$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json) Hash identifier: gK4LslQT+ArvLmIiFEir+WGDemd+EdHiq3T2Kb+aRjQ= Subject key identifier: B2:A9:8C:B2:2B:1D:34:61:6F:DE:D7:43:10:8A:20:1E:5A:54:B8:D3 Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft Manifest number: 0B16 Signing time: Thu 24 Apr 2025 19:10:14 +0000 Manifest this update: Thu 24 Apr 2025 19:10:13 +0000 Manifest next update: Thu 01 May 2025 19:10:13 +0000 Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: dY2ahq33vTQvziMhFDO/vHnPBC6djvcqvOEdImSoIns=) 2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: 6+05b8G0TEW8X4nNCgb84dRnZnbGJzRjWgQsJpxv0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Validity Not Before: Apr 24 19:10:13 2025 GMT Not After : May 1 19:10:13 2025 GMT Subject: CN=680a8c96-72cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:bc:62:f1:ec:f5:16:50:9d:0c:96:80:96: ab:ab:4a:37:67:5b:56:f3:b5:84:54:5c:cc:51:51: da:50:ac:ea:1a:30:f8:0b:be:3e:ef:7a:e4:71:3e: cd:fe:b0:83:98:46:59:f1:11:b4:82:08:47:20:62: 1a:1b:6b:4f:2e:c4:41:0c:e8:7d:9c:88:d5:41:49: 20:4a:9c:57:9c:ce:c1:e1:de:77:1c:25:e8:7e:b9: 5e:39:ba:fe:a7:b1:ae:db:10:f1:83:f7:54:22:e8: 97:f2:76:37:1b:3f:a7:c1:50:fb:83:a6:7c:ed:e2: 94:79:2f:a2:d9:ef:8a:5a:91:13:2f:61:d3:71:d0: 62:8c:8e:01:6f:8a:55:6e:0b:6f:e4:18:bf:e6:af: 21:71:5d:16:03:a4:74:c1:d7:b6:a0:a9:bb:3d:73: f9:20:be:88:df:3c:9e:b4:7f:31:93:1a:44:28:9a: b5:36:e6:51:9d:a1:6d:8f:1c:92:0e:ec:81:de:04: d8:40:d4:46:ff:80:3c:98:64:aa:9e:6c:81:c4:cf: b5:ea:3c:8c:b7:a2:ca:67:de:ff:0d:b3:a1:9f:56: ae:06:aa:d1:ac:8e:e5:64:91:88:ee:3f:35:3b:e1: c3:e4:b8:e2:0f:03:3f:f8:6b:f2:4e:7c:66:42:ff: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:8C:B2:2B:1D:34:61:6F:DE:D7:43:10:8A:20:1E:5A:54:B8:D3 X509v3 Authority Key Identifier: keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:c7:e3:db:95:a9:23:9a:ba:15:0e:65:8c:28:4a:02:da:4c: ba:ab:df:01:b1:ad:94:ef:41:fc:40:99:45:41:c3:e5:c8:8d: bf:ab:75:63:82:5f:2c:de:3b:87:69:c2:a8:22:42:7a:96:2e: 66:14:e0:41:6d:78:08:2c:e0:10:ae:57:ea:11:8e:c2:be:81: 9c:6b:04:84:05:6a:79:1c:9c:22:1c:34:ad:92:86:a2:99:94: ae:b2:bd:d5:89:5d:40:ea:ff:e5:7e:0d:ad:25:20:cc:9b:bf: c6:58:bc:12:39:89:92:7a:cd:c8:2d:45:52:b3:e0:10:ea:44: 39:3c:00:15:98:ee:22:47:6f:49:ce:fb:d3:bb:58:f2:a2:c6: d8:dd:c3:de:08:1b:8d:3e:7c:be:3e:53:2e:5a:db:5e:aa:ba: 59:07:ac:97:8a:32:30:20:03:8e:6a:3c:4a:50:56:4f:b7:7e: 3c:e4:c7:9a:0a:9d:18:ec:06:bc:67:2a:d4:16:4a:f4:57:f8: 95:e1:d0:dd:21:2a:02:97:87:9e:07:ba:4b:88:de:5b:9b:d5: 1b:8b:6a:84:13:03:0f:96:0d:87:f3:d9:47:19:b2:76:d3:c0: e7:08:ae:0c:97:6a:7d:05:4e:01:5c:56:f1:4c:3b:ad:c9:39: 58:a5:5c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1 MDVBRURDMEYwHhcNMjUwNDI0MTkxMDEzWhcNMjUwNTAxMTkxMDEzWjAYMRYwFAYD VQQDEw02ODBhOGM5Ni03MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcu8YvHs9RZQnQyWgJarq0o3Z1tW87WEVFzMUVHaUKzqGjD4C74+73rkcT7N /rCDmEZZ8RG0gghHIGIaG2tPLsRBDOh9nIjVQUkgSpxXnM7B4d53HCXofrleObr+ p7Gu2xDxg/dUIuiX8nY3Gz+nwVD7g6Z87eKUeS+i2e+KWpETL2HTcdBijI4Bb4pV bgtv5Bi/5q8hcV0WA6R0wde2oKm7PXP5IL6I3zyetH8xkxpEKJq1NuZRnaFtjxyS DuyB3gTYQNRG/4A8mGSqnmyBxM+16jyMt6LKZ97/DbOhn1auBqrRrI7lZJGI7j81 O+HD5LjiDwM/+GvyTnxmQv+STQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKpjLIr HTRhb97XQxCKIB5aVLjTMB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs QlVQU1NNYndoVXhRV3UzQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7x+PblakjmroVDmWMKEoC2ky6q98Bsa2U70H8QJlFQcPlyI2/q3Vj gl8s3juHacKoIkJ6li5mFOBBbXgILOAQrlfqEY7CvoGcawSEBWp5HJwiHDStkoai mZSusr3ViV1A6v/lfg2tJSDMm7/GWLwSOYmSes3ILUVSs+AQ6kQ5PAAVmO4iR29J zvvTu1jyosbY3cPeCBuNPny+PlMuWtteqrpZB6yXijIwIAOOajxKUFZPt3485Mea Cp0Y7Aa8ZyrUFkr0V/iV4dDdISoCl4eeB7pLiN5bm9Ubi2qEEwMPlg2H89lHGbJ2 08DnCK4Ml2p9BU4BXFbxTDutyTlYpVz9 -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:50 2025 by rpki-client