$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json) Hash identifier: zI8xCaARmftWLkc/GO6DwnPClj8rNtmrhqn3bFYw6Hc= Subject key identifier: DF:F8:D3:C2:6A:04:AA:49:28:23:2C:B0:E0:4B:A9:03:5E:89:9C:FE Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft Manifest number: 01DC Signing time: Fri 25 Apr 2025 01:54:56 +0000 Manifest this update: Fri 25 Apr 2025 01:54:55 +0000 Manifest next update: Fri 02 May 2025 01:54:55 +0000 Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: WZHS+qrQEjVvbGI1MSLMQOlS2z7ntwNYCen+rimbIiU=) 2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 79hpZAVwx1DDoLtalxNbxLsW7+220EotRranSNFA/dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Validity Not Before: Apr 25 01:54:55 2025 GMT Not After : May 2 01:54:55 2025 GMT Subject: CN=680aeb70-4419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:e0:56:7b:b3:a3:5d:48:cb:68:63:6c:fc: c4:6e:ac:16:71:89:47:ca:82:4c:2d:a2:86:7d:3a: b0:48:f2:87:ce:07:bc:f2:5a:59:e0:54:8b:63:8d: 9f:0c:2f:ce:fb:9e:5f:8e:b9:ae:fe:50:96:5e:81: 0f:81:04:73:ac:96:ed:f4:28:5d:90:a9:b7:76:59: 1b:8f:7f:b8:8a:25:28:e6:04:21:77:67:75:21:75: 3d:c4:6a:68:03:71:a4:b6:5d:25:eb:38:93:01:42: a1:12:74:27:5c:10:36:4c:88:12:27:c1:d9:af:80: 8b:de:83:2d:c4:5f:16:63:5d:74:42:2b:f3:21:58: 4f:47:b0:42:00:39:0f:c9:1c:9a:31:b5:0d:de:37: 38:d2:51:0b:4b:d3:4c:90:76:75:26:2b:23:4d:a2: 40:90:0b:6e:0a:88:11:bc:e7:36:f6:99:c4:42:4c: 11:c3:5a:77:9c:d6:bf:45:c7:5c:7d:66:a4:ec:28: 2e:7f:6b:fb:c7:fc:d9:96:19:d5:d6:ec:c1:ca:b1: d4:aa:ac:6c:f8:58:35:43:7b:d5:c9:2a:64:34:78: 5f:f0:d2:59:77:e1:6f:c1:5b:7c:78:8a:9c:8f:6c: e2:c1:18:77:84:23:12:13:71:5b:12:d7:9c:f9:5a: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F8:D3:C2:6A:04:AA:49:28:23:2C:B0:E0:4B:A9:03:5E:89:9C:FE X509v3 Authority Key Identifier: keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:83:3a:91:22:39:31:9d:dc:35:a9:0d:7c:4f:04:cd:07:0e: a2:36:4d:78:2b:97:bd:65:bf:2d:6f:3f:4b:ab:a5:7b:5a:21: 04:e4:e2:5a:00:a0:ab:1c:7c:2e:ac:36:f0:ee:58:4f:50:a5: 06:94:50:f7:2e:cd:a9:40:c9:31:dd:c3:e1:0d:89:2d:42:3f: 78:e6:8f:35:c2:36:13:fc:fc:a0:07:1a:5a:cc:7d:54:67:d4: 85:19:ae:3f:2c:f4:5b:66:95:dd:88:cb:1f:45:df:b4:ae:7d: 17:fd:aa:31:a6:80:dd:f7:c1:49:3a:49:15:3b:bd:45:b4:27: f8:7d:4a:db:8a:c3:53:0a:93:4a:11:19:d1:f4:93:ed:22:40: 70:6d:6a:c3:22:3e:16:47:34:67:30:bd:50:f9:0e:a8:03:94: e2:24:37:a1:85:08:3b:9a:9f:61:11:02:55:03:4f:c5:80:08: b6:43:b5:53:4f:81:08:6b:03:93:59:03:65:e5:b9:67:63:26: e8:c6:16:67:31:3c:c2:09:68:81:2b:14:a0:29:93:06:11:b2: 72:81:56:a6:a9:10:85:1a:e8:7d:7f:50:18:95:e2:0f:17:19: f1:ec:20:99:b9:f3:d5:60:f1:1a:97:f7:54:44:4a:5c:e5:55: ce:3c:58:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF RTREMUQ5OUMwHhcNMjUwNDI1MDE1NDU1WhcNMjUwNTAyMDE1NDU1WjAYMRYwFAYD VQQDEw02ODBhZWI3MC00NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfzgVnuzo11Iy2hjbPzEbqwWcYlHyoJMLaKGfTqwSPKHzge88lpZ4FSLY42f DC/O+55fjrmu/lCWXoEPgQRzrJbt9ChdkKm3dlkbj3+4iiUo5gQhd2d1IXU9xGpo A3Gktl0l6ziTAUKhEnQnXBA2TIgSJ8HZr4CL3oMtxF8WY110QivzIVhPR7BCADkP yRyaMbUN3jc40lELS9NMkHZ1JisjTaJAkAtuCogRvOc29pnEQkwRw1p3nNa/Rcdc fWak7Cguf2v7x/zZlhnV1uzByrHUqqxs+Fg1Q3vVySpkNHhf8NJZd+FvwVt8eIqc j2ziwRh3hCMSE3FbEtec+VoVsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/408Jq BKpJKCMssOBLqQNeiZz+MB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGgzqRIjkxndw1qQ18TwTNBw6iNk14K5e9Zb8tbz9Lq6V7WiEE5OJa AKCrHHwurDbw7lhPUKUGlFD3Ls2pQMkx3cPhDYktQj945o81wjYT/PygBxpazH1U Z9SFGa4/LPRbZpXdiMsfRd+0rn0X/aoxpoDd98FJOkkVO71FtCf4fUrbisNTCpNK ERnR9JPtIkBwbWrDIj4WRzRnML1Q+Q6oA5TiJDehhQg7mp9hEQJVA0/FgAi2Q7VT T4EIawOTWQNl5blnYyboxhZnMTzCCWiBKxSgKZMGEbJygVamqRCFGuh9f1AYleIP Fxnx7CCZufPVYPEal/dUREpc5VXOPFgJ -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:31 2025 by rpki-client