$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: xqguFexhpx3y1QVpufzkXlpyarzvlIMy0kcbstD3GdM= Subject key identifier: 83:D0:ED:0E:FC:83:3D:07:30:41:F1:EC:5C:08:2A:BE:C8:6D:1A:2A Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 0325 Signing time: Fri 16 May 2025 16:35:34 +0000 Manifest this update: Fri 16 May 2025 16:35:33 +0000 Manifest next update: Fri 23 May 2025 16:35:33 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: OwZr0lFapeA10KXqcRIaILeZmvFNcomHNz7sEMzP9uk=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: BL08vovoDowTntRWd/Vw95cPa6IEzlJ82ZeGlQ75IkU=) 3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 53/ko4R0Tl6w2M1mgFXgRnuR8hXl1eg+ARaBcHCekgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Validity Not Before: May 16 16:35:33 2025 GMT Not After : May 23 16:35:33 2025 GMT Subject: CN=68276955-950e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:d1:46:05:a2:02:86:15:db:e0:7b:69:66: 82:99:20:8a:8a:79:79:d8:d1:37:6d:08:e1:ca:be: 37:16:3e:ec:49:1b:b8:4c:1d:c5:43:ad:37:4e:27: 95:b6:37:36:a6:f9:92:cc:34:ab:44:e3:22:15:ac: 4f:57:06:fc:03:ed:dc:57:41:49:7c:90:cb:ca:f9: 0b:21:2f:da:79:96:78:9f:02:56:c4:56:38:3d:72: 2d:eb:2b:cd:0e:c2:df:45:9a:1b:a3:19:ce:3d:47: d4:69:b8:50:1f:28:e0:14:ff:60:cd:50:a2:47:d8: dc:f7:7e:68:55:62:52:b2:cd:47:3d:3e:df:89:97: d2:50:a6:74:25:76:71:96:c6:f0:ae:02:b1:6d:bb: b5:31:6d:45:10:d8:2c:ef:6b:79:3c:58:ae:82:9b: 59:b3:4b:a5:1c:63:f2:56:57:0d:58:9e:32:b8:ee: 29:65:72:0e:12:11:ed:e5:fc:5e:11:8c:bb:67:c3: 22:aa:f0:3b:24:bc:e9:27:5e:b2:73:58:ab:c0:ba: 6f:39:9e:7f:45:87:85:6a:7c:19:cd:d2:52:c7:a0: 51:9b:4e:db:47:af:be:6f:d2:c0:aa:84:de:ff:02: 17:78:e8:eb:1e:ee:c8:ae:5b:fd:7e:5e:c8:84:4b: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D0:ED:0E:FC:83:3D:07:30:41:F1:EC:5C:08:2A:BE:C8:6D:1A:2A X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:19:e4:c0:ab:fd:29:c6:d2:8c:7e:17:40:55:fe:eb:b0:ce: f9:78:db:9c:a6:11:17:3a:63:cc:d9:32:19:53:c3:62:12:85: 4f:de:7c:c3:3d:e4:51:1b:f8:19:53:4e:02:18:12:e9:b3:7c: b8:a6:55:45:31:0e:cb:fd:eb:78:91:46:49:54:5a:00:fc:8c: 1c:68:5e:99:cc:8d:bc:e1:80:bc:bd:17:f7:7a:e2:aa:3f:c5: 74:85:c3:38:7b:dd:74:f4:cb:1a:a3:16:70:19:5b:08:01:ab: 55:62:7f:a1:8e:ad:bf:33:c4:f3:00:f5:d0:97:b2:76:28:48: a8:57:6f:35:2d:39:59:d7:f4:7a:0a:b4:fb:04:b8:69:a5:c1: 65:73:c2:6d:2f:53:80:74:89:a8:e1:d0:dd:bd:93:95:f8:d8: 85:7b:93:66:0d:40:b3:a5:5d:06:a3:a6:8e:1a:cd:6b:4e:24: 58:ad:96:2b:bc:8a:21:88:22:c1:ef:0e:b9:95:b1:43:1c:5b: 26:b3:57:6e:7d:18:fe:ea:45:c8:45:c8:41:ef:31:e8:ce:d3: ee:ab:01:a7:98:69:a6:77:2e:a9:cd:af:69:f3:11:c2:d4:68: 71:6a:6c:2f:88:8b:c0:c9:52:c3:9c:01:ef:c2:cf:c3:52:02: 3e:57:f4:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjUwNTE2MTYzNTMzWhcNMjUwNTIzMTYzNTMzWjAYMRYwFAYD VQQDEw02ODI3Njk1NS05NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2zRRgWiAoYV2+B7aWaCmSCKinl52NE3bQjhyr43Fj7sSRu4TB3FQ603TieV tjc2pvmSzDSrROMiFaxPVwb8A+3cV0FJfJDLyvkLIS/aeZZ4nwJWxFY4PXIt6yvN DsLfRZoboxnOPUfUabhQHyjgFP9gzVCiR9jc935oVWJSss1HPT7fiZfSUKZ0JXZx lsbwrgKxbbu1MW1FENgs72t5PFiugptZs0ulHGPyVlcNWJ4yuO4pZXIOEhHt5fxe EYy7Z8MiqvA7JLzpJ16yc1irwLpvOZ5/RYeFanwZzdJSx6BRm07bR6++b9LAqoTe /wIXeOjrHu7Irlv9fl7IhEv1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPQ7Q78 gz0HMEHx7FwIKr7IbRoqMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkGeTAq/0pxtKMfhdAVf7rsM75eNucphEXOmPM2TIZU8NiEoVP3nzD PeRRG/gZU04CGBLps3y4plVFMQ7L/et4kUZJVFoA/IwcaF6ZzI284YC8vRf3euKq P8V0hcM4e9109MsaoxZwGVsIAatVYn+hjq2/M8TzAPXQl7J2KEioV281LTlZ1/R6 CrT7BLhppcFlc8JtL1OAdImo4dDdvZOV+NiFe5NmDUCzpV0Go6aOGs1rTiRYrZYr vIohiCLB7w65lbFDHFsms1dufRj+6kXIRchB7zHoztPuqwGnmGmmdy6pza9p8xHC 1GhxamwviIvAyVLDnAHvws/DUgI+V/TJ -----END CERTIFICATE-----Generated at Fri May 16 21:04:17 2025 by rpki-client