$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json) Hash identifier: xhZSFoyZdGh2DDyuGal+h1drLsZBxZ+UkP3w45aAztQ= Subject key identifier: 48:AC:14:AA:B1:E4:A1:39:13:6A:0D:D3:6A:22:25:1C:CD:01:F0:D7 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 17C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft Manifest number: 1760 Signing time: Thu 24 Apr 2025 16:38:38 +0000 Manifest this update: Thu 24 Apr 2025 16:38:37 +0000 Manifest next update: Thu 01 May 2025 16:38:37 +0000 Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: Fw27nMOW6bd13HuYAb6rj1Dkb5uJmsKh7FBs199GeX0=) 2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: HwVvfhhBB2RSjFMDjowAziG6alcP2zuXw5LmUAX2gK8=) 3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 9OXjAAMYLAB5L3agld9axHr8PefYFycM5j/bsa1mWpA=) 4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: rlaLzwVaLuL4ngSmjTuU0HKWW8Z5rb2WxCS8BXA4T2A=) 5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: f4Nb70DFVEDtxBNhflIcmdj1De7oL7oNb+VI5wy+7A8=) 6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: uYFRc83EBaJfN2GivSwIY06UqczGnSbs78PJfa9CAEA=) 7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: jF4bRTQ1bhj8ogQbDSaGxO9z7G4aPx9aLlwCJEOU1qE=) 8: 696975861A3611EEA597E872C4F9AE02.roa (hash: B3kL8S/jc+3ePihG4qejPX9ur4Lx70UDT6EX1xakBa4=) 9: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: th7HEEEVK4zRCYHv7MzA93JGFKTxnTNbxPYDrvgQY58=) 10: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: dHpVockv1v0nsLKVjW4JjR0Rc9XC1Dp8MsDOOMq04/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: Apr 24 16:38:37 2025 GMT Not After : May 1 16:38:37 2025 GMT Subject: CN=680a690e-a926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:01:c9:cf:33:4a:d5:47:98:6e:d4:36:4c: 2d:09:de:d1:20:d0:d2:94:87:f0:89:89:a4:e2:61: 8c:27:bf:5a:89:f6:d8:62:d8:89:d0:77:2c:07:12: b9:02:85:b7:dc:96:23:dc:85:58:38:ea:95:29:0b: 40:99:98:0f:3b:0f:6b:fd:eb:96:14:72:27:98:f1: 6a:80:3f:dd:af:ce:2e:58:5d:6c:87:c8:34:17:7c: 50:d4:bd:e0:9c:c4:cd:b3:30:4e:81:82:27:b8:ed: 9f:f6:73:65:f9:c2:5e:11:be:9e:47:ec:d7:17:2b: 01:eb:ac:a7:3c:97:c8:86:80:ea:f4:f0:28:f4:6b: 04:67:f2:f3:32:c0:8d:c3:20:01:fd:da:d1:9c:14: 41:db:a5:4e:88:f5:f9:29:05:96:f8:cf:87:f9:19: 86:ce:a7:b5:60:f4:8d:8f:73:9f:45:c3:0e:8d:8f: d0:36:b8:72:72:8f:1a:38:1b:f7:b4:ff:d5:ec:50: f3:81:28:cf:b3:ed:ee:7e:55:0e:db:2f:97:58:ed: 49:5f:a5:70:bc:a3:eb:79:06:ef:32:9d:6a:07:58: 68:fb:1a:4e:86:ac:96:75:e2:1b:46:90:ff:35:16: 3f:08:23:db:2b:e0:71:80:3c:c8:c8:1c:bf:29:5f: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AC:14:AA:B1:E4:A1:39:13:6A:0D:D3:6A:22:25:1C:CD:01:F0:D7 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:24:6b:2a:f9:5c:96:5b:7b:c4:84:06:d3:72:a6:71:01:cf: d6:45:71:6e:04:94:25:81:d1:53:15:54:d5:0d:d3:bf:c4:41: f5:24:37:4c:69:3d:0f:59:61:0c:55:14:e7:e4:45:9d:0a:19: f2:cf:93:82:58:63:bf:cd:75:76:7a:88:d9:90:c7:5d:81:b2: dd:ee:42:7d:a0:e0:b8:f0:34:2d:d6:0c:a3:67:56:78:21:34: 0a:f7:67:e2:1f:ca:b7:02:d1:74:17:83:e9:30:ac:fd:03:e6: 9f:4d:45:f1:b7:89:df:52:50:57:78:ee:a6:d3:91:90:57:2b: c2:fd:29:09:d0:2b:8e:fd:80:4f:90:f8:8e:ed:5e:cb:d2:7c: 06:c3:bf:ac:b2:ac:c9:24:4d:fa:d2:30:16:52:12:36:1d:02: 53:77:b2:e6:75:6b:ef:64:e3:da:89:85:a1:71:c6:83:c1:55: 60:44:66:76:80:dd:cb:76:04:e7:54:af:77:75:e4:66:d0:fd: 70:74:8f:0b:e7:c6:c3:a1:99:6b:14:5c:7a:9e:d3:e1:95:13: 3e:4c:29:00:25:e1:40:8a:16:fc:c6:bc:e1:ad:f0:4f:a8:13: a8:38:80:0d:83:de:01:d5:cc:e7:ff:4e:a1:93:08:1e:53:2d: 68:44:1a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwNDI0MTYzODM3WhcNMjUwNTAxMTYzODM3WjAYMRYwFAYD VQQDEw02ODBhNjkwZS1hOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXoByc8zStVHmG7UNkwtCd7RINDSlIfwiYmk4mGMJ79aifbYYtiJ0HcsBxK5 AoW33JYj3IVYOOqVKQtAmZgPOw9r/euWFHInmPFqgD/dr84uWF1sh8g0F3xQ1L3g nMTNszBOgYInuO2f9nNl+cJeEb6eR+zXFysB66ynPJfIhoDq9PAo9GsEZ/LzMsCN wyAB/drRnBRB26VOiPX5KQWW+M+H+RmGzqe1YPSNj3OfRcMOjY/QNrhyco8aOBv3 tP/V7FDzgSjPs+3uflUO2y+XWO1JX6VwvKPreQbvMp1qB1ho+xpOhqyWdeIbRpD/ NRY/CCPbK+BxgDzIyBy/KV+tFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEisFKqx 5KE5E2oN02oiJRzNAfDXMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUJGsq+VyWW3vEhAbTcqZxAc/WRXFuBJQlgdFTFVTVDdO/xEH1JDdM aT0PWWEMVRTn5EWdChnyz5OCWGO/zXV2eojZkMddgbLd7kJ9oOC48DQt1gyjZ1Z4 ITQK92fiH8q3AtF0F4PpMKz9A+afTUXxt4nfUlBXeO6m05GQVyvC/SkJ0CuO/YBP kPiO7V7L0nwGw7+ssqzJJE360jAWUhI2HQJTd7LmdWvvZOPaiYWhccaDwVVgRGZ2 gN3LdgTnVK93deRm0P1wdI8L58bDoZlrFFx6ntPhlRM+TCkAJeFAihb8xrzhrfBP qBOoOIANg94B1czn/06hkwgeUy1oRBpg -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:12 2025 by rpki-client