$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: IklrLB7adMzb63IaEJdZ09CM4YUXpPj7jpW84AQV0jI= Subject key identifier: B4:53:C0:1F:69:DD:2A:12:48:8B:FD:E6:B4:FA:FD:B9:64:AC:07:9F Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: 0104 Signing time: Fri 25 Apr 2025 04:07:36 +0000 Manifest this update: Fri 25 Apr 2025 04:07:35 +0000 Manifest next update: Fri 02 May 2025 04:07:35 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: /+LBu1Tl9pS3heQTRa8kwbXDqK7Dx1s8xCwmXHIZxW8=) 2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: 0voBvvYJ1FOla9h6paRdef89XemcSYIiMH4ggu9oHRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: Apr 25 04:07:35 2025 GMT Not After : May 2 04:07:35 2025 GMT Subject: CN=680b0a87-9108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5c:20:18:24:bf:19:89:13:2a:46:4e:a4:c8: 8e:63:a0:bf:ea:c8:f1:08:75:1f:00:d1:2d:e4:b0: 61:f5:b9:5c:81:18:80:f1:b5:3a:f7:68:cd:b9:55: 37:d0:83:9e:2c:0a:9e:33:6a:4e:db:a7:28:8a:aa: 2e:2f:99:57:6a:ba:63:ef:22:12:27:88:c2:2f:8f: 0d:32:94:ef:68:4f:16:d8:34:c6:15:c0:53:c9:1e: 3e:ba:92:2d:f3:a7:22:ba:54:d1:82:9b:04:34:73: 5a:62:e6:a5:83:ac:6a:05:ab:55:6e:d3:ff:55:9e: 66:15:cf:7c:db:c3:b3:98:88:b2:67:35:4b:2f:1b: 30:01:be:16:89:c2:e9:f4:fa:2d:1b:cd:4f:4c:48: bc:62:ae:08:d6:7f:8e:1b:73:24:36:1f:d0:c4:d5: 79:83:fb:76:3d:77:41:58:9e:21:97:bb:10:f2:91: 59:dd:2d:7a:9e:4f:af:87:d0:7e:d3:1a:8a:50:20: fd:b0:1f:d5:03:4b:cc:1c:6c:83:56:88:06:38:bd: 87:02:90:8d:49:33:5d:64:6c:84:21:20:21:21:45: 0c:c0:99:0c:99:da:e5:5a:92:45:ba:38:ff:85:13: b1:0b:74:ce:28:88:64:d2:60:4f:cc:ab:e4:af:f1: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:C0:1F:69:DD:2A:12:48:8B:FD:E6:B4:FA:FD:B9:64:AC:07:9F X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e9:95:d5:92:60:04:4d:11:c8:bd:95:91:78:5f:df:34:48: dc:bc:46:a8:b0:45:b1:8a:1d:24:85:fc:f2:15:0b:c3:94:0e: e0:40:aa:3d:3f:a2:e2:09:c3:f5:48:8d:b3:ca:16:59:d4:be: fe:91:9f:dd:19:67:42:02:13:b6:35:5f:ce:05:ad:82:c5:02: bf:6a:d8:c3:a6:2b:c1:45:f3:57:d8:30:dc:85:73:61:5d:45: c1:d1:22:11:82:83:62:92:f9:cb:c0:11:80:c1:ee:d6:9d:bc: 87:30:00:94:51:ec:c4:9c:d1:d1:d1:50:b3:e0:b4:1a:64:30: b7:6a:5a:86:b1:a5:4a:ed:45:8b:44:a2:c9:66:af:6f:6a:a2: 83:92:a0:64:8b:45:f4:30:b4:34:b8:31:a8:b4:bd:78:6b:a6: 0e:0f:98:c7:fa:af:4f:81:ea:6c:f9:4f:ee:3e:12:ff:ba:71: e0:52:9c:ab:6a:77:86:1b:9e:34:c5:f9:82:e0:02:73:22:96: 8b:b0:42:1c:89:3f:b7:35:e6:3c:93:18:f0:38:83:d2:ed:a9: 12:a8:ad:cb:b7:e3:2e:03:6e:6f:b6:d8:1b:e7:89:01:02:9d: 76:4e:1d:e7:a2:4a:85:2b:ec:7c:00:ef:b4:54:d6:33:df:79: 9f:8a:d6:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD OERBMzY2QjgwHhcNMjUwNDI1MDQwNzM1WhcNMjUwNTAyMDQwNzM1WjAYMRYwFAYD VQQDEw02ODBiMGE4Ny05MTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9FwgGCS/GYkTKkZOpMiOY6C/6sjxCHUfANEt5LBh9blcgRiA8bU692jNuVU3 0IOeLAqeM2pO26coiqouL5lXarpj7yISJ4jCL48NMpTvaE8W2DTGFcBTyR4+upIt 86ciulTRgpsENHNaYualg6xqBatVbtP/VZ5mFc9828OzmIiyZzVLLxswAb4WicLp 9PotG81PTEi8Yq4I1n+OG3MkNh/QxNV5g/t2PXdBWJ4hl7sQ8pFZ3S16nk+vh9B+ 0xqKUCD9sB/VA0vMHGyDVogGOL2HApCNSTNdZGyEISAhIUUMwJkMmdrlWpJFujj/ hROxC3TOKIhk0mBPzKvkr/ELJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRTwB9p 3SoSSIv95rT6/blkrAefMB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr MjRKOUk1MFB5TExJMmpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc6ZXVkmAETRHIvZWReF/fNEjcvEaosEWxih0khfzyFQvDlA7gQKo9 P6LiCcP1SI2zyhZZ1L7+kZ/dGWdCAhO2NV/OBa2CxQK/atjDpivBRfNX2DDchXNh XUXB0SIRgoNikvnLwBGAwe7WnbyHMACUUezEnNHR0VCz4LQaZDC3alqGsaVK7UWL RKLJZq9vaqKDkqBki0X0MLQ0uDGotL14a6YOD5jH+q9Pgeps+U/uPhL/unHgUpyr aneGG540xfmC4AJzIpaLsEIciT+3NeY8kxjwOIPS7akSqK3Lt+MuA25vttgb54kB Ap12Th3nokqFK+x8AO+0VNYz33mfitZ+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:33 2025 by rpki-client