$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft File: apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json) Hash identifier: 3iri7jbGivftY3Bq5igdfu+U9qIEPwALZPORcwNZ8JQ= Subject key identifier: BC:F4:11:E8:2F:62:45:F4:B7:CF:AC:C8:E5:33:CD:01:74:BB:C5:98 Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 Certificate issuer: /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft Manifest number: 053C Signing time: Thu 24 Apr 2025 23:15:47 +0000 Manifest this update: Thu 24 Apr 2025 23:15:47 +0000 Manifest next update: Thu 01 May 2025 23:15:47 +0000 Files and hashes: 1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: Km8iO/N1U3C3BftbbR8P1xtzYTv1sl3a+ruW13iE2v0=) 2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: ZnpRalcn1+UDz0Qh9MVT7PEHG3mXFgwSlTQlnQVlTtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1 Validity Not Before: Apr 24 23:15:47 2025 GMT Not After : May 1 23:15:47 2025 GMT Subject: CN=680ac623-989d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:cf:77:47:0f:95:c2:32:40:04:6e:4a:5e: d2:7b:be:de:58:09:12:e1:d8:f7:83:09:d0:77:12: d4:bc:cd:24:3f:4d:99:a1:a2:0a:ed:e0:f0:df:8c: bd:1f:f6:db:06:f1:c5:95:27:e3:75:b4:fc:bf:b4: d6:30:56:0b:dc:3a:a9:d5:f1:fa:dd:03:e6:56:1a: 85:df:db:c2:e6:94:c2:28:9e:ae:f0:cf:13:bc:53: 2d:13:4c:82:f2:84:ec:49:64:e7:bc:e8:f3:b6:07: b8:c2:3f:83:94:bc:e2:e1:0a:e0:a3:98:68:09:19: 2f:ff:6c:cd:0f:25:42:0c:1d:01:c2:e7:fc:d1:ae: bc:b6:98:6d:e1:b6:19:a7:ac:02:23:af:01:b7:3e: a3:d5:4c:66:55:8f:68:31:46:56:43:25:a2:a0:3c: f5:bc:96:18:51:f5:fd:aa:cd:92:e8:b8:0c:66:79: 01:21:f6:66:da:29:db:7c:ea:f6:dc:64:01:33:5b: eb:52:67:91:b0:af:01:d3:64:2f:73:06:f0:47:a3: ab:a9:a6:52:77:fa:08:8a:7c:63:5f:9b:16:ad:68: 00:3a:cc:31:7d:f4:08:2c:5e:b3:0e:bc:c3:85:39: 05:65:9a:4b:40:dc:4b:b5:32:90:38:d2:29:3f:b3: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:11:E8:2F:62:45:F4:B7:CF:AC:C8:E5:33:CD:01:74:BB:C5:98 X509v3 Authority Key Identifier: keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:17:d3:6a:07:08:01:cb:48:ea:28:68:3f:32:79:ca:9b:c0: ba:6b:18:19:5b:be:a5:24:1d:9e:6a:4f:b0:df:0f:c8:a2:96: f6:b8:e8:79:b2:e1:c6:a5:ef:56:e9:9d:1c:fa:60:08:6d:4c: 74:2a:11:6b:3c:16:c9:d1:3d:c3:b8:f9:c4:6d:87:6f:b5:50: b6:c7:45:48:16:0d:f1:20:29:87:b4:64:9f:83:3e:68:f1:60: 80:bc:08:6a:09:5f:8d:f4:8d:1b:b3:c0:23:7f:6d:a4:a5:2d: 8a:38:1e:01:ef:6c:f3:3a:4e:d0:97:bd:98:dc:6b:7e:b6:3a: 31:5f:d9:1b:82:70:fd:bd:bd:cd:9e:96:ea:e5:36:51:fa:50: 4a:9a:67:16:a5:8d:ae:85:1e:db:06:8a:c2:b6:6a:14:57:35: 2f:88:29:9a:04:4e:1d:1d:ec:55:f1:44:bd:a1:47:44:f4:88: c3:d8:88:28:5f:73:2b:de:c6:ca:5b:aa:4a:ce:ad:b8:3b:28: e9:3d:82:74:b1:01:d9:5c:14:6d:63:a1:be:42:a6:1f:6f:f5: f5:ab:43:7d:19:d2:29:8a:07:b4:4c:48:9b:af:e1:a0:57:59: 58:6f:22:2e:7b:45:bc:ec:5e:06:e9:3f:f6:25:5d:76:d5:92: 67:3e:fb:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBMEMxMTAvBgNVBAUTKDZBOTU0ODFDRThGNDBERDg4OTVEMUZCN0FFRTkwRTU5 NTlCQTgzQzEwHhcNMjUwNDI0MjMxNTQ3WhcNMjUwNTAxMjMxNTQ3WjAYMRYwFAYD VQQDEw02ODBhYzYyMy05ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VrPd0cPlcIyQARuSl7Se77eWAkS4dj3gwnQdxLUvM0kP02ZoaIK7eDw34y9 H/bbBvHFlSfjdbT8v7TWMFYL3Dqp1fH63QPmVhqF39vC5pTCKJ6u8M8TvFMtE0yC 8oTsSWTnvOjztge4wj+DlLzi4Qrgo5hoCRkv/2zNDyVCDB0Bwuf80a68tpht4bYZ p6wCI68Btz6j1UxmVY9oMUZWQyWioDz1vJYYUfX9qs2S6LgMZnkBIfZm2inbfOr2 3GQBM1vrUmeRsK8B02QvcwbwR6OrqaZSd/oIinxjX5sWrWgAOswxffQILF6zDrzD hTkFZZpLQNxLtTKQONIpP7PJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz0Eegv YkX0t8+syOUzzQF0u8WYMB8GA1UdIwQYMBaAFGqVSBzo9A3YiV0ft67pDllZuoPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REEwQy9CNkRFMTMxMkYw NDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERkaUpYUi0zcnVrT1dWbTZn OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwVklIT2owRGRpSlhSLTNydWtPV1ZtNmc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REEwQy9CNkRFMTMxMkYwNDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERk aUpYUi0zcnVrT1dWbTZnOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByF9NqBwgBy0jqKGg/MnnKm8C6axgZW76lJB2eak+w3w/Iopb2uOh5 suHGpe9W6Z0c+mAIbUx0KhFrPBbJ0T3DuPnEbYdvtVC2x0VIFg3xICmHtGSfgz5o 8WCAvAhqCV+N9I0bs8Ajf22kpS2KOB4B72zzOk7Ql72Y3Gt+tjoxX9kbgnD9vb3N npbq5TZR+lBKmmcWpY2uhR7bBorCtmoUVzUviCmaBE4dHexV8US9oUdE9IjD2Igo X3Mr3sbKW6pKzq24OyjpPYJ0sQHZXBRtY6G+QqYfb/X1q0N9GdIpige0TEibr+Gg V1lYbyIue0W87F4G6T/2JV121ZJnPvvI -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:22 2025 by rpki-client