$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: i0XOPebwe1pwP0ku1uDiukERXoUnKhvLpS123iZh2NI= Subject key identifier: 37:F8:8D:08:DC:32:55:41:FB:87:EB:FE:1C:A5:9F:B0:74:8A:D3:4A Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 26 Signing time: Fri 25 Apr 2025 06:47:14 +0000 Manifest this update: Fri 25 Apr 2025 06:47:14 +0000 Manifest next update: Fri 02 May 2025 06:47:14 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 9naUn/zTHnBu6OVcVr5TJ9aHJiNxhU2twAPlDqdNx1s=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Apr 25 06:47:14 2025 GMT Not After : May 2 06:47:14 2025 GMT Subject: CN=680b2ff2-7d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:38:43:60:ad:a0:12:eb:f7:8d:80:87:be: 62:10:66:24:cf:6e:85:4d:00:59:31:ee:53:2c:0b: 53:ff:af:e7:a3:1f:34:95:99:30:09:21:de:06:fb: b9:de:f4:08:d6:ac:49:b0:75:68:87:5f:4e:5d:3d: 53:8d:b7:81:7a:a9:40:a1:8e:72:12:d7:e6:07:d1: 28:55:8c:b6:ba:aa:c2:c5:18:f3:9f:4d:88:ee:76: be:a8:b1:dc:2d:dc:d4:9d:d2:be:68:c4:28:7c:01: 9b:57:3f:31:72:58:8c:60:9f:cb:eb:84:76:6f:f2: e0:55:b0:ec:fe:5e:8c:ba:06:1b:2b:c1:09:03:7f: 1b:3c:02:12:b5:9b:79:e8:09:7a:ed:7c:61:c6:81: 88:f5:38:c6:cf:c0:8c:c7:61:f9:1f:1e:76:09:df: a4:23:1c:dc:5f:8d:67:bf:a6:1f:4a:10:e1:07:18: 16:23:1f:3a:fd:ee:ce:a0:02:0c:64:df:e5:c6:da: 1b:e3:74:d4:d9:74:fb:f9:ab:3b:88:a5:be:74:56: 3b:4e:5a:5b:64:f7:60:db:91:33:ba:f0:0d:cc:29: 1c:07:54:fe:84:7e:f2:2f:37:cc:6c:f9:ef:aa:08: 21:b0:e9:bf:63:08:20:92:7f:0e:49:c3:d6:2f:0c: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:8D:08:DC:32:55:41:FB:87:EB:FE:1C:A5:9F:B0:74:8A:D3:4A X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:34:32:7c:9a:45:89:84:a9:58:87:7f:27:31:a8:68:8f:b3: de:5e:c5:11:89:68:d3:8c:12:de:cd:4b:6f:75:a6:3a:e0:64: 22:6e:7c:4e:ed:08:40:27:b7:05:20:c7:6e:7b:6b:57:ac:8a: a0:66:f3:9e:da:67:f3:85:d9:77:41:d4:74:6d:ec:81:ca:67: f5:5c:a0:01:77:d8:ce:91:10:03:53:6e:27:f2:0a:ea:c7:3f: fa:0d:ae:73:29:0a:e1:4d:6f:a9:67:6b:19:7d:c4:e0:49:e8: 45:b9:ff:ce:6d:c7:35:b3:fe:44:1e:27:fa:24:97:ed:c0:15: a3:02:8b:01:61:dc:33:7f:84:71:67:60:c0:c7:04:48:33:e6: 7c:93:46:68:3a:4d:85:80:07:af:36:72:02:aa:48:b9:0b:f4: 10:ed:9b:81:d0:36:bf:a0:37:19:d7:0f:ad:dd:af:3b:c2:a4: 05:d9:cc:ee:64:a7:ba:fd:d4:8a:50:05:3c:53:f2:10:fa:de: de:2b:2d:8b:b4:a4:b1:28:5a:44:e0:a1:5b:8c:89:93:85:5c: b6:93:37:01:7e:9c:16:de:aa:89:a9:b3:09:29:2c:8e:dc:b1: d3:a0:ea:a7:4c:16:3a:8f:c3:22:4d:0a:da:b1:ac:99:bb:79: f6:ca:80:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Qjc1OTExMC8GA1UEBRMoRkI0QjY4M0ZCQTREQjZBQzFBNUFDNTA4ODA3RkM3RUE0 OTZDNUVDNTAeFw0yNTA0MjUwNjQ3MTRaFw0yNTA1MDIwNjQ3MTRaMBgxFjAUBgNV BAMTDTY4MGIyZmYyLTdkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDESThDYK2gEuv3jYCHvmIQZiTPboVNAFkx7lMsC1P/r+ejHzSVmTAJId4G+7ne 9AjWrEmwdWiHX05dPVONt4F6qUChjnIS1+YH0ShVjLa6qsLFGPOfTYjudr6osdwt 3NSd0r5oxCh8AZtXPzFyWIxgn8vrhHZv8uBVsOz+Xoy6BhsrwQkDfxs8AhK1m3no CXrtfGHGgYj1OMbPwIzHYfkfHnYJ36QjHNxfjWe/ph9KEOEHGBYjHzr97s6gAgxk 3+XG2hvjdNTZdPv5qzuIpb50VjtOWltk92DbkTO68A3MKRwHVP6EfvIvN8xs+e+q CCGw6b9jCCCSfw5Jw9YvDP9BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN/iNCNwy VUH7h+v+HKWfsHSK00owHwYDVR0jBBgwFoAU+0toP7pNtqwaWsUIgH/H6klsXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNzU5LzY5QzNCRUU2RUI2 NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTB0b1A3cE50cXdhV3NVSWdIX0g2a2xzWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NzU5LzY5QzNCRUU2RUI2NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3 YVdzVUlnSF9INmtsc1hzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABA0MnyaRYmEqViHfycxqGiPs95exRGJaNOMEt7NS291pjrgZCJufE7t CEAntwUgx257a1esiqBm857aZ/OF2XdB1HRt7IHKZ/VcoAF32M6REANTbifyCurH P/oNrnMpCuFNb6lnaxl9xOBJ6EW5/85txzWz/kQeJ/okl+3AFaMCiwFh3DN/hHFn YMDHBEgz5nyTRmg6TYWAB682cgKqSLkL9BDtm4HQNr+gNxnXD63drzvCpAXZzO5k p7r91IpQBTxT8hD63t4rLYu0pLEoWkTgoVuMiZOFXLaTNwF+nBbeqompswkpLI7c sdOg6qdMFjqPwyJNCtqxrJm7efbKgFU= -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:48 2025 by rpki-client