$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json) Hash identifier: bR219yt3g13SicXU7tgzfUckBj329bHjSq82HvgRwLo= Subject key identifier: DA:AE:35:BC:7D:BE:D1:32:49:D4:E2:10:EC:C1:9E:BB:E9:FA:1C:D5 Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft Manifest number: 01E6 Signing time: Thu 15 May 2025 02:06:52 +0000 Manifest this update: Thu 15 May 2025 02:06:51 +0000 Manifest next update: Thu 22 May 2025 02:06:51 +0000 Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: DOFd0dUPL7I/Nwhs3a/TqNQhGFMF0T8tRvSdr55cXew=) 2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 79hpZAVwx1DDoLtalxNbxLsW7+220EotRranSNFA/dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Validity Not Before: May 15 02:06:51 2025 GMT Not After : May 22 02:06:51 2025 GMT Subject: CN=68254c3c-4a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:c0:fe:4e:69:7f:5e:9f:a4:95:50:a4:55: b5:56:b1:a6:51:82:9c:df:2d:01:1c:7e:10:72:75: 83:5e:5f:f3:2c:ba:20:3f:2d:37:98:a8:1a:50:3e: 79:cc:7b:6a:b5:7f:67:60:07:c6:e9:50:e8:c8:73: 62:49:7b:47:8f:a6:7b:30:4e:91:9f:d6:df:e9:a7: 80:5e:03:11:d3:80:27:fb:3f:7f:8d:af:a8:3c:4e: e8:c4:69:80:ab:b1:a5:e5:5f:13:e1:11:aa:6f:6c: 22:0c:8b:fd:1b:43:2b:58:85:7e:f6:5c:6f:2f:d1: 2f:84:25:3a:31:1b:5f:bc:05:94:8e:e2:13:69:5b: b0:c6:03:33:b3:71:0a:30:7e:6d:a3:bc:f0:d2:e2: 2b:f4:1a:ed:d3:dd:d7:d5:38:db:b7:23:f1:4f:68: 59:b9:20:bc:26:4c:ce:c1:0e:60:e3:1b:6d:84:d8: 13:9d:e5:8f:50:5e:f3:51:a9:4c:c1:bb:aa:df:c4: 9e:ae:48:29:0b:27:78:02:a5:d9:df:54:d1:5a:9b: 3b:94:0a:f2:a2:35:aa:78:ed:f8:8f:6a:33:05:46: 5b:0e:cb:ec:6f:e9:9f:e0:4a:84:07:49:8d:7a:a7: c0:62:9f:58:8c:10:53:a4:12:dc:c2:1e:31:b4:bb: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:35:BC:7D:BE:D1:32:49:D4:E2:10:EC:C1:9E:BB:E9:FA:1C:D5 X509v3 Authority Key Identifier: keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ab:02:0b:c0:92:4d:87:4a:65:4c:b5:81:39:c5:c9:a5:01: e4:8c:e3:c2:38:90:73:d7:34:1d:c2:50:92:cf:ee:d1:c5:2d: 32:22:f2:e0:30:7c:da:f1:b3:97:db:73:cf:18:3a:35:bc:56: 7b:d7:2d:bf:b9:f6:cf:1b:84:d4:14:bf:e2:5f:81:88:5e:74: e0:41:a2:f0:db:c9:ed:bc:0f:a4:7d:a4:9b:97:20:f3:11:b9: 55:f3:9b:43:14:64:76:e3:d4:51:42:14:c7:fd:f5:92:79:af: 61:d5:e6:5c:b0:26:55:19:e5:06:5d:49:6e:10:0a:7b:0d:f7: 3e:41:6d:a7:00:00:04:b2:a9:2a:d8:4b:70:9a:e4:4c:01:1c: c7:5b:f7:f0:e8:24:d7:04:12:66:8a:14:3d:24:d7:5a:88:87: 64:55:9e:13:2f:2a:3b:6a:e3:f2:e1:45:74:56:9d:39:c7:db: 30:f3:8d:50:db:fa:e7:aa:d3:ba:7c:c9:d5:a0:56:36:1b:0d: ed:b3:a1:6f:70:df:38:51:d4:4a:cb:05:36:18:76:03:4a:6a: 0f:87:11:e2:6f:ae:78:8e:c6:5a:45:96:79:aa:e3:44:78:6b: f2:52:28:aa:a9:09:6d:11:f6:81:4d:66:c3:f6:a3:36:f9:ab: de:6c:88:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF RTREMUQ5OUMwHhcNMjUwNTE1MDIwNjUxWhcNMjUwNTIyMDIwNjUxWjAYMRYwFAYD VQQDEw02ODI1NGMzYy00YTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0zA/k5pf16fpJVQpFW1VrGmUYKc3y0BHH4QcnWDXl/zLLogPy03mKgaUD55 zHtqtX9nYAfG6VDoyHNiSXtHj6Z7ME6Rn9bf6aeAXgMR04An+z9/ja+oPE7oxGmA q7Gl5V8T4RGqb2wiDIv9G0MrWIV+9lxvL9EvhCU6MRtfvAWUjuITaVuwxgMzs3EK MH5to7zw0uIr9Brt093X1TjbtyPxT2hZuSC8JkzOwQ5g4xtthNgTneWPUF7zUalM wbuq38SerkgpCyd4AqXZ31TRWps7lAryojWqeO34j2ozBUZbDsvsb+mf4EqEB0mN eqfAYp9YjBBTpBLcwh4xtLun/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNquNbx9 vtEySdTiEOzBnrvp+hzVMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqwILwJJNh0plTLWBOcXJpQHkjOPCOJBz1zQdwlCSz+7RxS0yIvLg MHza8bOX23PPGDo1vFZ71y2/ufbPG4TUFL/iX4GIXnTgQaLw28ntvA+kfaSblyDz EblV85tDFGR249RRQhTH/fWSea9h1eZcsCZVGeUGXUluEAp7Dfc+QW2nAAAEsqkq 2EtwmuRMARzHW/fw6CTXBBJmihQ9JNdaiIdkVZ4TLyo7auPy4UV0Vp05x9sw841Q 2/rnqtO6fMnVoFY2Gw3ts6FvcN84UdRKywU2GHYDSmoPhxHib654jsZaRZZ5quNE eGvyUiiqqQltEfaBTWbD9qM2+avebIgn -----END CERTIFICATE-----Generated at Fri May 16 17:17:23 2025 by rpki-client