$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: ni7FC10xC2h97ed1m1qWNX9hfXFKbXXrPsE0YokPoAk= Subject key identifier: 73:6C:2C:7B:99:AC:1F:A9:8F:C7:5A:B1:39:AE:27:90:A8:D8:97:30 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 07AE Signing time: Sat 10 May 2025 20:51:00 +0000 Manifest this update: Sat 10 May 2025 20:50:59 +0000 Manifest next update: Sat 17 May 2025 20:50:59 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: 223IH+uEaNFbZLrR5zzKhj9kefx2VfLOtL7TB1PtHKA=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: Tk3zd3kJs7FVwUnCzK94Ya9JQUucKwZVZD3xS0qi9h0=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: QPOScDhLbSem7EfyQv+IglAvdNBeL1gmTR/fHqHYi/U=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yXWA4LSCd0uYWLhyjey4cRiXnTeij5tyOPeHFK/GEnI=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: jC47VXQ7X10kF2hNnEFJirs3Fm0J2Ob/emgxhii1hxs=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Jb8I0/Lc4UMJqWNSduuz7/92FhDDdVwS995fKcTS0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: May 10 20:50:59 2025 GMT Not After : May 17 20:50:59 2025 GMT Subject: CN=681fbc34-7d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:ea:b3:24:89:12:fe:ea:18:19:ba:2f:aa: ff:d1:ec:f5:7b:30:3b:9c:c0:bd:df:65:dc:8a:26: da:21:88:5e:83:93:c2:c5:74:9a:b1:1f:90:e7:b7: 8d:8b:6c:97:30:79:3f:27:f8:f5:0b:4d:93:3f:e1: c1:c2:05:33:8b:09:3e:46:f0:2f:72:ec:73:5c:2c: 84:06:ca:3e:7e:91:f9:29:70:e8:a0:80:8e:bb:5c: b1:63:a5:71:b7:6f:db:7e:6a:4d:70:4f:cc:e6:d0: fa:e6:46:e2:7f:a7:91:25:bf:42:a8:da:d0:3d:8a: 98:ad:33:14:33:75:3a:4d:e4:1c:4c:f5:30:13:e5: b6:ef:49:6c:a9:22:51:38:81:30:dd:aa:58:84:0f: 77:aa:33:48:f5:65:9e:cd:c0:8d:c4:51:ca:26:89: b0:d1:33:e6:7e:e9:b9:24:82:16:84:6d:8e:ba:84: a7:14:d3:38:28:01:e4:7f:94:a9:03:f2:43:99:89: fe:d6:3c:4c:c3:c7:cc:4d:c3:8f:f2:e8:ad:e0:c6: dd:34:f3:bb:c8:11:de:26:62:f9:00:f7:fe:37:d2: 1a:d8:b2:4d:30:d8:bd:e4:e8:be:c4:75:c0:57:db: 92:21:91:fe:21:4b:f8:6c:3d:9a:94:b1:83:a6:95: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6C:2C:7B:99:AC:1F:A9:8F:C7:5A:B1:39:AE:27:90:A8:D8:97:30 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2a:52:23:70:c2:9b:94:43:ad:a6:32:39:ce:5e:b0:40:d6: 1e:00:14:0d:72:a1:1c:99:b1:9a:de:c0:88:d9:15:39:43:92: 5a:14:f3:ee:85:e8:94:05:4d:80:35:e8:9c:75:72:2f:b8:58: a6:30:e1:d0:8e:75:41:22:d3:f0:3d:bd:cf:24:e6:95:0b:9b: 19:f4:5a:5c:e1:37:42:46:0c:45:29:80:01:48:49:a8:60:01: 44:94:c8:15:b7:a3:99:85:64:c3:a6:2e:bc:38:e3:fb:53:4a: 5a:e0:ce:d9:87:c3:75:e2:c3:bf:2f:c9:a7:b9:ac:bf:b6:14: fd:9c:6d:ff:56:3b:69:0b:49:88:c2:4c:a1:cc:d5:b4:94:35: c7:a8:b5:3c:75:0e:49:50:35:a8:70:56:f8:ab:a5:aa:e6:a5: 14:af:3e:44:65:ce:59:fb:ac:9a:2b:2c:93:27:08:01:e4:bd: 14:1c:c7:65:ee:ac:7b:73:88:cb:03:2c:70:cb:e5:d4:fc:a2: 77:e5:43:70:b8:98:55:5a:41:e3:67:47:8a:8d:fb:ef:5a:3d: 47:cb:cf:20:c4:c5:48:62:12:7e:f4:0c:2e:60:52:67:59:bb: 7a:a9:80:95:a2:c1:7b:25:1e:b5:4a:ca:11:db:1b:03:04:cf: e6:44:6b:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUwNTEwMjA1MDU5WhcNMjUwNTE3MjA1MDU5WjAYMRYwFAYD VQQDEw02ODFmYmMzNC03ZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpDqsySJEv7qGBm6L6r/0ez1ezA7nMC932XciibaIYheg5PCxXSasR+Q57eN i2yXMHk/J/j1C02TP+HBwgUziwk+RvAvcuxzXCyEBso+fpH5KXDooICOu1yxY6Vx t2/bfmpNcE/M5tD65kbif6eRJb9CqNrQPYqYrTMUM3U6TeQcTPUwE+W270lsqSJR OIEw3apYhA93qjNI9WWezcCNxFHKJomw0TPmfum5JIIWhG2OuoSnFNM4KAHkf5Sp A/JDmYn+1jxMw8fMTcOP8uit4MbdNPO7yBHeJmL5APf+N9Ia2LJNMNi95Oi+xHXA V9uSIZH+IUv4bD2alLGDppWTrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNsLHuZ rB+pj8dasTmuJ5Co2JcwMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRKlIjcMKblEOtpjI5zl6wQNYeABQNcqEcmbGa3sCI2RU5Q5JaFPPu heiUBU2ANeicdXIvuFimMOHQjnVBItPwPb3PJOaVC5sZ9Fpc4TdCRgxFKYABSEmo YAFElMgVt6OZhWTDpi68OOP7U0pa4M7Zh8N14sO/L8mnuay/thT9nG3/VjtpC0mI wkyhzNW0lDXHqLU8dQ5JUDWocFb4q6Wq5qUUrz5EZc5Z+6yaKyyTJwgB5L0UHMdl 7qx7c4jLAyxwy+XU/KJ35UNwuJhVWkHjZ0eKjfvvWj1Hy88gxMVIYhJ+9AwuYFJn Wbt6qYCVosF7JR61SsoR2xsDBM/mRGsz -----END CERTIFICATE-----Generated at Mon May 12 18:16:11 2025 by rpki-client