$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft File: A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json) Hash identifier: hmYngr8Db9qKfa61aiVBs3Z2pzXllRauT/dxmqMIrFE= Subject key identifier: B0:96:24:7E:0E:C3:C1:9B:F6:95:11:E1:46:CD:F3:48:B1:17:97:79 Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D Certificate issuer: /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft Manifest number: 0149 Signing time: Tue 13 May 2025 03:28:06 +0000 Manifest this update: Tue 13 May 2025 03:28:05 +0000 Manifest next update: Tue 20 May 2025 03:28:05 +0000 Files and hashes: 1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: 7gT7CA232s1A+ba22Ae2YnKAXdKqBcxdeNJ/8B6tzMA=) 2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 8KhdFf717KdtqIgoQSLRSc05ReV0MsZo2CeN3+2la54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D Validity Not Before: May 13 03:28:05 2025 GMT Not After : May 20 03:28:05 2025 GMT Subject: CN=6822bc46-f8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:16:03:0d:d7:e4:ba:88:b9:89:4f:ce:d7: c4:5a:63:3b:7f:96:c4:b8:90:9d:d3:9b:b0:80:bf: ee:d9:78:87:79:9f:94:55:ff:d4:d0:35:1e:5d:01: e7:69:4a:14:f5:d2:a0:2d:93:ae:ae:2d:05:bd:75: 57:ab:2e:7b:65:c9:18:dc:ab:c1:17:bb:b1:3e:41: 67:75:17:63:d2:93:b0:46:a7:e1:60:21:2d:9e:e5: 20:02:aa:27:e5:2c:a8:f6:dd:f5:8e:04:b7:b0:39: 45:01:95:7a:0e:b1:6e:e9:10:80:f1:c4:c7:3c:2b: 2f:f5:65:7c:b8:00:41:64:76:88:d7:b1:33:dd:3c: 87:7e:77:6c:ef:4c:a2:68:6a:37:c7:66:08:5f:bd: ef:92:c8:18:96:48:de:77:72:b4:54:13:be:4b:ca: 36:19:c6:7d:7a:32:4c:b2:02:a9:59:64:32:2c:88: 0d:ab:e3:21:ef:fc:07:d0:83:f7:6f:96:45:ed:db: 01:64:8d:4a:d9:25:cf:d7:cf:1b:99:dd:c5:63:58: 0a:49:fd:7d:6e:3f:bf:91:e8:53:26:e6:b1:3c:d2: 2f:62:af:3c:34:cc:e0:7b:f4:1d:61:d6:80:7c:36: 74:c1:e9:aa:65:d4:0d:02:bc:ed:bc:89:d0:be:4b: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:96:24:7E:0E:C3:C1:9B:F6:95:11:E1:46:CD:F3:48:B1:17:97:79 X509v3 Authority Key Identifier: keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:83:88:23:d0:50:63:03:2f:f3:70:1a:ca:8f:4b:6f:d7: d6:f3:79:c5:55:41:6f:3a:28:3d:17:c7:37:b2:dc:0a:74:62: ee:31:93:8f:bf:58:02:5b:c6:d0:a9:31:e9:05:fd:fc:64:f6: 94:e0:15:81:ea:d3:a3:c7:c0:86:f7:ec:a5:f7:64:37:0b:04: e6:15:f6:2f:66:33:d5:75:75:6f:0d:18:c5:9a:a9:b3:7a:63: 1e:c3:2e:4e:32:6b:b8:d8:09:e0:53:c1:53:bb:46:e1:81:4b: 53:3b:17:dd:e6:60:00:18:17:8f:87:f5:b8:46:93:7c:23:4e: 12:41:c1:db:66:6e:ec:46:2c:d1:be:19:27:7a:71:c1:ce:e9: 64:1a:c3:a9:1b:4c:26:c1:6a:6e:4f:26:b8:a3:a7:cd:f4:cc: 58:01:36:6e:ce:e5:ec:00:96:87:3e:58:d0:71:26:2b:e0:5b: 03:38:63:e7:d5:30:68:d2:23:04:03:95:ba:42:11:3c:6d:88: ee:ca:0f:6a:a1:01:93:57:c5:aa:e9:0c:a8:d6:6a:63:99:56: 31:3a:7b:cd:fb:96:14:35:56:77:17:06:5d:53:f4:23:67:9c: f5:6c:c3:5a:a0:31:3e:0b:1b:96:e6:79:90:ff:df:e0:9c:f5: 88:6f:9f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MjcxMTAvBgNVBAUTKDAzNDg5OEJDMUZCMUIxQTI0NjE3QUNEOUJDODMyQUU4 M0VBRjlFMkQwHhcNMjUwNTEzMDMyODA1WhcNMjUwNTIwMDMyODA1WjAYMRYwFAYD VQQDEw02ODIyYmM0Ni1mOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUwWAw3X5LqIuYlPztfEWmM7f5bEuJCd05uwgL/u2XiHeZ+UVf/U0DUeXQHn aUoU9dKgLZOuri0FvXVXqy57ZckY3KvBF7uxPkFndRdj0pOwRqfhYCEtnuUgAqon 5Syo9t31jgS3sDlFAZV6DrFu6RCA8cTHPCsv9WV8uABBZHaI17Ez3TyHfnds70yi aGo3x2YIX73vksgYlkjed3K0VBO+S8o2GcZ9ejJMsgKpWWQyLIgNq+Mh7/wH0IP3 b5ZF7dsBZI1K2SXP188bmd3FY1gKSf19bj+/kehTJuaxPNIvYq88NMzge/QdYdaA fDZ0wemqZdQNArztvInQvksIHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCWJH4O w8Gb9pUR4UbN80ixF5d5MB8GA1UdIwQYMBaAFANImLwfsbGiRhes2byDKug+r54t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcyNy80Nzk4RkIwNjM3 RkIxMUVFQjQyOTZEM0RDNEY5QUUwMi9BMGlZdkIteHNhSkdGNnpadklNcTZENnZu aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwaVl2Qi14c2FKR0Y2elp2SU1xNkQ2dm5pMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcyNy80Nzk4RkIwNjM3RkIxMUVFQjQyOTZEM0RDNEY5QUUwMi9BMGlZdkIteHNh SkdGNnpadklNcTZENnZuaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVYOII9BQYwMv83Aayo9Lb9fW83nFVUFvOig9F8c3stwKdGLuMZOP v1gCW8bQqTHpBf38ZPaU4BWB6tOjx8CG9+yl92Q3CwTmFfYvZjPVdXVvDRjFmqmz emMewy5OMmu42AngU8FTu0bhgUtTOxfd5mAAGBePh/W4RpN8I04SQcHbZm7sRizR vhknenHBzulkGsOpG0wmwWpuTya4o6fN9MxYATZuzuXsAJaHPljQcSYr4FsDOGPn 1TBo0iMEA5W6QhE8bYjuyg9qoQGTV8Wq6Qyo1mpjmVYxOnvN+5YUNVZ3FwZdU/Qj Z5z1bMNaoDE+CxuW5nmQ/9/gnPWIb59v -----END CERTIFICATE-----Generated at Tue May 13 12:27:11 2025 by rpki-client