$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json) Hash identifier: vlK01uOkB5RCMohyJLBgb+khWY32nsryS18tGgEH5G8= Subject key identifier: 73:8B:36:7F:E5:B5:89:1A:97:CA:C5:86:A4:83:EF:A4:87:17:A9:69 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft Manifest number: 3489 Signing time: Wed 14 May 2025 15:01:55 +0000 Manifest this update: Wed 14 May 2025 15:01:54 +0000 Manifest next update: Wed 21 May 2025 15:01:54 +0000 Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: DPJm708EKuANbeUI2aNC+KKiFXerRDVlBu+pPcNr32A=) 2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: MhJb3XjLOL3S3f85AHCTiNFrJTZkovxDcMZN2VWhFE0=) 3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: QKTIJoLV0kcmiUQHRhTLsS+Q9UN68Klhf4IOq31e6nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: May 14 15:01:54 2025 GMT Not After : May 21 15:01:54 2025 GMT Subject: CN=6824b063-1b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:d5:93:42:c5:3a:fd:77:17:3e:f4:af:1e: 32:14:98:2d:24:08:c1:2d:15:6f:ba:9f:86:81:29: 86:f8:95:43:94:dd:e4:97:60:26:1b:ab:56:62:33: 9e:70:14:95:9f:41:f8:cb:b3:89:2a:e7:41:4c:9e: 43:46:73:3e:eb:0d:31:38:37:e2:ad:7e:16:a1:82: c8:6e:6c:9c:85:9f:cf:e4:b3:97:78:9d:97:46:15: 09:c6:21:68:95:51:13:83:8e:3b:92:ad:8a:c3:dc: bb:36:c7:30:00:7f:5d:fb:63:70:28:af:f4:c8:d5: de:ff:2e:f1:d2:60:6e:79:37:b6:f3:7a:38:45:82: e2:ee:b4:25:fc:7b:0d:80:94:51:31:f1:80:a3:48: 61:83:ca:6c:cc:0a:7a:5e:80:84:94:5e:1c:4a:d8: 1d:c1:ec:61:3d:23:db:d6:90:bf:51:65:96:f4:6b: c6:1c:87:b8:e0:c5:7f:04:1c:2d:22:e1:ac:ce:9c: 57:14:81:03:de:2d:53:03:81:d3:00:cb:13:0f:59: 31:c9:5f:6a:c2:3a:ea:e6:2b:00:52:e9:18:e3:e9: 50:e4:66:e4:65:ea:73:58:a0:93:0b:46:95:9e:21: 74:11:67:e9:f0:e9:8d:f4:e6:06:09:eb:97:60:7a: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:36:7F:E5:B5:89:1A:97:CA:C5:86:A4:83:EF:A4:87:17:A9:69 X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6f:c0:57:79:a1:eb:ce:03:5a:e5:bb:c0:19:e4:57:7b:f8: 20:86:8b:47:1f:0f:bd:a0:e9:f0:21:0e:6f:25:6c:c2:7e:98: 36:de:51:7f:ff:07:b2:fa:0e:bc:5c:2f:9d:b6:58:87:28:91: 1d:fa:8d:e8:bc:58:a2:ec:65:68:ad:ce:64:01:71:a6:a9:b3: eb:35:c9:f5:76:a7:72:e1:61:23:eb:39:98:3e:3a:06:84:90: d6:26:e6:0b:d9:56:cf:4d:1b:39:61:a4:86:48:a8:b5:e4:c5: 4f:56:a0:f4:4e:56:70:f3:83:34:c7:b2:4f:2f:c5:f7:4a:87: 11:36:d7:01:76:ff:ec:b9:c4:aa:38:95:c2:cc:85:8b:c9:52: 2e:25:b2:ef:a9:24:5d:02:ce:8d:7b:a7:09:c7:88:a4:1a:5b: 7c:02:eb:4d:81:f6:a9:5e:31:c1:9b:32:fb:cf:9f:57:f5:54: c7:08:64:9c:d2:53:00:40:3b:fb:c3:74:ae:aa:98:f3:b6:1e: c4:b5:23:0d:28:08:9e:17:7a:8d:15:c0:b6:e5:4e:17:18:16: 61:aa:bf:f1:6e:57:2b:1e:f2:be:0b:1f:2e:94:74:ba:67:62: 14:7e:b8:4f:e8:06:e0:ce:1d:f9:de:dc:75:ae:44:d7:ea:f8: b6:fd:42:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUwNTE0MTUwMTU0WhcNMjUwNTIxMTUwMTU0WjAYMRYwFAYD VQQDEw02ODI0YjA2My0xYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyibVk0LFOv13Fz70rx4yFJgtJAjBLRVvup+GgSmG+JVDlN3kl2AmG6tWYjOe cBSVn0H4y7OJKudBTJ5DRnM+6w0xODfirX4WoYLIbmychZ/P5LOXeJ2XRhUJxiFo lVETg447kq2Kw9y7NscwAH9d+2NwKK/0yNXe/y7x0mBueTe283o4RYLi7rQl/HsN gJRRMfGAo0hhg8pszAp6XoCElF4cStgdwexhPSPb1pC/UWWW9GvGHIe44MV/BBwt IuGszpxXFIED3i1TA4HTAMsTD1kxyV9qwjrq5isAUukY4+lQ5GbkZepzWKCTC0aV niF0EWfp8OmN9OYGCeuXYHrj6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOLNn/l tYkal8rFhqSD76SHF6lpMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArb8BXeaHrzgNa5bvAGeRXe/gghotHHw+9oOnwIQ5vJWzCfpg23lF/ /wey+g68XC+dtliHKJEd+o3ovFii7GVorc5kAXGmqbPrNcn1dqdy4WEj6zmYPjoG hJDWJuYL2VbPTRs5YaSGSKi15MVPVqD0TlZw84M0x7JPL8X3SocRNtcBdv/sucSq OJXCzIWLyVIuJbLvqSRdAs6Ne6cJx4ikGlt8AutNgfapXjHBmzL7z59X9VTHCGSc 0lMAQDv7w3Suqpjzth7EtSMNKAieF3qNFcC25U4XGBZhqr/xblcrHvK+Cx8ulHS6 Z2IUfrhP6Abgzh353tx1rkTX6vi2/UJl -----END CERTIFICATE-----Generated at Fri May 16 06:52:23 2025 by rpki-client