$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: gdDSdK23Rf9DKYNAeJWe9aXcCwb7ASd3v/QymAXM1HE= Subject key identifier: D4:9F:CF:A0:F4:E6:58:8B:2B:AC:F1:7C:42:64:77:A6:9F:DD:66:88 Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 062A Signing time: Wed 14 May 2025 22:45:13 +0000 Manifest this update: Wed 14 May 2025 22:45:13 +0000 Manifest next update: Wed 21 May 2025 22:45:13 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: vDPOgFtARs9kKK+QhiI0v9FHGGOuoTD/Grw4uUrJWdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: May 14 22:45:13 2025 GMT Not After : May 21 22:45:13 2025 GMT Subject: CN=68251cf9-7223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:41:e0:a7:3c:15:03:8f:89:03:fa:91:4e: 79:1d:95:d1:12:00:b8:1b:53:06:13:c6:01:7a:bf: 26:a2:f7:0f:02:e0:d5:ae:ef:de:fd:03:23:0a:f3: e1:69:48:1e:99:6f:7f:b6:3e:fb:dd:c3:f7:89:c5: 14:c9:a1:38:84:a3:f2:08:76:e1:91:7e:60:e0:a4: ad:a2:0b:4a:9c:73:ca:82:5f:64:75:86:b2:ff:67: 92:0e:57:a4:4f:09:62:f1:6a:1c:10:5b:3a:3e:6f: bf:0d:b2:3c:02:e3:88:ec:26:e0:b0:d5:50:e4:0a: 2b:2f:a8:4c:55:85:5b:30:73:7b:70:6c:8b:68:a8: 3b:6c:65:15:8c:f3:e9:bc:c4:92:2d:c1:1c:bb:be: 9f:1e:c2:aa:0f:c8:21:ee:31:f3:be:07:44:7f:f3: e5:70:c3:c0:4b:22:d1:3b:44:f8:9b:64:6d:12:ad: b3:07:3c:4c:08:c7:f5:c5:14:9e:0f:dc:f4:7b:6f: e4:84:5b:75:95:12:ae:f9:10:92:06:78:c9:43:8e: d1:0f:76:e6:e9:92:eb:57:b5:44:43:f5:c2:e7:9a: 6f:e8:85:2e:0f:8e:d7:a7:f6:c9:45:6c:64:1b:44: 47:6a:ad:60:92:5a:7c:b0:44:44:22:02:ee:6a:21: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:CF:A0:F4:E6:58:8B:2B:AC:F1:7C:42:64:77:A6:9F:DD:66:88 X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:e9:98:88:2e:be:f5:dd:ef:ae:dd:54:52:dd:f2:c1:4b: a3:6f:ec:25:7a:50:76:48:dc:7e:6a:2d:71:95:bb:81:91:db: a2:82:24:af:c7:2a:be:7f:6e:20:e7:f0:4a:4c:6f:3e:85:1a: 88:83:d3:80:77:e0:d4:2c:70:8b:4a:fe:d8:05:2d:26:f9:cf: 99:f9:b3:a3:5e:53:f0:e8:49:d9:1e:fe:c9:36:1c:04:b6:6a: fa:b6:54:d4:95:22:92:17:cc:fc:74:cf:2a:49:d7:82:bc:b0: e5:03:a7:bc:9b:b1:ef:76:eb:86:dc:52:7e:88:d7:90:d5:71: 46:58:da:84:9e:b3:d0:be:83:e2:ba:4b:d9:22:60:69:d1:4a: e3:8d:a6:b3:7c:0c:bb:64:91:4d:49:00:6c:1c:90:b0:84:8c: b6:c8:c3:ce:f8:da:91:d4:3c:fc:f6:68:92:25:73:d2:d5:dd: 48:f5:10:93:11:7a:bf:b9:7f:d6:e1:c8:e4:e9:ec:06:42:cc: 22:ec:45:71:fb:44:a3:9e:1f:6f:38:54:d6:2b:f1:74:70:4d: 62:40:f1:bc:08:aa:e9:7f:00:06:10:2d:b0:5a:9b:50:c3:53: d3:67:2b:6b:7c:7e:49:8a:b3:28:7e:13:0b:0e:b2:74:9f:77: 98:2d:74:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUwNTE0MjI0NTEzWhcNMjUwNTIxMjI0NTEzWjAYMRYwFAYD VQQDEw02ODI1MWNmOS03MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvxB4Kc8FQOPiQP6kU55HZXREgC4G1MGE8YBer8movcPAuDVru/e/QMjCvPh aUgemW9/tj773cP3icUUyaE4hKPyCHbhkX5g4KStogtKnHPKgl9kdYay/2eSDlek Twli8WocEFs6Pm+/DbI8AuOI7CbgsNVQ5AorL6hMVYVbMHN7cGyLaKg7bGUVjPPp vMSSLcEcu76fHsKqD8gh7jHzvgdEf/PlcMPASyLRO0T4m2RtEq2zBzxMCMf1xRSe D9z0e2/khFt1lRKu+RCSBnjJQ47RD3bm6ZLrV7VEQ/XC55pv6IUuD47Xp/bJRWxk G0RHaq1gklp8sEREIgLuaiE5UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSfz6D0 5liLK6zxfEJkd6af3WaIMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAiOmYiC6+9d3vrt1UUt3ywUujb+wlelB2SNx+ai1xlbuBkduigiSv xyq+f24g5/BKTG8+hRqIg9OAd+DULHCLSv7YBS0m+c+Z+bOjXlPw6EnZHv7JNhwE tmr6tlTUlSKSF8z8dM8qSdeCvLDlA6e8m7HvduuG3FJ+iNeQ1XFGWNqEnrPQvoPi ukvZImBp0UrjjaazfAy7ZJFNSQBsHJCwhIy2yMPO+NqR1Dz89miSJXPS1d1I9RCT EXq/uX/W4cjk6ewGQswi7EVx+0Sjnh9vOFTWK/F0cE1iQPG8CKrpfwAGEC2wWptQ w1PTZytrfH5JirMofhMLDrJ0n3eYLXTs -----END CERTIFICATE-----Generated at Thu May 15 16:00:45 2025 by rpki-client