$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: EQ8hw4/VK9NO0veeuAnz6driTlnKN/kpByhKBDEtgM0= Subject key identifier: 36:0A:7F:66:DA:B6:56:B2:2B:F7:3B:27:3A:6E:E3:DC:CD:EC:4C:D7 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 0A Signing time: Fri 25 Apr 2025 07:08:44 +0000 Manifest this update: Fri 25 Apr 2025 07:08:43 +0000 Manifest next update: Fri 02 May 2025 07:08:43 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: anzTM+NOzxAqFskRWGPt6dwnAkRcKyMmAdE0cd6lyyk=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Apr 25 07:08:43 2025 GMT Not After : May 2 07:08:43 2025 GMT Subject: CN=680b34fc-6e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:4b:9c:c7:b5:bf:ed:e0:2c:2a:83:48:bf: c4:09:ae:2c:4d:64:0e:1f:1b:6f:00:59:a0:5a:da: da:9c:ab:3b:b2:fe:6c:a1:c8:8d:9d:82:68:be:78: 4d:7b:59:2f:1e:e3:18:4d:f7:22:32:6d:e5:98:7b: af:0b:28:9c:12:de:9c:c7:5a:0d:68:d5:18:da:37: a2:dc:65:2a:c8:a3:4a:a1:2e:2d:a7:3c:42:1e:49: 62:b7:96:12:dc:45:6f:28:ba:c9:54:fc:2e:57:c8: 1d:83:32:c9:23:9e:b0:e1:bb:df:0a:6c:6a:cc:0e: da:1f:a9:35:87:d4:53:f1:f3:cd:68:50:cf:6d:6a: c6:ed:14:a1:14:b6:1f:52:f5:b8:f9:6a:c8:b4:d3: 3f:12:e9:31:ad:1f:15:7f:12:85:07:d1:ad:c1:84: ec:d8:1e:61:35:03:58:84:e4:9c:e2:d4:8a:d3:8d: 2a:ba:31:2d:6d:0e:54:b2:a1:bd:ac:91:0d:06:8f: b9:cb:95:27:95:53:e1:ae:30:51:32:46:44:22:e8: 48:f4:74:73:63:ce:2b:cc:81:01:20:d1:fc:08:bf: 17:d4:f3:64:59:81:73:8d:28:ed:80:c3:18:b8:e5: 18:bc:a6:da:4c:ae:7d:35:5d:32:18:6c:29:65:ea: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:7F:66:DA:B6:56:B2:2B:F7:3B:27:3A:6E:E3:DC:CD:EC:4C:D7 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:99:84:87:dd:89:13:b7:84:7e:2c:47:56:37:c3:0f:36: f7:7c:68:b1:0f:17:c9:01:2b:c3:6f:ca:b7:ba:c9:c8:50:13: cc:4c:5e:c2:f1:7b:21:e7:3e:e6:f1:9e:27:f7:e8:97:b6:ec: 72:e9:0c:fe:7a:aa:55:6c:1a:40:20:ea:ae:f8:70:31:3e:61: cb:48:98:3e:b1:8a:b4:76:41:98:c0:fa:97:48:67:31:b6:07: 02:fd:0e:5e:cf:ee:17:e5:98:f5:6b:58:1a:64:f8:07:d6:14: 1e:70:7a:70:60:98:9a:01:f7:83:67:19:b8:86:ef:a8:0a:6c: aa:7c:ee:ad:23:55:60:eb:c2:fc:a1:5e:b8:f2:dc:3a:18:66: 95:3e:4b:2d:6a:ff:b9:e8:d3:44:8b:e2:37:fd:38:05:cf:f5: a1:6f:fe:7c:f7:77:af:90:40:7e:a6:12:64:75:ff:23:61:93: 9d:89:70:92:9d:27:a0:a6:dd:07:62:7d:d8:b7:f7:0e:a3:3c: 05:fa:42:8b:c0:86:2a:28:48:6e:ff:3a:c9:a8:ed:c9:01:8a: 70:10:1b:eb:56:52:34:b6:78:46:5e:8a:7d:1f:9c:a1:d5:cf: 1b:bb:99:ed:df:3d:e9:f4:cc:55:f1:75:5f:1f:23:ff:53:bf: cb:11:45:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTA0MjUwNzA4NDNaFw0yNTA1MDIwNzA4NDNaMBgxFjAUBgNV BAMTDTY4MGIzNGZjLTZlNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTOUucx7W/7eAsKoNIv8QJrixNZA4fG28AWaBa2tqcqzuy/myhyI2dgmi+eE17 WS8e4xhN9yIybeWYe68LKJwS3pzHWg1o1RjaN6LcZSrIo0qhLi2nPEIeSWK3lhLc RW8ouslU/C5XyB2DMskjnrDhu98KbGrMDtofqTWH1FPx881oUM9tasbtFKEUth9S 9bj5asi00z8S6TGtHxV/EoUH0a3BhOzYHmE1A1iE5Jzi1IrTjSq6MS1tDlSyob2s kQ0Gj7nLlSeVU+GuMFEyRkQi6Ej0dHNjzivMgQEg0fwIvxfU82RZgXONKO2Awxi4 5Ri8ptpMrn01XTIYbCll6mOlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNgp/Ztq2 VrIr9zsnOm7j3M3sTNcwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIqAmYSH3YkTt4R+LEdWN8MPNvd8aLEPF8kBK8Nvyre6ychQE8xMXsLx eyHnPubxnif36Je27HLpDP56qlVsGkAg6q74cDE+YctImD6xirR2QZjA+pdIZzG2 BwL9Dl7P7hflmPVrWBpk+AfWFB5wenBgmJoB94NnGbiG76gKbKp87q0jVWDrwvyh Xrjy3DoYZpU+Sy1q/7no00SL4jf9OAXP9aFv/nz3d6+QQH6mEmR1/yNhk52JcJKd J6Cm3Qdifdi39w6jPAX6QovAhiooSG7/Osmo7ckBinAQG+tWUjS2eEZein0fnKHV zxu7me3fPen0zFXxdV8fI/9Tv8sRRV8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:55 2025 by rpki-client