$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: BNYcLLN6FLrI/scUusfsyxxfKY/pyyX790jVdVAOWPs= Subject key identifier: 38:6A:A7:84:61:0B:75:74:9E:B3:95:8C:AF:A5:54:AB:48:34:48:50 Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 0616 Signing time: Thu 24 Apr 2025 22:34:50 +0000 Manifest this update: Thu 24 Apr 2025 22:34:49 +0000 Manifest next update: Thu 01 May 2025 22:34:49 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: yPKtm+IL05acIW/r8DXM8z3Ny/lki4lD89dvH70yLQs=) 2: E6F39362983B11EBBDA9EC64C4F9AE02.roa (hash: 7YHVzUjF5bpdBZPdZI94Q5Pcl5r21oJ6Xy3gjX6ma8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Apr 24 22:34:49 2025 GMT Not After : May 1 22:34:49 2025 GMT Subject: CN=680abc8a-b581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:52:ad:15:e6:d6:3b:02:96:23:52:95:d1: 3b:4f:cc:b1:5b:c4:b8:8d:9c:a9:d9:18:dc:69:2d: 4e:50:ac:da:98:a0:5b:ae:46:d4:b4:46:ff:d0:7c: 13:7e:3f:28:72:9a:3a:6a:84:f0:94:80:23:2d:39: 32:b8:7f:8c:90:73:36:f6:60:4e:ad:79:c6:a2:d6: b6:b9:af:6f:8c:1e:22:5f:07:eb:d8:92:b8:3a:d6: 25:83:ba:6f:0d:7a:95:62:77:60:b7:d0:33:a9:4b: 28:ed:78:c3:c8:22:0c:ac:a2:c0:dc:02:91:13:c5: 38:73:a9:db:ce:49:6e:0e:95:7d:ca:ad:57:e4:8b: 1c:a3:f6:22:95:a0:08:1d:b4:9a:f0:a5:a7:a9:aa: b8:58:ce:6b:51:de:13:68:56:fd:1b:68:19:42:6d: 88:3f:0f:1e:e1:ca:b7:ea:ba:ad:d8:10:2e:c7:d5: bf:3a:1f:ea:b0:12:93:e5:a9:26:3a:99:aa:fd:13: de:44:cd:b6:ac:f1:4f:f5:43:5b:8c:96:28:53:58: 7e:92:96:39:60:44:52:49:79:64:26:b2:dc:3b:b3: 6c:7e:60:e3:f0:97:02:bf:f2:a0:80:e8:cb:1a:98: 60:5f:3f:5c:46:f0:66:26:59:ff:a5:18:38:a8:87: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6A:A7:84:61:0B:75:74:9E:B3:95:8C:AF:A5:54:AB:48:34:48:50 X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:85:c7:8a:5e:b0:94:27:7d:67:66:8e:ee:65:d5:a2:53:b0: 5a:ed:aa:46:83:a7:2f:e0:23:d2:63:ad:29:f7:d1:80:7b:c9: 3e:ac:22:ed:18:fb:0e:e8:76:d3:ce:9b:9a:18:e0:c2:f3:5a: ad:a2:dc:96:c1:28:70:46:78:43:45:e8:9c:cf:8f:88:a0:e2: 96:c1:a0:d2:66:da:ca:03:35:f4:63:29:7e:17:c6:34:7b:ef: e1:85:5e:6b:0c:93:8a:e3:f4:98:32:34:61:be:9e:93:05:67: 7a:c3:bc:ea:13:69:9f:57:9c:ae:da:af:09:ae:66:9b:b7:9a: 5e:a7:21:ec:58:c7:0a:a7:60:21:cf:88:bf:9f:ba:44:aa:bc: dc:f7:09:90:08:4e:e2:7c:54:40:ca:be:94:70:6c:8a:19:df: c7:e4:5d:3a:a7:51:ec:ba:e7:fc:bf:7e:95:bb:d1:4f:74:76: af:5e:52:22:41:f7:b5:6c:1b:81:0c:d3:38:7b:bf:59:73:b6: d7:a9:61:ce:48:29:0d:ca:36:d3:54:a2:0d:d5:24:99:9c:61: af:c9:b9:7a:4b:5f:3a:2f:2f:71:78:95:86:0c:7f:40:4f:0d: 62:7f:d1:a0:e2:eb:4e:b0:9f:55:be:5d:89:28:1f:b3:cb:59: 64:71:c3:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjUwNDI0MjIzNDQ5WhcNMjUwNTAxMjIzNDQ5WjAYMRYwFAYD VQQDEw02ODBhYmM4YS1iNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLtSrRXm1jsCliNSldE7T8yxW8S4jZyp2RjcaS1OUKzamKBbrkbUtEb/0HwT fj8ocpo6aoTwlIAjLTkyuH+MkHM29mBOrXnGota2ua9vjB4iXwfr2JK4OtYlg7pv DXqVYndgt9AzqUso7XjDyCIMrKLA3AKRE8U4c6nbzkluDpV9yq1X5Isco/YilaAI HbSa8KWnqaq4WM5rUd4TaFb9G2gZQm2IPw8e4cq36rqt2BAux9W/Oh/qsBKT5akm Opmq/RPeRM22rPFP9UNbjJYoU1h+kpY5YERSSXlkJrLcO7NsfmDj8JcCv/KggOjL GphgXz9cRvBmJln/pRg4qIdlpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhqp4Rh C3V0nrOVjK+lVKtINEhQMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhceKXrCUJ31nZo7uZdWiU7Ba7apGg6cv4CPSY60p99GAe8k+rCLt GPsO6HbTzpuaGODC81qtotyWwShwRnhDReicz4+IoOKWwaDSZtrKAzX0Yyl+F8Y0 e+/hhV5rDJOK4/SYMjRhvp6TBWd6w7zqE2mfV5yu2q8Jrmabt5pepyHsWMcKp2Ah z4i/n7pEqrzc9wmQCE7ifFRAyr6UcGyKGd/H5F06p1Hsuuf8v36Vu9FPdHavXlIi Qfe1bBuBDNM4e79Zc7bXqWHOSCkNyjbTVKIN1SSZnGGvybl6S186Ly9xeJWGDH9A Tw1if9Gg4utOsJ9Vvl2JKB+zy1lkccPw -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:19 2025 by rpki-client