$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: V9HdnZO30tKysQx/8D0pTz1Wxa/xWABX3qepkCwsCGk= Subject key identifier: 1E:C2:A0:64:72:03:BF:C3:AB:43:05:39:AD:04:D8:19:8A:D0:32:09 Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: CF Signing time: Thu 15 May 2025 04:59:14 +0000 Manifest this update: Thu 15 May 2025 04:59:14 +0000 Manifest next update: Thu 22 May 2025 04:59:14 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: sXTcbX89g7O/OgLBX4S8i+NzwLODN8S38EJPtJqOGZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: May 15 04:59:14 2025 GMT Not After : May 22 04:59:14 2025 GMT Subject: CN=682574a2-6892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:b6:2b:ed:38:22:1c:f1:2b:a1:20:08:43: ff:89:8c:2f:b1:53:3e:0a:6f:64:eb:78:0a:dd:0f: 67:31:80:39:25:80:a1:8d:a7:93:fe:c7:a1:9c:c6: 8d:23:46:a7:94:54:18:d0:93:ee:5d:6a:bb:42:cc: 6f:76:81:2c:1f:f5:df:fd:5e:ea:20:bc:42:9f:a2: 30:3f:78:78:d5:3d:eb:42:3a:c2:c9:db:c1:5c:0f: 52:1c:c7:14:32:69:07:3c:2b:ae:4f:da:cf:e6:da: f1:52:95:0e:86:fa:1b:92:e9:f4:c7:62:06:90:c3: 9d:b9:7f:6e:c5:6d:44:0f:ec:f5:55:be:0d:46:59: ef:da:c3:d6:46:67:d8:cf:97:bc:b0:c2:2c:2f:3c: 38:03:18:d2:e0:b3:ac:7a:cf:19:2f:2b:43:5d:9c: e8:38:1f:9b:46:29:ac:5f:49:34:69:1c:7b:ff:2a: f9:90:51:de:7e:b6:f1:01:1e:be:1e:4e:5b:2e:6e: d9:e8:68:68:fc:29:e2:f2:aa:e7:87:a4:f7:a6:cd: 90:98:1b:8f:c7:b9:68:15:a8:39:21:5d:b9:2f:65: 34:5a:23:a0:a3:b4:22:2d:a1:b8:4b:ef:8f:2a:d3: b9:41:ce:60:d6:d7:49:f2:4d:fe:af:90:51:cb:0f: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C2:A0:64:72:03:BF:C3:AB:43:05:39:AD:04:D8:19:8A:D0:32:09 X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:66:64:b4:6b:88:43:b8:25:c2:14:59:40:f5:84:3b:74:a6: f7:54:23:f5:75:48:e0:d3:7a:dd:65:33:d6:e0:74:2b:61:a5: 63:3e:34:f7:5f:c0:41:f8:04:9e:da:fa:1d:22:53:da:da:60: 95:99:5a:eb:4b:a4:4e:e7:af:16:23:b9:c0:5e:e6:a5:2a:85: 94:7f:90:27:b6:ee:71:6a:93:8c:9c:1d:7b:da:b3:f4:ef:2f: 0c:4f:88:a0:75:3b:86:5f:79:ca:b9:20:cd:4b:ea:88:1d:fe: 38:db:fe:86:ec:08:8f:fc:41:1c:2b:ef:57:6a:8b:32:bb:d1: 41:6a:6d:fe:58:b3:2f:32:3d:16:df:90:ab:8c:da:a2:52:12: 42:5c:19:ae:ba:b2:cd:9e:1c:28:66:bf:04:b0:d4:2d:5d:0d: ae:63:3b:23:9b:67:d1:ff:70:07:af:7d:55:a2:60:f5:d3:83: 4a:58:0a:8e:d4:0b:45:06:23:d0:42:ec:dc:79:15:d1:72:67: 91:67:83:9b:9a:c9:47:e5:d2:02:60:c1:c6:3d:6a:cf:c6:67: 8b:73:76:cc:10:88:7b:a2:8f:02:ea:bb:82:43:d4:c0:0f:87: 7a:81:2b:35:11:fd:72:f0:5a:f3:97:15:9a:1d:35:6a:84:5a: 33:08:6a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUwNTE1MDQ1OTE0WhcNMjUwNTIyMDQ1OTE0WjAYMRYwFAYD VQQDEw02ODI1NzRhMi02ODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uO2K+04IhzxK6EgCEP/iYwvsVM+Cm9k63gK3Q9nMYA5JYChjaeT/sehnMaN I0anlFQY0JPuXWq7QsxvdoEsH/Xf/V7qILxCn6IwP3h41T3rQjrCydvBXA9SHMcU MmkHPCuuT9rP5trxUpUOhvobkun0x2IGkMOduX9uxW1ED+z1Vb4NRlnv2sPWRmfY z5e8sMIsLzw4AxjS4LOses8ZLytDXZzoOB+bRimsX0k0aRx7/yr5kFHefrbxAR6+ Hk5bLm7Z6Gho/Cni8qrnh6T3ps2QmBuPx7loFag5IV25L2U0WiOgo7QiLaG4S++P KtO5Qc5g1tdJ8k3+r5BRyw/KxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7CoGRy A7/Dq0MFOa0E2BmK0DIJMB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUZmS0a4hDuCXCFFlA9YQ7dKb3VCP1dUjg03rdZTPW4HQrYaVjPjT3 X8BB+ASe2vodIlPa2mCVmVrrS6RO568WI7nAXualKoWUf5Antu5xapOMnB172rP0 7y8MT4igdTuGX3nKuSDNS+qIHf442/6G7AiP/EEcK+9Xaosyu9FBam3+WLMvMj0W 35CrjNqiUhJCXBmuurLNnhwoZr8EsNQtXQ2uYzsjm2fR/3AHr31VomD104NKWAqO 1AtFBiPQQuzceRXRcmeRZ4ObmslH5dICYMHGPWrPxmeLc3bMEIh7oo8C6ruCQ9TA D4d6gSs1Ef1y8FrzlxWaHTVqhFozCGrv -----END CERTIFICATE-----Generated at Thu May 15 17:55:49 2025 by rpki-client