$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: zq+2f+FR4xgGZQfmcf4APlfEjv8llr/E9f6C1srJJcQ= Subject key identifier: 96:32:0B:D1:E9:E3:70:6F:48:36:7E:A8:A4:8F:05:2E:CB:FA:2E:9C Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 07F8 Signing time: Thu 24 Apr 2025 20:47:20 +0000 Manifest this update: Thu 24 Apr 2025 20:47:19 +0000 Manifest next update: Thu 01 May 2025 20:47:19 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: /J8YXT0YniZFD5voDyhDW7eemSDsQVUEvNWra2mjjts=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Apr 24 20:47:19 2025 GMT Not After : May 1 20:47:19 2025 GMT Subject: CN=680aa357-6f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:a6:45:95:47:67:d5:43:aa:bd:97:4e:d5: 40:a7:e7:49:79:42:c0:4d:65:8e:43:35:2a:b0:e2: 00:f5:09:59:b0:f1:77:ad:0a:50:8e:c6:d6:f0:d6: 54:e8:60:84:85:8c:a6:40:21:e2:eb:6a:6c:eb:75: 61:05:2b:7a:d4:28:4a:44:ba:3a:79:35:a6:ba:33: 8c:31:a4:d1:ee:b9:20:3a:cb:72:09:26:cf:c8:48: fb:25:60:88:9c:0b:b8:5b:78:df:09:e4:57:ee:ed: 5b:e4:8a:e9:1e:8e:7d:57:70:65:ca:5f:23:7f:d4: 3c:96:95:9f:7f:fb:b5:e0:6d:38:27:db:bb:53:d1: cf:06:a5:dc:a5:9d:a4:48:32:14:ae:02:88:cb:50: f4:7d:1d:75:51:0c:e2:2a:6e:b4:dd:89:4a:cf:a8: cd:a0:a0:39:9c:3f:da:7d:41:68:ff:48:02:bf:b6: f1:56:b2:cc:a8:ce:71:03:18:5b:6f:7c:16:87:b9: 7d:d8:bc:72:fc:42:71:72:04:4c:58:18:27:b2:b7: 10:cc:95:7a:9c:6e:cb:7c:2e:16:d2:05:e6:21:29: b8:d8:7e:51:cd:f1:ca:b0:1b:70:b3:87:1f:46:15: ac:8b:72:84:cb:b6:fa:cc:6a:30:1f:de:11:cb:15: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:0B:D1:E9:E3:70:6F:48:36:7E:A8:A4:8F:05:2E:CB:FA:2E:9C X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:2b:ee:09:21:0b:38:c7:1a:fa:9b:cf:3e:bd:4e:78:12: 23:36:7a:3b:90:ff:5b:b3:3e:24:96:ce:67:1f:05:fc:9d:f2: 68:b5:16:11:ee:95:91:56:af:05:48:b6:56:bc:a4:78:71:5d: a9:21:75:28:b9:87:0a:4c:22:c1:07:60:b1:68:37:46:8d:3c: 4c:33:74:1b:78:b1:bb:37:b8:24:a1:58:cb:bb:08:18:2b:a8: af:3e:57:b2:ea:a6:3e:3f:e0:30:41:d0:4b:cc:0f:21:52:16: 7c:19:cb:74:73:d0:44:8d:ce:02:6f:b5:64:a3:a8:48:ed:f2: 0c:8a:0e:a7:ff:45:08:15:ae:a0:c8:8b:24:20:e4:14:60:65: 24:07:02:c1:df:7e:93:5a:ce:ba:cc:76:51:93:1e:c0:1a:42: 13:e0:5d:a5:4c:49:86:fe:2a:1b:c1:27:70:80:3f:02:51:2b: ad:e9:c1:06:7e:e1:73:06:56:f8:2a:d7:92:51:84:67:03:5a: fa:e1:58:d5:eb:07:b8:2f:16:81:8f:eb:e3:a5:47:28:9e:cf: 69:bd:a7:c0:9e:59:e7:2b:bc:2f:fb:a2:36:69:b7:50:7e:f0: a9:d0:dd:fd:0f:3e:26:cb:1a:6f:05:22:a4:4d:ee:c8:d6:7a: 5d:47:e2:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwNDI0MjA0NzE5WhcNMjUwNTAxMjA0NzE5WjAYMRYwFAYD VQQDEw02ODBhYTM1Ny02ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVGmRZVHZ9VDqr2XTtVAp+dJeULATWWOQzUqsOIA9QlZsPF3rQpQjsbW8NZU 6GCEhYymQCHi62ps63VhBSt61ChKRLo6eTWmujOMMaTR7rkgOstyCSbPyEj7JWCI nAu4W3jfCeRX7u1b5IrpHo59V3Blyl8jf9Q8lpWff/u14G04J9u7U9HPBqXcpZ2k SDIUrgKIy1D0fR11UQziKm603YlKz6jNoKA5nD/afUFo/0gCv7bxVrLMqM5xAxhb b3wWh7l92Lxy/EJxcgRMWBgnsrcQzJV6nG7LfC4W0gXmISm42H5RzfHKsBtws4cf RhWsi3KEy7b6zGowH94RyxW8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYyC9Hp 43BvSDZ+qKSPBS7L+i6cMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxEyvuCSELOMca+pvPPr1OeBIjNno7kP9bsz4kls5nHwX8nfJotRYR 7pWRVq8FSLZWvKR4cV2pIXUouYcKTCLBB2CxaDdGjTxMM3QbeLG7N7gkoVjLuwgY K6ivPley6qY+P+AwQdBLzA8hUhZ8Gct0c9BEjc4Cb7Vko6hI7fIMig6n/0UIFa6g yIskIOQUYGUkBwLB336TWs66zHZRkx7AGkIT4F2lTEmG/iobwSdwgD8CUSut6cEG fuFzBlb4KteSUYRnA1r64VjV6we4LxaBj+vjpUcons9pvafAnlnnK7wv+6I2abdQ fvCp0N39Dz4myxpvBSKkTe7I1npdR+K2 -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:37 2025 by rpki-client