$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json) Hash identifier: foXcuZMWjq02I45VmSKFu+DQaN8+wrXfYrCWW+HE9Fc= Subject key identifier: B7:03:F7:13:A5:C8:9C:45:F0:4B:EB:BD:B2:4B:76:AF:C3:FA:A9:62 Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 071E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft Manifest number: 0719 Signing time: Thu 24 Apr 2025 21:38:58 +0000 Manifest this update: Thu 24 Apr 2025 21:38:58 +0000 Manifest next update: Thu 01 May 2025 21:38:58 +0000 Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: U6zzWuTfSkHFdjKqJbz4NA5UQjFgaBSkA9arcf999XI=) 2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: 3vNGkA3tCUjQbATswchBY3GI0Vd54z+gZRifmc/PxUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Apr 24 21:38:58 2025 GMT Not After : May 1 21:38:58 2025 GMT Subject: CN=680aaf72-bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:b5:cd:10:c8:0c:89:3f:4b:47:9e:e6:df: f6:2f:60:5c:8b:37:4f:6d:5e:b3:1c:28:c3:28:52: e3:5f:43:6e:bc:c3:a1:53:90:70:03:24:fa:35:d8: d4:09:0a:57:2c:24:22:95:44:a9:61:c5:10:ed:6e: 59:a9:84:65:a8:d2:53:25:f7:33:62:2d:df:95:68: 72:04:09:93:fc:07:f7:d6:e1:d4:c6:c6:b2:be:9a: fe:67:19:4a:b7:60:bb:24:d0:de:a7:c4:88:b0:93: 34:32:69:3c:a3:e7:51:b8:1d:41:7f:a0:a8:c3:84: 1b:39:1d:41:4d:04:db:3e:5c:88:04:de:42:92:7f: ee:09:c5:4e:6f:13:b4:fc:3f:f1:92:11:d9:6f:12: 73:fe:aa:9c:6f:a3:ae:c2:e5:35:e3:e0:33:cf:5a: 7f:8d:4c:26:5f:15:7e:b4:84:f1:e2:95:c9:32:00: b2:25:dc:c3:63:2e:6f:4b:3d:6a:9d:cf:e4:44:06: 3f:ac:78:f2:8f:b7:e2:d3:38:24:ae:e0:bc:73:18: ba:84:6e:91:e8:aa:66:df:53:3c:0d:bb:84:80:ba: 9d:bc:cd:3f:4e:f6:bb:81:b9:96:4b:c5:fe:12:54: 9f:7d:24:af:b2:dd:1a:58:57:d1:15:9b:32:d0:cc: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:03:F7:13:A5:C8:9C:45:F0:4B:EB:BD:B2:4B:76:AF:C3:FA:A9:62 X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:04:42:2b:11:e7:1e:a8:50:04:f2:32:92:c0:9c:5c:99:18: 14:46:c6:9b:81:48:62:dc:a8:9c:d2:25:2e:8b:f0:32:93:db: 9b:cd:45:77:0e:44:52:74:05:c3:53:68:13:6b:1e:e4:8a:ed: 5e:71:81:76:ef:93:1d:53:58:38:30:2e:0e:92:07:31:8c:46: d8:9b:b8:2b:69:e8:42:bf:f7:49:ec:32:d7:f5:23:6f:aa:fa: 67:3f:78:d9:34:40:e8:53:93:6a:44:0a:48:68:e3:73:c1:be: a7:fe:7d:e6:66:8b:ed:7d:e2:88:1a:94:d2:63:da:cc:ec:12: dc:5c:25:95:b6:9e:33:36:9f:fa:50:e1:a2:35:ef:4c:58:36: 65:ea:68:86:43:12:e1:ed:04:ba:2f:6d:58:c6:23:7d:c5:4f: 45:1f:eb:43:21:f2:25:93:56:d0:a6:01:03:cb:51:a2:4f:a3: a3:18:df:b8:ba:5a:9c:29:79:4d:9a:a5:8d:92:99:0d:16:da: 91:c2:2d:47:56:b2:62:4b:fa:ff:02:b7:ae:e5:97:a6:73:76: ce:3c:88:b6:6d:47:cc:ad:e4:21:ad:59:10:8e:2e:8c:0a:3d: a7:4e:fa:1f:2b:da:b2:fa:e9:94:5f:8f:ba:9d:ee:af:b3:ca: 24:8f:cf:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjUwNDI0MjEzODU4WhcNMjUwNTAxMjEzODU4WjAYMRYwFAYD VQQDEw02ODBhYWY3Mi1iYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM+1zRDIDIk/S0ee5t/2L2BcizdPbV6zHCjDKFLjX0NuvMOhU5BwAyT6NdjU CQpXLCQilUSpYcUQ7W5ZqYRlqNJTJfczYi3flWhyBAmT/Af31uHUxsayvpr+ZxlK t2C7JNDep8SIsJM0Mmk8o+dRuB1Bf6Cow4QbOR1BTQTbPlyIBN5Ckn/uCcVObxO0 /D/xkhHZbxJz/qqcb6OuwuU14+Azz1p/jUwmXxV+tITx4pXJMgCyJdzDYy5vSz1q nc/kRAY/rHjyj7fi0zgkruC8cxi6hG6R6Kpm31M8DbuEgLqdvM0/Tva7gbmWS8X+ ElSffSSvst0aWFfRFZsy0MysnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcD9xOl yJxF8EvrvbJLdq/D+qliMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeBEIrEeceqFAE8jKSwJxcmRgURsabgUhi3Kic0iUui/Ayk9ubzUV3 DkRSdAXDU2gTax7kiu1ecYF275MdU1g4MC4OkgcxjEbYm7graehCv/dJ7DLX9SNv qvpnP3jZNEDoU5NqRApIaONzwb6n/n3mZovtfeKIGpTSY9rM7BLcXCWVtp4zNp/6 UOGiNe9MWDZl6miGQxLh7QS6L21YxiN9xU9FH+tDIfIlk1bQpgEDy1GiT6OjGN+4 ulqcKXlNmqWNkpkNFtqRwi1HVrJiS/r/Areu5Zemc3bOPIi2bUfMreQhrVkQji6M Cj2nTvofK9qy+umUX4+6ne6vs8okj8+L -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:53 2025 by rpki-client