$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: oY6TxFxmK/ZZTvVnbaMsbohxsmGit2lTA91k/NK98Zc= Subject key identifier: 34:BF:C0:36:65:68:1D:54:A5:CD:ED:EB:43:2A:1E:BD:B8:DC:64:81 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: FA Signing time: Fri 25 Apr 2025 04:14:06 +0000 Manifest this update: Fri 25 Apr 2025 04:14:05 +0000 Manifest next update: Fri 02 May 2025 04:14:05 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: q9FGYxq60SnOWw0cOOAJxoyo7S3l3bKeSXTd7Fm3WjY=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Apr 25 04:14:05 2025 GMT Not After : May 2 04:14:05 2025 GMT Subject: CN=680b0c0e-ddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:12:03:7d:4f:7c:f0:21:31:91:13:fe:96: d0:20:70:72:4f:e8:e1:4b:cd:a8:11:96:7b:fe:b9: ae:e2:6d:dc:e7:d6:06:17:ce:b4:d2:18:47:b4:c5: 24:1e:43:0d:7f:41:b1:3a:f4:2e:c8:54:c6:94:30: 97:69:35:49:70:9f:70:8f:23:63:78:4c:83:1d:42: 89:bc:75:3c:a1:2d:07:64:04:3f:60:c8:09:2b:95: 96:a5:ae:f7:5e:c8:3c:2e:1e:d1:ea:c5:12:84:4e: 1f:6a:4c:9d:76:e8:5c:d2:2c:18:1f:c8:9b:64:80: 99:cc:bd:62:0c:aa:8b:3f:27:aa:ab:7b:d9:5e:12: b2:c1:c0:00:10:ff:cc:9c:76:70:61:4f:58:0c:ba: 9c:1d:8e:6e:08:91:f7:d0:3d:64:54:06:ca:8f:15: f6:f2:0a:ec:2b:5f:21:af:96:41:b2:36:60:5d:bc: 32:c6:b4:4d:ae:eb:19:cd:18:7c:76:2b:0e:95:48: e1:0b:da:87:1b:34:48:89:fa:55:3b:6e:cb:c4:4a: ea:33:ed:e4:3f:72:3e:65:f4:00:d7:e7:c8:33:c5: 99:ce:b7:80:e5:da:5c:f7:71:6e:80:fe:ee:5f:6a: 67:e2:a1:c5:e9:11:ed:e0:f4:20:4a:93:bd:ae:f2: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BF:C0:36:65:68:1D:54:A5:CD:ED:EB:43:2A:1E:BD:B8:DC:64:81 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1e:41:70:59:2a:55:04:4a:a1:99:3d:3d:71:20:38:08:4c: 8a:45:52:45:5d:bf:b1:d4:a9:68:80:93:79:f3:35:dc:ae:cd: 1e:71:d5:4b:04:46:7c:d3:01:49:82:5b:45:2e:a6:7b:73:70: 54:b6:98:0e:6e:a2:4c:21:4f:09:ba:9b:d0:b0:a6:4d:53:eb: 13:73:fe:07:2a:b1:1e:df:2a:d0:61:a6:6c:1a:d8:a4:3b:96: ac:f5:55:2b:1f:5d:22:f1:9b:a9:0f:5e:3d:e3:fc:dd:96:97: 53:d4:96:e6:cd:38:7e:aa:05:b6:c6:07:3d:3b:d1:47:f2:09: c1:8e:81:c2:18:f7:a8:9b:3c:ed:05:ce:a1:52:d7:db:06:97: d0:53:82:4b:bf:73:15:d8:3a:3d:45:b0:46:06:03:97:27:31: f4:a5:8a:7c:bf:c9:a1:4e:7e:6c:c9:f7:1d:40:f7:9a:44:71: 5f:60:45:a8:14:0f:85:12:42:5f:ca:f1:70:05:51:72:f6:65: 05:3d:eb:78:0b:d7:37:38:04:50:ff:68:fb:74:9d:d7:45:7f: 7a:88:25:79:9c:4a:9b:d3:02:b4:10:0c:70:9c:ae:4b:6f:43: 4b:ee:52:8c:33:a5:71:45:ce:cc:5b:7c:e9:a2:56:39:64:9b: 1b:e8:4c:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwNDI1MDQxNDA1WhcNMjUwNTAyMDQxNDA1WjAYMRYwFAYD VQQDEw02ODBiMGMwZS1kZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVkSA31PfPAhMZET/pbQIHByT+jhS82oEZZ7/rmu4m3c59YGF8600hhHtMUk HkMNf0GxOvQuyFTGlDCXaTVJcJ9wjyNjeEyDHUKJvHU8oS0HZAQ/YMgJK5WWpa73 Xsg8Lh7R6sUShE4fakydduhc0iwYH8ibZICZzL1iDKqLPyeqq3vZXhKywcAAEP/M nHZwYU9YDLqcHY5uCJH30D1kVAbKjxX28grsK18hr5ZBsjZgXbwyxrRNrusZzRh8 disOlUjhC9qHGzRIifpVO27LxErqM+3kP3I+ZfQA1+fIM8WZzreA5dpc93FugP7u X2pn4qHF6RHt4PQgSpO9rvJcgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDS/wDZl aB1Upc3t60MqHr243GSBMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5HkFwWSpVBEqhmT09cSA4CEyKRVJFXb+x1KlogJN58zXcrs0ecdVL BEZ80wFJgltFLqZ7c3BUtpgObqJMIU8JupvQsKZNU+sTc/4HKrEe3yrQYaZsGtik O5as9VUrH10i8ZupD1494/zdlpdT1JbmzTh+qgW2xgc9O9FH8gnBjoHCGPeomzzt Bc6hUtfbBpfQU4JLv3MV2Do9RbBGBgOXJzH0pYp8v8mhTn5syfcdQPeaRHFfYEWo FA+FEkJfyvFwBVFy9mUFPet4C9c3OARQ/2j7dJ3XRX96iCV5nEqb0wK0EAxwnK5L b0NL7lKMM6VxRc7MW3zpolY5ZJsb6EyY -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:05 2025 by rpki-client