$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: FDgpeJ+hcLICrjXTUrmlx55TUH1fDwRl3KGMRiY4Fxw= Subject key identifier: 24:EC:DA:35:AA:13:A3:93:D1:00:46:60:5D:C2:93:36:3F:99:A8:AA Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 24 Signing time: Tue 13 May 2025 07:01:19 +0000 Manifest this update: Tue 13 May 2025 07:01:19 +0000 Manifest next update: Tue 20 May 2025 07:01:18 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: HO/bHEzM7ckr/FLbMn7HvSaMPk9Q2u5+jS2BDikGJkY=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: May 13 07:01:19 2025 GMT Not After : May 20 07:01:18 2025 GMT Subject: CN=6822ee3f-6260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:ad:10:3e:06:46:e5:fa:b4:ba:59:a5:ac: 0a:45:35:42:dc:39:b0:05:1e:23:29:17:e3:48:76: 6f:15:a8:e0:11:cf:b4:51:8a:9c:81:09:79:25:79: 98:1d:70:b3:56:a9:e9:ab:7a:e4:0c:0e:81:fb:8e: 18:6e:7b:e4:c3:92:6f:f8:0e:06:3e:d2:b5:d2:a5: 36:0c:83:56:5f:46:27:fe:e7:48:bb:90:cf:da:ea: 71:75:41:41:a8:95:03:13:c4:55:d5:16:65:93:22: 3f:d4:40:aa:92:9e:aa:52:44:8d:68:23:d8:e4:6f: cf:9f:cd:89:9d:99:e1:fd:af:b9:6f:79:51:a9:12: 36:60:d0:b1:62:88:73:5d:c3:9e:37:d1:6d:c7:56: 01:81:bc:81:dd:13:9c:c4:72:85:34:6b:27:f8:e5: 1a:4c:f0:3e:34:2a:3e:a4:32:ef:69:e2:4f:44:0c: e1:c5:b3:94:4e:9f:9c:e5:fe:10:48:63:1b:4c:a0: d1:95:2b:4d:5f:95:e3:c8:58:20:b6:05:4d:07:bb: f1:72:f8:96:64:e1:a6:78:51:39:d0:0a:c8:b8:2d: ad:66:d7:2f:c4:09:ec:77:74:09:23:18:0f:4f:aa: 9e:dc:de:a4:96:1e:bd:0c:06:72:76:22:08:b5:36: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EC:DA:35:AA:13:A3:93:D1:00:46:60:5D:C2:93:36:3F:99:A8:AA X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4d:4e:39:d8:8f:5f:96:94:70:43:1e:a7:da:21:90:3a:e2: 77:91:c9:90:96:82:4f:ba:b3:26:ae:d4:55:87:96:5d:e9:e9: 17:89:e6:24:3b:44:4f:03:bc:c3:18:06:f9:ee:b8:89:cf:4f: 6c:4d:1e:55:fb:44:06:5c:3a:41:78:d4:e8:31:07:01:06:59: f0:0d:1c:25:39:6d:74:36:c3:f6:79:11:b4:86:4a:0e:a3:28: df:d3:66:d1:68:f8:65:3f:0e:39:2b:0e:85:c4:4a:73:d3:68: b9:38:3a:93:65:35:1c:03:fa:0d:77:be:a2:c7:07:d5:92:5e: 8f:c3:ca:76:05:e5:fc:54:b9:2c:23:0d:fb:b8:db:07:c2:ff: cf:ca:e2:7e:8b:b0:2e:a0:33:4d:0b:9b:0d:fb:80:c8:28:1a: 4d:e7:02:f9:3f:a2:35:c2:b7:eb:87:9d:40:b2:28:2c:77:ba: 99:c4:be:e7:4c:02:5e:e0:68:b7:d0:94:59:39:27:d5:fe:d6: eb:36:f2:36:31:8c:9c:9f:34:db:64:97:14:4d:4a:59:8d:e4: ab:16:9d:da:89:01:05:55:f1:7b:f6:e9:6e:ef:4a:ea:ba:db: 3e:11:47:51:86:8a:04:d3:e2:4e:e7:9d:67:9b:82:6c:43:3f: 90:55:f4:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA1MTMwNzAxMTlaFw0yNTA1MjAwNzAxMThaMBgxFjAUBgNV BAMTDTY4MjJlZTNmLTYyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9da0QPgZG5fq0ulmlrApFNULcObAFHiMpF+NIdm8VqOARz7RRipyBCXkleZgd cLNWqemreuQMDoH7jhhue+TDkm/4DgY+0rXSpTYMg1ZfRif+50i7kM/a6nF1QUGo lQMTxFXVFmWTIj/UQKqSnqpSRI1oI9jkb8+fzYmdmeH9r7lveVGpEjZg0LFiiHNd w5430W3HVgGBvIHdE5zEcoU0ayf45RpM8D40Kj6kMu9p4k9EDOHFs5ROn5zl/hBI YxtMoNGVK01flePIWCC2BU0Hu/Fy+JZk4aZ4UTnQCsi4La1m1y/ECex3dAkjGA9P qp7c3qSWHr0MBnJ2Igi1NiqNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJOzaNaoT o5PRAEZgXcKTNj+ZqKowHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNNTjnYj1+WlHBDHqfaIZA64neRyZCWgk+6syau1FWHll3p6ReJ5iQ7 RE8DvMMYBvnuuInPT2xNHlX7RAZcOkF41OgxBwEGWfANHCU5bXQ2w/Z5EbSGSg6j KN/TZtFo+GU/DjkrDoXESnPTaLk4OpNlNRwD+g13vqLHB9WSXo/DynYF5fxUuSwj Dfu42wfC/8/K4n6LsC6gM00Lmw37gMgoGk3nAvk/ojXCt+uHnUCyKCx3upnEvudM Al7gaLfQlFk5J9X+1us28jYxjJyfNNtklxRNSlmN5KsWndqJAQVV8Xv26W7vSuq6 2z4RR1GGigTT4k7nnWebgmxDP5BV9D4= -----END CERTIFICATE-----Generated at Tue May 13 12:39:18 2025 by rpki-client