$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: v1YKdYK7rnOv53uhCibQ4SW+oqe/ykBHfy1jwXIgjCE= Subject key identifier: F1:8C:44:2A:42:43:C1:86:82:90:01:F7:CF:B5:B9:82:C5:C6:01:D1 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 05C5 Signing time: Thu 24 Apr 2025 22:51:46 +0000 Manifest this update: Thu 24 Apr 2025 22:51:46 +0000 Manifest next update: Thu 01 May 2025 22:51:46 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: dRg38XrYGn5P9qmVV+QbKmVdyragLvpk3ztus44Upds=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: Sk3MXf9hmKLKaZp7ZXhyP99sQACjplOfFz1EgPLs6Ek=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: BQWLLp5AImfbBq763vvDpgX+6Q3xmVvjxSK4ih5JSF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Apr 24 22:51:46 2025 GMT Not After : May 1 22:51:46 2025 GMT Subject: CN=680ac082-120c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:b3:7e:88:11:f9:94:10:90:68:ac:7b:f0: 4f:18:4f:c2:1c:83:94:db:ea:dc:22:a6:80:a1:62: f1:85:90:eb:d2:8b:de:3c:22:ac:53:d1:94:c9:ad: 77:1e:aa:23:ca:58:5e:1a:e6:b4:f6:2b:ee:0e:5b: ba:b0:25:11:f3:92:da:9c:9e:47:8f:29:94:ce:62: 4c:a0:b5:49:59:a3:a5:b8:16:9e:bb:31:ee:68:42: c1:f2:39:5a:99:e8:a9:77:2d:27:d8:45:36:54:9b: e4:e0:cd:c5:3d:bc:f4:d0:c8:08:90:9e:66:5a:23: b6:45:8b:2a:dd:21:0f:5a:ce:06:76:26:f5:cc:15: 39:f6:85:ab:6a:4a:a8:0f:18:6d:84:0f:2d:9f:b9: 2a:a9:44:85:90:30:f4:8c:53:ed:c2:5a:8c:92:6d: aa:71:ba:89:ab:1f:63:ba:19:a0:e2:90:7d:d4:37: 13:08:1f:da:96:4b:9c:9e:9b:09:47:66:3d:8a:d5: 51:2a:11:3a:99:1b:34:5c:10:6f:19:bb:68:69:a6: fa:b1:ba:4c:d0:d9:3a:de:a6:c7:0a:1e:e0:b3:5d: 3c:5e:81:91:31:dc:80:9b:65:bf:d3:a6:8d:e2:a6: 7d:07:ff:c2:f6:7e:06:ab:fe:16:4a:e6:30:a3:f0: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8C:44:2A:42:43:C1:86:82:90:01:F7:CF:B5:B9:82:C5:C6:01:D1 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:87:74:1b:aa:2e:40:85:99:ba:b6:0b:c3:d9:60:ef:75: 5b:1a:44:9c:82:bc:71:c8:01:10:3e:b7:92:a8:eb:a7:3f:ea: 69:cd:5b:e7:bf:8a:59:5f:fd:99:84:3d:84:09:eb:6c:99:1b: 99:46:7b:8c:90:aa:17:30:7d:3b:8f:69:76:22:14:91:e4:cb: 90:c6:56:86:13:5c:e3:ff:be:61:b6:72:27:e8:cd:02:70:c0: 81:40:dd:07:71:d1:cf:a7:3c:4b:ed:b6:60:34:cb:05:db:82: de:b9:31:f8:dd:c2:13:19:28:a3:60:e1:f5:b9:7b:04:2c:84: 20:40:79:05:d7:ae:09:ee:35:2f:be:27:24:e9:09:21:a6:da: ac:4e:f5:c0:02:7c:96:af:3b:17:ff:e6:95:84:ad:74:ce:89: 68:f9:28:34:62:a8:a7:4f:94:ad:9e:3b:21:07:ac:bf:63:23: bc:1b:45:7a:e2:68:a7:a5:c7:b3:31:9b:aa:6f:a6:78:51:5c: e0:41:d1:50:65:d8:fc:50:a0:10:59:bd:2d:b1:aa:12:fb:f6: 23:2d:bb:be:7a:c4:d5:2a:3f:c4:b3:7a:f8:c3:23:b1:01:79: 26:ab:81:92:77:82:81:ba:de:b5:1a:30:9d:10:b6:a3:6f:a6: df:33:47:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjUwNDI0MjI1MTQ2WhcNMjUwNTAxMjI1MTQ2WjAYMRYwFAYD VQQDEw02ODBhYzA4Mi0xMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm26zfogR+ZQQkGise/BPGE/CHIOU2+rcIqaAoWLxhZDr0ovePCKsU9GUya13 HqojylheGua09ivuDlu6sCUR85LanJ5HjymUzmJMoLVJWaOluBaeuzHuaELB8jla meipdy0n2EU2VJvk4M3FPbz00MgIkJ5mWiO2RYsq3SEPWs4Gdib1zBU59oWrakqo DxhthA8tn7kqqUSFkDD0jFPtwlqMkm2qcbqJqx9juhmg4pB91DcTCB/alkucnpsJ R2Y9itVRKhE6mRs0XBBvGbtoaab6sbpM0Nk63qbHCh7gs108XoGRMdyAm2W/06aN 4qZ9B//C9n4Gq/4WSuYwo/BQywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGMRCpC Q8GGgpAB98+1uYLFxgHRMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiYd0G6ouQIWZurYLw9lg73VbGkScgrxxyAEQPreSqOunP+ppzVvn v4pZX/2ZhD2ECetsmRuZRnuMkKoXMH07j2l2IhSR5MuQxlaGE1zj/75htnIn6M0C cMCBQN0HcdHPpzxL7bZgNMsF24LeuTH43cITGSijYOH1uXsELIQgQHkF164J7jUv vick6QkhptqsTvXAAnyWrzsX/+aVhK10zolo+Sg0YqinT5StnjshB6y/YyO8G0V6 4minpcezMZuqb6Z4UVzgQdFQZdj8UKAQWb0tsaoS+/YjLbu+esTVKj/Es3r4wyOx AXkmq4GSd4KBut61GjCdELajb6bfM0dX -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:40 2025 by rpki-client