$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: QJJ1GS18NtBd0u+ZaARPKceTJmtu5q48XLVNV98WCBc= Subject key identifier: E8:3B:FF:E9:DC:3C:0B:3B:D5:10:2F:FC:6C:11:D0:CC:A3:10:F2:2A Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 07F2 Signing time: Thu 24 Apr 2025 20:48:33 +0000 Manifest this update: Thu 24 Apr 2025 20:48:32 +0000 Manifest next update: Thu 01 May 2025 20:48:32 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: 5Q1hy0KmrhaAZ4pO6BzD5I67JOLwLTV57mveu9J5StY=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Apr 24 20:48:32 2025 GMT Not After : May 1 20:48:32 2025 GMT Subject: CN=680aa3a0-1269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:a3:eb:c6:17:91:0e:f9:fb:4d:71:ad:12: 22:54:6d:7b:de:19:68:a7:c1:4b:da:de:f9:d1:80: d8:3d:8f:19:7a:98:cf:a7:c9:a0:76:9e:f7:d9:c1: 97:e0:db:5f:db:29:1a:c7:7a:08:98:43:0e:5d:b4: c0:11:a9:bf:e1:fe:0b:89:82:5e:e2:2d:44:b6:b7: a6:8e:13:63:3d:90:32:b4:9a:54:e0:0d:28:f5:8d: 13:23:59:49:fe:f9:2b:f3:84:7f:52:fa:8f:d9:ef: 1e:03:b5:f9:91:7c:05:87:ba:64:7d:4d:b2:44:d6: da:77:2b:fb:0b:25:cf:65:e8:b6:4a:ac:01:40:12: a8:aa:16:a5:1e:af:34:94:69:46:b2:20:93:6e:11: a9:95:cf:7c:63:f4:c2:09:f1:c8:0c:03:09:14:42: a3:de:94:7f:0b:8c:53:e7:81:56:99:3b:6b:2d:3c: ae:3e:13:ab:7a:bb:0a:61:0e:e0:87:7f:d1:33:5d: 77:f8:db:84:b9:5f:09:53:e0:8b:c9:36:bb:ba:d6: f1:6a:17:3e:f1:fa:6f:d5:a5:21:86:0e:7b:cf:88: 46:7d:9f:5b:a7:03:c3:23:0e:05:52:93:6d:d5:cc: a4:b5:e9:76:d4:84:ac:a6:af:fa:71:5c:cd:da:9b: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:FF:E9:DC:3C:0B:3B:D5:10:2F:FC:6C:11:D0:CC:A3:10:F2:2A X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7f:d2:52:0e:e1:b2:24:74:7a:99:9a:fb:17:9f:d6:27:40: 48:be:9f:c9:db:0d:6e:13:8a:6a:63:21:7d:a2:ed:8d:56:b9: c0:d1:0f:cc:ba:46:71:f0:f8:83:db:c3:13:97:96:9e:cb:17: c3:b8:8c:26:13:72:d7:a4:74:c5:4d:1c:d5:34:1a:61:2f:b0: 99:78:d1:f2:0f:07:fd:dc:a1:c9:bc:a3:b3:98:a9:73:c1:e0: e6:fa:62:9a:17:e6:dd:31:23:ba:a2:42:49:17:89:8d:4c:f7: 83:b3:43:12:04:95:82:33:fd:06:70:fc:91:d9:4b:d7:4b:35: 05:87:74:b7:69:fb:ed:bd:5f:fd:45:03:4e:57:88:fb:16:d7: e0:44:02:33:4a:dc:13:1b:4c:84:c6:1d:24:14:6e:76:12:25: 50:be:d2:18:67:bd:8d:aa:0e:77:90:f9:eb:5a:94:91:28:af: cd:24:52:c2:97:17:46:4c:48:9c:18:d4:8b:96:0f:49:70:22: 6a:2e:d2:78:1e:3c:8c:a2:7c:7a:c5:01:d9:29:22:03:fa:6c: df:8f:e3:ba:13:53:a7:3f:70:23:03:07:72:b0:ee:65:ab:23: b3:d0:60:95:96:29:ae:56:20:19:3a:4d:bc:e0:81:5d:42:ed: 08:63:8a:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUwNDI0MjA0ODMyWhcNMjUwNTAxMjA0ODMyWjAYMRYwFAYD VQQDEw02ODBhYTNhMC0xMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkCj68YXkQ75+01xrRIiVG173hlop8FL2t750YDYPY8ZepjPp8mgdp732cGX 4Ntf2ykax3oImEMOXbTAEam/4f4LiYJe4i1EtremjhNjPZAytJpU4A0o9Y0TI1lJ /vkr84R/UvqP2e8eA7X5kXwFh7pkfU2yRNbadyv7CyXPZei2SqwBQBKoqhalHq80 lGlGsiCTbhGplc98Y/TCCfHIDAMJFEKj3pR/C4xT54FWmTtrLTyuPhOrersKYQ7g h3/RM113+NuEuV8JU+CLyTa7utbxahc+8fpv1aUhhg57z4hGfZ9bpwPDIw4FUpNt 1cyktel21ISspq/6cVzN2psF+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg7/+nc PAs71RAv/GwR0MyjEPIqMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzf9JSDuGyJHR6mZr7F5/WJ0BIvp/J2w1uE4pqYyF9ou2NVrnA0Q/M ukZx8PiD28MTl5aeyxfDuIwmE3LXpHTFTRzVNBphL7CZeNHyDwf93KHJvKOzmKlz weDm+mKaF+bdMSO6okJJF4mNTPeDs0MSBJWCM/0GcPyR2UvXSzUFh3S3afvtvV/9 RQNOV4j7FtfgRAIzStwTG0yExh0kFG52EiVQvtIYZ72Nqg53kPnrWpSRKK/NJFLC lxdGTEicGNSLlg9JcCJqLtJ4HjyMonx6xQHZKSID+mzfj+O6E1OnP3AjAwdysO5l qyOz0GCVlimuViAZOk284IFdQu0IY4pP -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:32 2025 by rpki-client