$ rpki-client -vvf rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft File: Rhwv4neii8iX8PzKT3yRCN2XSQM.mft (raw, json) Hash identifier: v7IPKKd1NFtYCqMxFLQK2JnbKqhGPg7mMT6oW8YCrFg= Subject key identifier: 85:F1:A5:9D:1A:56:93:09:AE:B1:6C:DD:C5:2C:5E:FA:92:54:1B:2B Authority key identifier: 46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 Certificate issuer: /CN=A918711E/serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft Manifest number: 0AAC Signing time: Wed 14 May 2025 19:36:46 +0000 Manifest this update: Wed 14 May 2025 19:36:46 +0000 Manifest next update: Wed 21 May 2025 19:36:46 +0000 Files and hashes: 1: Rhwv4neii8iX8PzKT3yRCN2XSQM.crl (hash: ip9CC/h3YVZaP7NOmD59LL5eY9Z2Jgsx6KTpf0sAOGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918711E, serialNumber=461C2FE277A28BC897F0FCCA4F7C9108DD974903 Validity Not Before: May 14 19:36:46 2025 GMT Not After : May 21 19:36:46 2025 GMT Subject: CN=6824f0ce-5e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:22:d7:0d:11:3d:9a:2f:d5:9d:fa:63:07: f3:e0:51:48:5c:28:ea:46:34:2e:92:4b:52:53:22: e6:1b:2b:75:e6:9a:38:d1:ac:5c:79:97:7e:0b:40: f0:84:76:4d:73:f1:aa:46:20:f4:39:7a:2b:10:ab: 68:67:37:09:80:74:8b:fc:fb:db:49:a9:69:ce:8c: 35:bf:17:6e:f1:c7:c8:bc:6b:5c:eb:66:ec:fd:11: 9e:0a:29:4b:09:42:5e:dc:e7:b3:f7:8e:b6:d4:b7: 25:da:7e:41:7b:ca:13:d8:bb:4f:19:0f:b8:a0:a2: d8:16:b8:2f:35:db:c3:6b:c0:37:0b:ff:85:45:5d: 10:db:fc:7e:39:3c:39:bd:03:47:e1:62:db:8e:4a: b1:00:da:17:b4:3e:4c:06:0b:d9:19:94:83:a7:63: 36:9f:6e:99:69:59:cf:be:77:67:1b:e5:63:01:ce: 96:a1:b2:95:11:f4:a9:19:af:eb:4f:8f:cb:94:02: 3f:f0:3a:75:46:e8:f0:69:63:2e:00:80:10:da:e7: 00:95:e1:77:38:80:43:ba:02:7d:cf:c6:18:9d:88: 12:10:6f:1f:ab:2e:b4:0d:7f:cb:40:6b:30:45:54: 27:6e:21:cb:bd:1d:6a:89:fb:b7:62:80:49:62:30: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F1:A5:9D:1A:56:93:09:AE:B1:6C:DD:C5:2C:5E:FA:92:54:1B:2B X509v3 Authority Key Identifier: keyid:46:1C:2F:E2:77:A2:8B:C8:97:F0:FC:CA:4F:7C:91:08:DD:97:49:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhwv4neii8iX8PzKT3yRCN2XSQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918711E/0B584C78513611EAAD6A1E4BC4F9AE02/Rhwv4neii8iX8PzKT3yRCN2XSQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c8:d0:07:b6:29:b8:36:04:c1:93:2d:88:10:f3:47:36:23: f3:36:b0:d9:b8:05:95:c2:10:d3:62:e0:84:09:2a:70:52:53: a5:30:af:d9:6c:e0:1f:28:7b:13:eb:04:eb:c9:25:20:d5:7e: e3:cd:77:8b:58:24:51:89:31:b9:02:a0:b3:3c:86:32:9b:0c: f2:34:95:1b:b7:55:2b:93:c7:02:37:8a:08:df:78:3b:f3:c2: 88:27:66:f0:ac:70:ee:0a:ff:39:db:93:cb:36:2f:8e:0a:10: 29:80:db:40:eb:91:49:d9:de:06:b8:f4:50:ea:21:9e:bb:ce: 13:ad:8d:08:c1:bc:d2:22:8b:42:79:71:49:eb:ee:d4:27:57: 97:29:f3:17:ab:74:2b:5b:8d:a1:1e:d1:43:8c:98:c1:19:d5: 9a:2a:14:e3:d0:c5:63:cb:44:22:2e:de:8e:f9:00:0f:f1:dd: b8:8c:be:9b:19:bb:c5:35:7e:6a:c7:44:bb:0d:5b:47:cd:69: c1:51:58:5a:6e:57:2d:69:eb:f9:bb:d4:5d:78:96:3e:26:aa: 72:d6:a4:39:98:45:08:b0:83:60:63:20:e1:bc:d5:21:13:fc: 95:06:39:b9:f1:11:32:7b:6b:92:d1:7b:43:de:12:9b:ab:33: 55:60:b3:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxMUUxMTAvBgNVBAUTKDQ2MUMyRkUyNzdBMjhCQzg5N0YwRkNDQTRGN0M5MTA4 REQ5NzQ5MDMwHhcNMjUwNTE0MTkzNjQ2WhcNMjUwNTIxMTkzNjQ2WjAYMRYwFAYD VQQDEw02ODI0ZjBjZS01ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlQi1w0RPZov1Z36Ywfz4FFIXCjqRjQukktSUyLmGyt15po40axceZd+C0Dw hHZNc/GqRiD0OXorEKtoZzcJgHSL/PvbSalpzow1vxdu8cfIvGtc62bs/RGeCilL CUJe3Oez94621Lcl2n5Be8oT2LtPGQ+4oKLYFrgvNdvDa8A3C/+FRV0Q2/x+OTw5 vQNH4WLbjkqxANoXtD5MBgvZGZSDp2M2n26ZaVnPvndnG+VjAc6WobKVEfSpGa/r T4/LlAI/8Dp1RujwaWMuAIAQ2ucAleF3OIBDugJ9z8YYnYgSEG8fqy60DX/LQGsw RVQnbiHLvR1qifu3YoBJYjBl8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXxpZ0a VpMJrrFs3cUsXvqSVBsrMB8GA1UdIwQYMBaAFEYcL+J3oovIl/D8yk98kQjdl0kD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzExRS8wQjU4NEM3ODUx MzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4aVg4UHpLVDN5UkNOMlhT UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jod3Y0bmVpaThpWDhQektUM3lSQ04yWFNRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzExRS8wQjU4NEM3ODUxMzYxMUVBQUQ2QTFFNEJDNEY5QUUwMi9SaHd2NG5laWk4 aVg4UHpLVDN5UkNOMlhTUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoyNAHtim4NgTBky2IEPNHNiPzNrDZuAWVwhDTYuCECSpwUlOlMK/Z bOAfKHsT6wTrySUg1X7jzXeLWCRRiTG5AqCzPIYymwzyNJUbt1Urk8cCN4oI33g7 88KIJ2bwrHDuCv8525PLNi+OChApgNtA65FJ2d4GuPRQ6iGeu84TrY0IwbzSIotC eXFJ6+7UJ1eXKfMXq3QrW42hHtFDjJjBGdWaKhTj0MVjy0QiLt6O+QAP8d24jL6b GbvFNX5qx0S7DVtHzWnBUVhablctaev5u9RdeJY+Jqpy1qQ5mEUIsINgYyDhvNUh E/yVBjm58REye2uS0XtD3hKbqzNVYLNs -----END CERTIFICATE-----Generated at Fri May 16 06:11:55 2025 by rpki-client