$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft File: bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json) Hash identifier: EQPvOg5BtK4+SV1w0JWvAmmq9ceIDVL9+oYxKdrJKEU= Subject key identifier: D3:25:D8:AB:EC:9C:27:5E:D7:AF:01:EE:AD:1C:05:9F:AE:24:11:5C Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Certificate serial: 194F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft Manifest number: 1903 Signing time: Thu 24 Apr 2025 16:44:46 +0000 Manifest this update: Thu 24 Apr 2025 16:44:45 +0000 Manifest next update: Thu 01 May 2025 16:44:45 +0000 Files and hashes: 1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: cnCroiVXKU35emWX8SgCfm/dsqJ8iKuo+G60RKIgEyI=) 2: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (hash: znEQ3H8kz5gMTgiuQBm1Os8IAbZ7HFh10xdYO2lt09c=) 3: E611E95E6B9E11EB87785D16C4F9AE02.roa (hash: q+n3uUsh0zWmSlc9Z98QF2Ehkjys56muP3bbcifarR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6479 (0x194f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Validity Not Before: Apr 24 16:44:45 2025 GMT Not After : May 1 16:44:45 2025 GMT Subject: CN=680a6a7d-6a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:28:4d:f7:ed:ed:e9:fe:1d:01:27:74:52: 53:4c:91:45:f6:6c:5e:aa:88:cb:d2:76:2f:b7:0c: 8c:95:b9:4f:9d:72:0e:89:01:84:27:98:25:f2:63: f3:c5:6c:5b:e8:95:a8:6b:de:07:a9:92:ab:3b:f1: ef:c0:d8:02:b2:a4:23:69:26:40:ec:63:90:76:19: 75:2b:11:7f:3f:ba:44:8a:9d:f6:13:9b:65:d4:ff: be:ce:ca:19:6c:44:36:34:ec:de:f8:e4:f3:c7:6e: 7e:29:ab:1f:72:c2:aa:5a:40:be:a5:cc:af:d9:38: 9a:d9:c1:f4:74:04:e5:7d:dd:f7:1a:1d:2a:26:fb: b0:e9:69:f3:b4:16:44:d8:5e:4a:9a:50:95:23:75: ba:ad:bb:e3:c0:5c:b6:d8:8e:4a:d0:4f:8e:38:fa: fc:16:fd:bc:22:96:1b:bc:95:1a:5f:78:75:1b:f2: 64:d4:34:b3:9a:5a:4e:f6:22:ee:f6:09:59:60:8a: a1:f1:50:3c:54:1b:03:32:0c:0c:e9:26:e8:22:27: 6c:f1:84:5c:ce:4c:81:f1:c3:8e:8e:62:bf:99:79: da:dd:b0:d1:11:bc:59:d6:a9:64:67:f3:93:22:f0: 19:06:e1:d5:6d:95:9b:31:62:6c:7c:92:2e:46:56: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:25:D8:AB:EC:9C:27:5E:D7:AF:01:EE:AD:1C:05:9F:AE:24:11:5C X509v3 Authority Key Identifier: keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2a:f6:b2:c8:34:45:86:36:d8:2b:79:8c:bb:f9:0d:b2:c3: 8d:9d:b8:3e:3f:1d:df:cd:ba:4e:ac:0e:c6:79:da:01:9d:a6: 1c:77:02:69:ce:cf:fb:53:4b:05:99:bf:cd:40:00:4e:fb:23: 9a:fa:53:a3:4b:0c:07:15:f9:56:57:d5:52:55:e1:ad:e1:79: 29:66:8d:4f:21:97:d1:32:41:f8:85:4c:d6:51:c1:26:9f:92: f8:5a:fc:a5:46:ce:f0:9f:a4:fc:42:57:5a:eb:bb:70:08:f1: 4a:33:2b:4c:1e:9c:c1:79:8e:5e:3f:77:b7:5b:b4:4d:9e:49: 06:9d:ed:d3:b7:18:b4:c1:2a:66:4d:20:e3:76:60:41:d1:77: f6:03:1b:b7:26:fa:5c:b1:2e:50:47:65:e6:54:37:da:a8:f3: 4a:b4:f9:36:85:0c:fc:7f:00:9c:fa:5a:67:37:94:e4:6a:31: 7e:7f:de:1b:d4:d0:f4:c0:1c:76:3c:d6:36:7d:f7:1d:e1:5d: 2b:23:e9:d3:90:2f:18:ba:83:90:a9:0a:5b:79:76:6d:8e:da: 84:c6:af:29:da:f1:22:78:0a:b8:0e:ee:79:58:fd:d9:ab:e7: 95:da:d1:36:e9:50:86:82:d9:93:d6:7b:8f:c7:8d:2a:f7:08: 38:74:35:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz NTA5MUI1NEEwHhcNMjUwNDI0MTY0NDQ1WhcNMjUwNTAxMTY0NDQ1WjAYMRYwFAYD VQQDEw02ODBhNmE3ZC02YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KEoTfft7en+HQEndFJTTJFF9mxeqojL0nYvtwyMlblPnXIOiQGEJ5gl8mPz xWxb6JWoa94HqZKrO/HvwNgCsqQjaSZA7GOQdhl1KxF/P7pEip32E5tl1P++zsoZ bEQ2NOze+OTzx25+KasfcsKqWkC+pcyv2Tia2cH0dATlfd33Gh0qJvuw6WnztBZE 2F5KmlCVI3W6rbvjwFy22I5K0E+OOPr8Fv28IpYbvJUaX3h1G/Jk1DSzmlpO9iLu 9glZYIqh8VA8VBsDMgwM6SboIids8YRczkyB8cOOjmK/mXna3bDREbxZ1qlkZ/OT IvAZBuHVbZWbMWJsfJIuRlawkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMl2Kvs nCde168B7q0cBZ+uJBFcMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMxOS84NjhERDY1NjhDMjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5o V2J5eGpyYmVoaWMxQ1J0VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaKvayyDRFhjbYK3mMu/kNssONnbg+Px3fzbpOrA7GedoBnaYcdwJp zs/7U0sFmb/NQABO+yOa+lOjSwwHFflWV9VSVeGt4XkpZo1PIZfRMkH4hUzWUcEm n5L4WvylRs7wn6T8Qlda67twCPFKMytMHpzBeY5eP3e3W7RNnkkGne3Ttxi0wSpm TSDjdmBB0Xf2Axu3JvpcsS5QR2XmVDfaqPNKtPk2hQz8fwCc+lpnN5TkajF+f94b 1ND0wBx2PNY2ffcd4V0rI+nTkC8YuoOQqQpbeXZtjtqExq8p2vEieAq4Du55WP3Z q+eV2tE26VCGgtmT1nuPx40q9wg4dDV5 -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:59 2025 by rpki-client