$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: +XheYvJTK4yiiWnR1fSOrHw06+LrykB6S5UWv/vvzv0= Subject key identifier: D3:2F:90:CB:94:A7:FD:45:31:BE:3C:2D:6A:6F:0B:39:47:20:56:E6 Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 1B Signing time: Fri 25 Apr 2025 06:54:08 +0000 Manifest this update: Fri 25 Apr 2025 06:54:07 +0000 Manifest next update: Fri 02 May 2025 06:54:07 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: dr/wila2a4Xj9yTp3WZvSwzkn4U3n9OPFJOZyAc6SKo=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: Apr 25 06:54:07 2025 GMT Not After : May 2 06:54:07 2025 GMT Subject: CN=680b3190-6aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:c4:37:c9:70:0c:68:02:75:26:7a:cc:ad: 19:d2:f1:84:63:f3:9a:96:7d:70:ee:6c:15:3f:cc: 8a:5d:eb:da:73:e1:47:9c:e9:bf:36:e9:58:74:d4: 90:80:ee:c2:06:3b:d4:ee:49:d5:46:5e:30:33:81: b3:de:36:3c:82:01:af:d4:6a:d2:58:c2:19:32:cc: 96:52:24:d4:f1:57:0e:12:f6:73:f2:8c:55:4a:c4: c9:6b:27:d8:79:1a:d6:ce:4c:69:34:fb:ab:b7:62: 2c:c4:ae:66:8f:b6:95:4f:b9:ad:f4:73:8c:ee:b6: 07:72:07:c0:9b:d1:26:cc:8b:5d:40:ab:03:ed:9d: d9:d2:4a:5f:04:fa:7b:17:3a:8e:4f:28:1a:75:d5: fd:d8:f6:af:f0:c3:7d:ce:22:af:ed:00:25:7d:3d: e5:e0:24:2b:c7:aa:32:da:a2:32:ce:0a:7d:c8:91: 03:a1:8b:98:70:31:e5:75:b4:72:bf:2b:41:5b:37: d3:81:a4:20:f7:ef:67:ac:20:e1:e6:50:7a:f7:10: 1b:fb:41:f4:af:70:ca:d4:7b:2e:c9:7f:3d:92:1e: e9:dd:90:fb:1d:76:24:7c:ed:a9:de:79:c4:e1:35: d0:44:a3:41:c6:1c:b7:5d:5b:76:34:5d:45:7e:04: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2F:90:CB:94:A7:FD:45:31:BE:3C:2D:6A:6F:0B:39:47:20:56:E6 X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6b:af:51:a6:3a:ca:23:82:39:d6:59:e2:a9:01:8c:9c:a9: 17:e4:5d:76:ab:68:90:88:68:57:81:ec:32:13:b6:ea:fb:22: 48:2f:fd:20:26:ba:75:11:8e:95:d9:0d:ef:9e:5e:a2:84:d7: 15:4c:a6:64:bc:a1:a9:e4:d5:ba:c0:b3:4c:53:32:7d:bd:3a: 48:98:03:e6:96:6e:85:69:c2:3f:a9:97:8c:ba:54:6b:96:26: 9e:4a:91:ac:e5:e5:d7:d7:71:72:f9:5f:14:42:9e:9d:ed:e5: cd:94:03:fb:8a:df:50:44:f1:a9:83:6e:7d:b7:ca:24:c2:64: 48:bf:28:10:af:c0:7d:4b:ba:95:95:75:76:ef:5d:69:93:e0: fc:29:80:69:4b:0f:e0:2f:b0:55:07:42:7b:5e:eb:20:c2:12: e1:87:bc:91:b5:9d:0e:77:4b:67:9c:0a:78:19:62:6e:20:d5: ec:17:8b:72:76:f9:b6:9d:56:86:65:9c:b9:c8:9d:6d:08:07: 7a:f1:7a:89:82:32:e3:22:be:45:39:04:c7:62:ae:69:29:b4: 72:f3:0f:93:ba:be:43:45:bb:f9:5e:db:e1:e5:e3:51:5d:b3: 1b:d9:5a:69:1c:3e:e6:50:81:22:81:70:28:20:a5:41:a6:89: 18:6f:7e:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA0MjUwNjU0MDdaFw0yNTA1MDIwNjU0MDdaMBgxFjAUBgNV BAMTDTY4MGIzMTkwLTZhYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq8MQ3yXAMaAJ1JnrMrRnS8YRj85qWfXDubBU/zIpd69pz4Uec6b826Vh01JCA 7sIGO9TuSdVGXjAzgbPeNjyCAa/UatJYwhkyzJZSJNTxVw4S9nPyjFVKxMlrJ9h5 GtbOTGk0+6u3YizErmaPtpVPua30c4zutgdyB8Cb0SbMi11AqwPtndnSSl8E+nsX Oo5PKBp11f3Y9q/ww33OIq/tACV9PeXgJCvHqjLaojLOCn3IkQOhi5hwMeV1tHK/ K0FbN9OBpCD372esIOHmUHr3EBv7QfSvcMrUey7Jfz2SHundkPsddiR87aneecTh NdBEo0HGHLddW3Y0XUV+BA0fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0y+Qy5Sn /UUxvjwtam8LOUcgVuYwHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZrr1GmOsojgjnWWeKpAYycqRfkXXaraJCIaFeB7DITtur7Ikgv/SAm unURjpXZDe+eXqKE1xVMpmS8oank1brAs0xTMn29OkiYA+aWboVpwj+pl4y6VGuW Jp5Kkazl5dfXcXL5XxRCnp3t5c2UA/uK31BE8amDbn23yiTCZEi/KBCvwH1LupWV dXbvXWmT4PwpgGlLD+AvsFUHQnte6yDCEuGHvJG1nQ53S2ecCngZYm4g1ewXi3J2 +badVoZlnLnInW0IB3rxeomCMuMivkU5BMdirmkptHLzD5O6vkNFu/le2+Hl41Fd sxvZWmkcPuZQgSKBcCggpUGmiRhvfgk= -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:46 2025 by rpki-client