$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: nRmhrl9UGatmyntJr7KXxg/F/8lX1Ocf4u47kjaNYsU= Subject key identifier: EB:43:E9:79:32:A7:05:CF:82:EA:24:DF:29:C2:33:42:F4:B3:55:96 Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 0292 Signing time: Fri 25 Apr 2025 01:19:52 +0000 Manifest this update: Fri 25 Apr 2025 01:19:52 +0000 Manifest next update: Fri 02 May 2025 01:19:52 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: mdu56kxDJtAps6E3NdOZHLHXmN4jE7bc6uxc2BSWVJk=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Apr 25 01:19:52 2025 GMT Not After : May 2 01:19:52 2025 GMT Subject: CN=680ae338-0a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:ca:08:a5:d7:3f:99:96:f9:56:e2:bc:8e: 66:1f:92:9f:9e:b7:fe:02:27:dc:56:2f:5e:e6:a3: e4:47:90:ea:41:f3:c5:e5:5d:a7:ff:06:0e:1d:91: e9:5a:b9:e2:ff:16:9f:b7:09:ac:6c:70:1d:65:1f: 8d:73:b6:e0:4b:3d:99:b8:f0:07:9a:97:aa:53:b0: f5:e6:38:16:19:3f:b8:71:f8:92:9d:62:a1:72:b3: 6b:3f:df:b9:c9:6d:10:0b:95:6b:20:26:5e:94:cb: 96:51:fc:fc:57:7d:fd:e6:6b:4d:ea:25:7d:2d:1c: 07:12:a6:e4:6a:75:91:04:75:6b:35:74:9e:52:0b: 8f:cf:56:9f:56:58:3a:99:fe:eb:fc:6d:77:c3:a1: 9e:54:a3:20:50:ba:47:66:5e:3c:f8:f9:25:8f:15: f6:22:c5:c5:b0:b0:8b:ba:06:e2:33:40:71:63:b0: d1:1f:56:91:9d:67:c2:d3:17:9f:d5:b1:e7:a4:cc: e5:79:3b:ad:1a:17:b0:7a:c1:34:44:a6:8b:55:4b: 6a:2f:44:77:d2:71:63:fe:65:4f:c6:f9:4d:af:fb: 20:32:20:04:ea:65:c6:8e:83:ac:2c:4f:95:83:70: f3:c8:25:20:26:c9:85:7f:41:4c:0c:77:44:c1:51: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:E9:79:32:A7:05:CF:82:EA:24:DF:29:C2:33:42:F4:B3:55:96 X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e3:5f:26:fb:c9:2a:c7:8d:ec:8f:c6:a9:9d:4c:1c:05:f4: 60:25:f3:0d:ef:1c:d6:ee:3a:e6:87:8c:d8:2f:35:c1:19:10: 2b:84:f3:4a:16:e8:28:e5:7a:d6:93:33:c9:63:c7:45:4a:4d: 20:a3:f2:79:6b:66:f3:49:20:f7:ab:4f:c6:c7:ac:36:d2:10: 6c:dc:fb:cc:e2:77:e5:5a:ab:b3:38:21:44:7b:b5:53:8a:03: 84:21:84:d2:4c:4b:2a:b7:f0:50:58:4e:c4:73:c8:d6:51:dc: 85:66:0e:b1:36:29:5e:db:75:e4:d1:a5:40:5f:64:6d:4e:75: aa:6b:3c:11:8e:07:f6:ae:4c:2d:51:dc:bf:2d:15:96:d6:18: 21:b6:49:1f:e0:8e:1f:e4:b0:8a:e4:23:0d:ed:c9:d8:1e:8b: be:b9:5c:90:c5:d2:65:46:2e:70:ee:bb:54:3a:15:67:46:72: 03:81:36:81:52:e2:f1:7b:7b:cd:82:7b:e6:a4:da:3c:55:cf: f9:c7:e1:70:4e:4b:62:26:b7:45:d4:18:57:11:ce:9b:bf:ac: fe:31:ae:ed:03:65:89:7f:83:32:ae:df:64:19:01:f5:02:ea: 71:7f:77:10:9d:1a:3d:ad:f3:80:e9:e3:f2:84:26:f0:a0:4a: 9d:71:93:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwNDI1MDExOTUyWhcNMjUwNTAyMDExOTUyWjAYMRYwFAYD VQQDEw02ODBhZTMzOC0wYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAng7KCKXXP5mW+VbivI5mH5Kfnrf+AifcVi9e5qPkR5DqQfPF5V2n/wYOHZHp Wrni/xaftwmsbHAdZR+Nc7bgSz2ZuPAHmpeqU7D15jgWGT+4cfiSnWKhcrNrP9+5 yW0QC5VrICZelMuWUfz8V3395mtN6iV9LRwHEqbkanWRBHVrNXSeUguPz1afVlg6 mf7r/G13w6GeVKMgULpHZl48+PkljxX2IsXFsLCLugbiM0BxY7DRH1aRnWfC0xef 1bHnpMzleTutGhewesE0RKaLVUtqL0R30nFj/mVPxvlNr/sgMiAE6mXGjoOsLE+V g3DzyCUgJsmFf0FMDHdEwVHCuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtD6Xky pwXPguok3ynCM0L0s1WWMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq418m+8kqx43sj8apnUwcBfRgJfMN7xzW7jrmh4zYLzXBGRArhPNK Fugo5XrWkzPJY8dFSk0go/J5a2bzSSD3q0/Gx6w20hBs3PvM4nflWquzOCFEe7VT igOEIYTSTEsqt/BQWE7Ec8jWUdyFZg6xNile23Xk0aVAX2RtTnWqazwRjgf2rkwt Udy/LRWW1hghtkkf4I4f5LCK5CMN7cnYHou+uVyQxdJlRi5w7rtUOhVnRnIDgTaB UuLxe3vNgnvmpNo8Vc/5x+FwTktiJrdF1BhXEc6bv6z+Ma7tA2WJf4Myrt9kGQH1 Aupxf3cQnRo9rfOA6ePyhCbwoEqdcZOZ -----END CERTIFICATE-----Generated at Sat Apr 26 23:06:44 2025 by rpki-client