$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: NIVsgkaByHtZAL7uVEDDJbTJV4iXN40u64swbjQMVKM= Subject key identifier: 93:08:DE:3F:76:92:9C:9A:1C:FD:08:EC:9D:2B:CB:50:55:8A:5B:E0 Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 30 Signing time: Sun 11 May 2025 06:22:58 +0000 Manifest this update: Sun 11 May 2025 06:22:58 +0000 Manifest next update: Sun 18 May 2025 06:22:58 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: bDM+P9iZ3xl3U7xj4hyeXuOmpN4RtcmwxDtX0uyRYec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: May 11 06:22:58 2025 GMT Not After : May 18 06:22:58 2025 GMT Subject: CN=68204242-0984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b6:fb:80:c5:98:96:76:ec:63:75:3a:60:fc: 43:5a:bf:3f:f3:88:e1:9c:a9:63:64:4a:1f:10:4d: 12:d4:65:47:db:11:d2:ad:56:0d:3f:1b:19:c0:61: 1a:3d:79:d7:c2:66:c8:af:d8:b6:be:58:84:70:9c: f6:32:06:73:0d:00:16:fd:d9:a7:a7:6f:3f:fa:ea: 39:ea:b9:55:b4:a1:6d:7e:b9:5b:a4:0e:2c:14:ca: ff:de:01:29:05:e6:79:8a:37:7d:e4:ec:8e:97:82: 27:a6:be:9b:2a:62:28:f1:c6:ab:c1:8e:db:ca:2b: e5:54:6f:ec:e5:e9:45:7d:71:e1:51:f7:3c:e7:55: 6c:23:36:d8:15:fc:99:3f:c1:67:cd:73:72:00:38: 84:c8:0f:1b:97:46:ca:0e:f8:58:1c:bf:22:9f:ef: b2:0b:81:ab:fd:69:e5:42:91:00:61:c0:32:30:18: 73:d3:d5:99:a5:f1:e3:ad:a6:56:4c:d8:d5:d3:82: 4e:d4:25:30:04:57:d4:3e:23:93:04:84:42:24:39: b9:e3:0e:57:9c:2a:04:42:79:d0:98:fe:c6:50:5d: 13:09:67:f1:63:48:ca:fe:93:41:68:38:b3:33:18: 20:89:f8:43:07:5a:94:db:45:71:1e:87:52:7c:dd: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:08:DE:3F:76:92:9C:9A:1C:FD:08:EC:9D:2B:CB:50:55:8A:5B:E0 X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c1:63:0e:3d:76:2f:75:04:94:65:35:50:d1:c6:c6:8c:09: 86:51:ae:f1:4a:01:fe:a5:8f:aa:54:76:b2:c2:57:cc:a3:38: 61:eb:0c:a7:e4:cc:82:55:64:4f:6f:93:79:a4:3c:97:42:e7: 43:9c:f7:55:f7:72:72:e1:91:a1:90:bf:d6:ac:1c:f6:73:5a: b4:43:49:24:c8:ae:6f:e9:23:9a:d3:c3:2b:ad:ff:e7:a2:b4: bb:3c:fa:e2:24:8b:55:24:5e:02:09:c9:d8:c8:28:0e:4c:ba: 81:25:15:06:71:57:46:d4:27:3f:eb:ad:c4:ce:c3:25:b4:a9: af:83:96:4d:89:b5:6d:8c:4d:75:10:b3:4d:bb:55:a1:b6:33: 72:35:14:23:0a:55:79:b8:56:45:0d:36:5d:50:b3:a5:71:4c: e6:ec:90:4a:7f:97:f2:17:80:92:1c:65:61:5a:1e:28:81:37: e1:ab:f2:22:8e:b6:38:38:60:8c:da:74:8f:de:49:27:e7:31: 92:c4:68:e4:ac:6f:ac:58:5c:92:6a:b3:5b:02:65:9b:3f:45: 4c:0a:a1:3d:09:44:e4:aa:bf:99:33:9d:59:2b:f2:3b:60:89: a1:61:02:d2:8f:e5:9e:af:49:a2:61:1f:ba:cb:03:63:0e:2f: 6d:c9:d1:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA1MTEwNjIyNThaFw0yNTA1MTgwNjIyNThaMBgxFjAUBgNV BAMTDTY4MjA0MjQyLTA5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqtvuAxZiWduxjdTpg/ENavz/ziOGcqWNkSh8QTRLUZUfbEdKtVg0/GxnAYRo9 edfCZsiv2La+WIRwnPYyBnMNABb92aenbz/66jnquVW0oW1+uVukDiwUyv/eASkF 5nmKN33k7I6XgiemvpsqYijxxqvBjtvKK+VUb+zl6UV9ceFR9zznVWwjNtgV/Jk/ wWfNc3IAOITIDxuXRsoO+FgcvyKf77ILgav9aeVCkQBhwDIwGHPT1Zml8eOtplZM 2NXTgk7UJTAEV9Q+I5MEhEIkObnjDlecKgRCedCY/sZQXRMJZ/FjSMr+k0FoOLMz GCCJ+EMHWpTbRXEeh1J83ezFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkwjeP3aS nJoc/QjsnSvLUFWKW+AwHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/BYw49di91BJRlNVDRxsaMCYZRrvFKAf6lj6pUdrLCV8yjOGHrDKfk zIJVZE9vk3mkPJdC50Oc91X3cnLhkaGQv9asHPZzWrRDSSTIrm/pI5rTwyut/+ei tLs8+uIki1UkXgIJydjIKA5MuoElFQZxV0bUJz/rrcTOwyW0qa+Dlk2JtW2MTXUQ s027VaG2M3I1FCMKVXm4VkUNNl1Qs6VxTObskEp/l/IXgJIcZWFaHiiBN+Gr8iKO tjg4YIzadI/eSSfnMZLEaOSsb6xYXJJqs1sCZZs/RUwKoT0JROSqv5kznVkr8jtg iaFhAtKP5Z6vSaJhH7rLA2MOL23J0bc= -----END CERTIFICATE-----Generated at Mon May 12 04:36:50 2025 by rpki-client