$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: p8+hnIY9oOzshM4I5SMVCz7WqMw33BCNr9IIW92HPvI= Subject key identifier: 41:18:CC:C3:D5:D4:59:BC:CC:F7:75:DA:77:4B:F8:BD:CD:BA:76:D1 Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 078D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 0787 Signing time: Thu 24 Apr 2025 21:11:33 +0000 Manifest this update: Thu 24 Apr 2025 21:11:33 +0000 Manifest next update: Thu 01 May 2025 21:11:33 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: zaZm5sOD19oCjaMuKq1kZ550QcirUPhxgplqwccD9qU=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: Apr 24 21:11:33 2025 GMT Not After : May 1 21:11:33 2025 GMT Subject: CN=680aa905-1335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:95:ad:d6:ec:83:f0:e0:01:8c:8a:8b:19:58: 09:b7:5f:92:58:d4:6c:ce:7b:56:8e:aa:2f:ca:b5: e3:df:12:55:6a:2f:16:fe:d7:cd:37:3d:c7:bd:50: 3e:12:88:25:59:d9:61:8a:7e:a0:b0:9b:b9:0a:09: a9:b5:0a:4f:98:fb:5e:af:f7:fc:d1:0e:96:52:a7: 8c:c0:2e:a9:02:76:41:54:13:b2:05:cd:cd:4c:51: 1c:1f:bf:4d:10:5f:31:a8:4b:d9:3a:92:49:9b:db: f7:cd:fe:d4:c4:71:08:58:46:42:04:5b:5d:d2:fc: b8:74:fd:c6:21:53:55:a7:b2:52:fd:ae:27:aa:6a: 01:47:96:49:ec:a0:a3:1c:6f:72:f2:2d:74:83:9a: d7:4b:4a:2b:ff:bd:25:a8:13:9a:db:5e:51:31:2e: e0:27:18:81:7d:ef:7f:8b:48:be:2c:4c:1f:4a:19: c7:1c:68:f3:e3:31:05:55:dc:ee:cb:d7:c5:60:5e: 78:f7:18:59:b9:4e:16:5d:f1:4c:2d:3c:da:06:6a: 46:c1:c2:1e:14:1f:5c:d0:81:18:03:03:48:e0:15: 09:9c:1e:58:65:ba:ed:2a:77:19:c2:89:6f:87:73: 62:84:67:54:5d:6a:b4:29:f3:c4:b6:2e:00:8f:a6: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:18:CC:C3:D5:D4:59:BC:CC:F7:75:DA:77:4B:F8:BD:CD:BA:76:D1 X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:b6:f6:89:4a:cb:9e:a0:e9:79:73:e8:5d:72:3a:85:e3:f4: dc:6f:b7:b8:9d:c1:6c:c1:f4:02:ba:59:27:08:d2:00:22:42: f7:d0:79:ed:3d:aa:f4:72:6f:65:9b:59:9b:4e:eb:22:f2:8e: 16:27:e3:44:c0:9a:2b:f7:5e:b4:0a:56:57:b6:7b:30:ab:5a: e7:e0:4b:7c:20:88:9c:3e:37:ec:cf:97:66:40:15:78:b1:db: 5b:0e:2e:7a:d4:a5:40:07:ad:33:0a:3f:1e:71:1e:5d:32:ee: a3:fa:3a:a0:c8:db:51:c6:bf:77:52:74:48:92:7e:c7:91:7b: 47:ac:2b:77:8b:68:af:97:25:1b:3d:8d:2a:f0:11:0b:9a:c8: cf:c9:25:9c:b5:bd:34:10:84:89:4f:79:dd:91:31:70:b9:80: ee:c4:84:39:ff:f8:13:a0:9a:bb:6e:96:93:13:95:06:3c:9f: a8:69:0e:c0:72:13:88:3d:f1:bf:30:a9:35:f2:13:41:bb:1a: 02:78:9a:2b:9b:91:08:2a:5c:5f:93:8c:0d:d8:aa:d9:a7:32: 24:57:12:f2:d3:d2:5e:a9:82:d8:7f:7a:ca:a2:92:ec:01:96: cf:4e:be:82:22:dc:c5:e8:9b:23:00:cb:23:4d:c9:50:23:72: d9:58:f9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjUwNDI0MjExMTMzWhcNMjUwNTAxMjExMTMzWjAYMRYwFAYD VQQDEw02ODBhYTkwNS0xMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9JWt1uyD8OABjIqLGVgJt1+SWNRszntWjqovyrXj3xJVai8W/tfNNz3HvVA+ EoglWdlhin6gsJu5CgmptQpPmPter/f80Q6WUqeMwC6pAnZBVBOyBc3NTFEcH79N EF8xqEvZOpJJm9v3zf7UxHEIWEZCBFtd0vy4dP3GIVNVp7JS/a4nqmoBR5ZJ7KCj HG9y8i10g5rXS0or/70lqBOa215RMS7gJxiBfe9/i0i+LEwfShnHHGjz4zEFVdzu y9fFYF549xhZuU4WXfFMLTzaBmpGwcIeFB9c0IEYAwNI4BUJnB5YZbrtKncZwolv h3NihGdUXWq0KfPEti4Aj6YJKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEYzMPV 1Fm8zPd12ndL+L3NunbRMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKtvaJSsueoOl5c+hdcjqF4/Tcb7e4ncFswfQCulknCNIAIkL30Hnt Par0cm9lm1mbTusi8o4WJ+NEwJor9160ClZXtnswq1rn4Et8IIicPjfsz5dmQBV4 sdtbDi561KVAB60zCj8ecR5dMu6j+jqgyNtRxr93UnRIkn7HkXtHrCt3i2ivlyUb PY0q8BELmsjPySWctb00EISJT3ndkTFwuYDuxIQ5//gToJq7bpaTE5UGPJ+oaQ7A chOIPfG/MKk18hNBuxoCeJorm5EIKlxfk4wN2KrZpzIkVxLy09JeqYLYf3rKopLs AZbPTr6CItzF6JsjAMsjTclQI3LZWPl/ -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:45 2025 by rpki-client