo6UyWp/vklMaeYmvIMjYe1ZdqUcszH9SHupZK C29qlYbLIxLOlR8G3EurEsRTh5uPYzUkojg2vkrqmUeK5Gj3cdOztvoA+heG/WYJ oJljjtVYplAJnL9UxdQvSQC5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtIn3aERt qUuSciUzZhJgfp5Rn2YwHwYDVR0jBBgwFoAUML4eudOsSdCv7hNTw/nRFnoAexcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNzM2L0YxMzNFRjBDODQy RDExRUY5OUU4M0Q4NEM0RjlBRTAyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUw0ZXVkT3NTZEN2N2hOVHdfblJGbm9BZXhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NzM2L0YxMzNFRjBDODQyRDExRUY5OUU4M0Q4NEM0RjlBRTAyL01MNGV1ZE9zU2RD djdoTlR3X25SRm5vQWV4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrxv/zbl1vGhfEm8k+RxZLurLvwYoVrTqRwMBIB4TStdtq6H7Y9f4FU 9EUHaolcsmThKoO//EuK8jHHvednunIou8NuFWLpGIAzROQD7hVwErqaiRaBBcBW owpnp3P539HdYB06mimkxQj0IzN8iuNQ0cgPO5Oa8opKUbu7otJBgXaKy4Chh9D7 rKmnSB7rN8ik3RHkaBcKGxbXrfBsLVvOO/kU8RCSvrOe4Tkjh3T5svHR/Dx70Khq mMoiL2hGidZ7iBpAvvjDEPRVNP/bczPxHnSjqZxcLJvWTu5NXTtna4dtj1zqwRkt Io/6q8RiP9sVESCOpsbvk0E7cU2cIJ8= -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:55 2025 by rpki-client