$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: Wkz9xCqnJ31IryuU/2IfmPwXpsu7/wBmpzVqTAhYOrU= Subject key identifier: 7A:F1:1F:2C:F7:8B:AA:B2:72:39:D6:D3:54:48:72:43:D3:AB:EA:6B Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 07FD Signing time: Fri 16 May 2025 21:15:59 +0000 Manifest this update: Fri 16 May 2025 21:15:59 +0000 Manifest next update: Fri 23 May 2025 21:15:59 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: 9R5WT+48CVzYVnWP8vTstYvKaUtyUYLfer4KynHlEOE=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: May 16 21:15:59 2025 GMT Not After : May 23 21:15:59 2025 GMT Subject: CN=6827ab0f-510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:e2:31:82:77:3b:63:61:0e:34:43:20:62: 15:80:09:e4:90:1d:aa:56:7f:99:c9:7a:51:ee:2d: af:45:ef:67:d1:06:bb:c5:9b:fa:2e:c4:26:fc:8b: ba:4c:16:b3:ed:88:a7:4a:64:5b:80:1b:04:2a:4b: 0e:43:93:a4:81:ed:ff:0c:dd:32:fe:94:cd:8a:ed: 0b:59:a1:0b:c8:89:9e:83:0a:b8:d0:48:ff:0a:51: 53:d4:8d:88:43:a9:a9:dd:2c:b7:c0:02:be:c5:40: 46:cc:fc:28:c3:0e:a1:66:39:03:c0:82:44:e8:b0: 85:f2:c8:93:73:4e:c7:75:81:4c:d7:69:38:2a:b8: 16:ce:a8:5a:70:bf:c2:45:25:9c:39:a9:c5:74:ff: 6b:ee:0f:62:84:c3:74:35:5b:ad:f0:d6:0a:a4:e3: 3f:71:8b:7d:6d:90:7b:88:1c:ea:c5:f3:db:a8:22: 61:15:b1:15:78:60:ac:0e:94:a1:75:3a:f6:34:15: a0:77:1c:e7:18:66:e3:bf:55:d4:4f:84:0b:30:ff: a7:44:ca:df:2d:9d:82:d9:e4:bd:27:3a:7b:09:68: fd:4e:ff:69:cc:57:e3:50:38:6e:a5:fe:c4:f8:7a: 4b:f3:eb:55:9d:0e:a2:85:6c:f5:09:c0:cb:d7:61: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F1:1F:2C:F7:8B:AA:B2:72:39:D6:D3:54:48:72:43:D3:AB:EA:6B X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:db:e1:92:bb:ae:27:e3:9e:b4:86:a8:eb:23:a5:5a:98:37: e3:fd:f9:c3:6a:39:d1:c0:d0:78:b5:65:f2:7c:ce:5f:20:50: 3c:8e:89:65:64:2a:e7:28:d5:01:c4:4d:58:f1:0d:b7:17:85: 70:97:af:b8:11:df:a8:4d:51:08:9c:fd:c6:33:06:c5:6d:9c: 3a:ed:ae:9f:7a:d9:b8:b9:ab:11:e8:0d:b0:1d:ff:ce:9a:61: ab:22:9a:0a:cc:43:74:54:37:89:28:ad:ba:6f:67:d9:e6:08: 0a:94:68:80:8e:18:f5:bc:49:21:9a:6a:9e:00:9a:8b:21:37: c5:a4:35:33:44:ff:97:fb:36:61:ec:36:d2:b4:72:95:68:7c: 6e:0c:de:ff:63:88:a7:78:09:6f:7e:81:4e:ea:2d:ff:65:9a: 7b:b5:7e:14:87:d9:4f:ef:e5:db:ce:b7:d0:69:98:87:7a:c0: b6:e2:76:24:22:6c:ea:3b:01:f3:f6:c5:09:78:03:14:35:dd: bc:fb:f4:b8:d5:9f:91:04:6d:dd:7f:d5:b1:00:29:32:32:ee: 29:c6:27:de:7f:8e:66:26:fd:a0:72:b0:1d:d9:0b:db:61:4e: 8f:5b:ba:05:80:60:d3:22:9b:15:c0:7d:5d:34:4a:4c:dd:b6: 6e:21:3e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUwNTE2MjExNTU5WhcNMjUwNTIzMjExNTU5WjAYMRYwFAYD VQQDEw02ODI3YWIwZi01MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZPiMYJ3O2NhDjRDIGIVgAnkkB2qVn+ZyXpR7i2vRe9n0Qa7xZv6LsQm/Iu6 TBaz7YinSmRbgBsEKksOQ5Okge3/DN0y/pTNiu0LWaELyImegwq40Ej/ClFT1I2I Q6mp3Sy3wAK+xUBGzPwoww6hZjkDwIJE6LCF8siTc07HdYFM12k4KrgWzqhacL/C RSWcOanFdP9r7g9ihMN0NVut8NYKpOM/cYt9bZB7iBzqxfPbqCJhFbEVeGCsDpSh dTr2NBWgdxznGGbjv1XUT4QLMP+nRMrfLZ2C2eS9Jzp7CWj9Tv9pzFfjUDhupf7E +HpL8+tVnQ6ihWz1CcDL12GhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrxHyz3 i6qycjnW01RIckPTq+prMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi2+GSu64n4560hqjrI6VamDfj/fnDajnRwNB4tWXyfM5fIFA8joll ZCrnKNUBxE1Y8Q23F4Vwl6+4Ed+oTVEInP3GMwbFbZw67a6fetm4uasR6A2wHf/O mmGrIpoKzEN0VDeJKK26b2fZ5ggKlGiAjhj1vEkhmmqeAJqLITfFpDUzRP+X+zZh 7DbStHKVaHxuDN7/Y4ineAlvfoFO6i3/ZZp7tX4Uh9lP7+XbzrfQaZiHesC24nYk ImzqOwHz9sUJeAMUNd28+/S41Z+RBG3df9WxACkyMu4pxifef45mJv2gcrAd2Qvb YU6PW7oFgGDTIpsVwH1dNEpM3bZuIT4M -----END CERTIFICATE-----Generated at Sat May 17 09:35:48 2025 by rpki-client