$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: h7stZ3pwtxJZ/FyZcyhBP0f+LURA9l5pGeOBku5kHwQ= Subject key identifier: D2:A1:45:10:C5:01:8C:1B:5C:AC:48:3B:51:71:18:D2:F7:22:E5:B5 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 09F8 Signing time: Sat 10 May 2025 19:36:15 +0000 Manifest this update: Sat 10 May 2025 19:36:15 +0000 Manifest next update: Sat 17 May 2025 19:36:15 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: Uf1aMAZGdb1ZQ6P4i5xfybK+R5zA7/5nAQ9lH3VR2Rc=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: dM/bkocbrskLUTOMClpNK4FPOQXtlGaqmRxFxTWilMw=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: gcadtXqsvUpMiAzq36zy8qMAKjIAq2N8zE6RS42bGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: May 10 19:36:15 2025 GMT Not After : May 17 19:36:15 2025 GMT Subject: CN=681faaaf-d032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:93:35:d2:51:dd:d9:23:05:c5:15:e9:27: b0:74:94:a0:1a:d3:84:37:d2:17:f2:7b:c4:bd:be: 8a:3a:f9:26:13:87:58:ee:7b:41:f2:92:73:e1:53: 8d:91:8e:25:3d:ae:e2:4c:bf:00:51:d8:32:16:1e: 37:de:c0:89:56:26:de:63:67:85:c3:6c:30:43:89: 02:69:d8:2e:c2:d7:a4:dd:0d:f9:df:2c:24:96:11: ee:0f:41:c9:2c:64:50:79:35:f1:ed:a3:ae:fe:23: 73:30:1a:67:d2:db:3d:24:ba:63:1f:61:d8:74:b3: 14:55:91:ba:47:88:58:53:11:55:ae:da:18:ae:4d: e1:b4:f1:db:6f:4c:a4:aa:3d:a5:33:77:af:64:4b: d0:76:e3:be:cf:bd:7a:03:ff:db:13:0f:2b:a6:f4: 27:6a:c8:88:53:f2:88:ba:22:46:0e:05:7c:ad:99: aa:6f:8f:89:09:3e:6a:a1:11:a4:1c:20:45:96:ec: de:c8:a0:aa:ac:ee:01:24:27:2c:db:1d:12:5c:26: 0c:d0:38:47:43:ae:c3:de:45:b6:5e:1b:23:65:c7: 29:88:80:e6:be:f9:08:a2:2f:db:01:aa:69:0f:c0: 91:24:36:fb:30:8f:77:25:27:5b:fe:8a:7e:af:1b: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A1:45:10:C5:01:8C:1B:5C:AC:48:3B:51:71:18:D2:F7:22:E5:B5 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:10:f9:2c:a5:a8:fb:b7:46:98:ec:f1:e0:e4:c8:cb:5f:62: 94:0a:e5:89:c2:e2:c4:e6:16:49:74:7c:5f:cf:31:94:ab:ba: 87:2e:3d:fa:d5:aa:63:e9:32:be:58:69:23:79:72:e3:e8:c6: d5:80:bd:95:73:a6:5b:b5:94:0f:af:95:7f:87:f8:97:79:7b: 07:fd:b1:30:e4:ff:22:6a:37:be:e0:13:a3:e7:61:a2:dc:b2: 24:7e:26:ad:a1:ea:7b:25:22:b2:2a:42:5e:6a:c4:18:ea:dc: e5:83:2e:11:1f:98:d1:b1:d7:b6:45:f6:6e:57:b8:c8:c3:48: 89:60:3f:85:46:94:6f:37:47:1a:ef:0e:9c:9a:01:56:09:09: dd:e8:80:13:32:e1:c5:8a:fa:18:04:aa:32:67:9d:c9:49:a8: eb:2b:88:30:a0:7d:6c:a7:82:9b:47:d8:13:26:15:4b:12:02: 49:14:bf:13:f6:5f:40:c5:69:c1:0d:94:3a:b9:69:6d:7d:ad: 1d:98:97:94:ab:2c:53:2b:66:c4:0d:82:9f:e2:28:03:05:23: 84:af:aa:f2:da:db:8c:5e:4e:a2:37:b2:99:81:61:fb:65:0c: f6:4d:e3:5e:1c:69:17:23:cc:7e:c1:ab:5a:0e:59:2d:3f:f4: fd:bd:23:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNTEwMTkzNjE1WhcNMjUwNTE3MTkzNjE1WjAYMRYwFAYD VQQDEw02ODFmYWFhZi1kMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqeTNdJR3dkjBcUV6SewdJSgGtOEN9IX8nvEvb6KOvkmE4dY7ntB8pJz4VON kY4lPa7iTL8AUdgyFh433sCJVibeY2eFw2wwQ4kCadguwtek3Q353ywklhHuD0HJ LGRQeTXx7aOu/iNzMBpn0ts9JLpjH2HYdLMUVZG6R4hYUxFVrtoYrk3htPHbb0yk qj2lM3evZEvQduO+z716A//bEw8rpvQnasiIU/KIuiJGDgV8rZmqb4+JCT5qoRGk HCBFluzeyKCqrO4BJCcs2x0SXCYM0DhHQ67D3kW2XhsjZccpiIDmvvkIoi/bAapp D8CRJDb7MI93JSdb/op+rxt8oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKhRRDF AYwbXKxIO1FxGNL3IuW1MB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEEPkspaj7t0aY7PHg5MjLX2KUCuWJwuLE5hZJdHxfzzGUq7qHLj36 1apj6TK+WGkjeXLj6MbVgL2Vc6ZbtZQPr5V/h/iXeXsH/bEw5P8iaje+4BOj52Gi 3LIkfiatoep7JSKyKkJeasQY6tzlgy4RH5jRsde2RfZuV7jIw0iJYD+FRpRvN0ca 7w6cmgFWCQnd6IATMuHFivoYBKoyZ53JSajrK4gwoH1sp4KbR9gTJhVLEgJJFL8T 9l9AxWnBDZQ6uWltfa0dmJeUqyxTK2bEDYKf4igDBSOEr6ry2tuMXk6iN7KZgWH7 ZQz2TeNeHGkXI8x+wataDlktP/T9vSO9 -----END CERTIFICATE-----Generated at Sat May 10 22:52:57 2025 by rpki-client