$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: P9N1WApfbPkp57WI8B9eINGNHzDwLs3gZzKsNMpfobY= Subject key identifier: F2:BA:49:15:C0:36:A7:3B:1C:2D:33:1A:4F:CC:E7:0E:3D:9E:70:77 Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 3480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 3476 Signing time: Thu 24 Apr 2025 15:09:50 +0000 Manifest this update: Thu 24 Apr 2025 15:09:50 +0000 Manifest next update: Thu 01 May 2025 15:09:50 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: 6YqD0b5lNXdVI23VPgccHrpyTQg1jw9RgB8WTsyRPig=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: Hux71er2Qs5CKXElMxsIIOBK+KutGucMBDid93LFsCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13440 (0x3480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Apr 24 15:09:50 2025 GMT Not After : May 1 15:09:50 2025 GMT Subject: CN=680a543e-422d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:2d:18:3e:b2:1d:4b:7d:39:70:a0:00:e8: 82:8c:37:a0:ab:5f:88:8e:06:da:a8:23:71:75:35: cd:9b:98:72:9d:bf:4d:1d:93:01:67:89:20:7e:6b: 58:f9:0d:3f:ba:1e:fd:bb:7b:36:dc:11:f1:7e:0c: 0a:bb:73:d8:e3:2d:c4:b3:54:8f:a6:10:70:21:05: 6a:f9:58:25:82:72:fe:71:32:f9:e8:71:c1:c1:2e: 1a:4a:05:7a:25:d1:82:ff:89:dd:e8:a9:aa:22:00: 0d:13:93:13:41:f9:74:5a:9f:ec:22:d9:13:05:01: 08:18:44:25:37:a2:1f:66:31:a3:77:02:21:fc:a0: 5f:5b:d7:b5:91:8d:67:0c:41:28:6b:c2:4e:6f:2d: 0e:16:09:a4:8c:e4:26:c9:0d:82:a1:31:45:83:9f: b8:ad:21:84:4c:e2:22:8b:d8:b6:cf:e0:a3:23:9a: a2:be:94:1c:cc:ac:b2:b4:e1:a4:8c:f1:d9:f8:79: f0:42:f8:2c:ce:94:d7:10:6c:07:45:a5:3b:6a:c5: 22:9f:de:32:4c:58:76:c2:47:f7:60:ba:6e:4f:0a: c4:d1:64:d3:e9:88:d9:5f:36:ff:bb:b2:6e:66:63: 62:ef:12:46:e7:a3:c0:a2:f2:4e:4e:e9:77:aa:d5: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:49:15:C0:36:A7:3B:1C:2D:33:1A:4F:CC:E7:0E:3D:9E:70:77 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:0b:c2:7a:fd:23:68:56:3f:5f:74:18:a4:72:8e:f6:28:c5: b2:22:c8:b4:6f:10:5c:5e:8b:16:e8:5f:2a:de:f0:5b:b7:35: c1:33:69:e7:29:cd:20:20:e6:fe:9c:a6:5e:0b:04:7a:d3:2e: af:c3:60:95:bd:2b:f8:ed:3b:43:64:46:b2:8e:17:97:f6:0e: ba:ec:60:71:e9:d0:b4:8e:45:5c:b2:d9:b4:32:03:ea:cf:d9: 3d:ba:b1:64:64:f3:90:5d:0e:a0:69:87:54:66:d0:dd:8f:bb: 58:b2:4e:6a:2a:b4:ae:09:14:7f:d9:a3:f5:9f:22:be:6a:93: 32:3b:b1:12:93:cb:16:ac:16:0f:8a:45:21:2d:4d:6f:50:e9: e5:29:1d:86:b0:d2:7a:c3:fe:d9:fd:c2:c8:2d:ad:05:5b:45: 2a:94:50:a8:55:9c:63:24:06:4e:6e:fb:c9:1b:3f:9d:8d:de: 36:83:9f:0f:6d:82:d1:f5:f9:6a:96:03:d3:d3:6f:63:b0:75: 35:a8:a0:f2:c1:46:3d:d0:d3:52:c1:9c:89:43:52:ee:18:41: 96:c1:bb:98:ce:b0:59:d8:f6:fc:26:0f:99:5d:de:00:8c:e7: 1d:b5:ca:86:c1:04:2e:2c:39:e8:67:67:2a:92:be:f8:b4:fe: 5a:80:9e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUwNDI0MTUwOTUwWhcNMjUwNTAxMTUwOTUwWjAYMRYwFAYD VQQDEw02ODBhNTQzZS00MjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzgtGD6yHUt9OXCgAOiCjDegq1+IjgbaqCNxdTXNm5hynb9NHZMBZ4kgfmtY +Q0/uh79u3s23BHxfgwKu3PY4y3Es1SPphBwIQVq+VglgnL+cTL56HHBwS4aSgV6 JdGC/4nd6KmqIgANE5MTQfl0Wp/sItkTBQEIGEQlN6IfZjGjdwIh/KBfW9e1kY1n DEEoa8JOby0OFgmkjOQmyQ2CoTFFg5+4rSGETOIii9i2z+CjI5qivpQczKyytOGk jPHZ+HnwQvgszpTXEGwHRaU7asUin94yTFh2wkf3YLpuTwrE0WTT6YjZXzb/u7Ju ZmNi7xJG56PAovJOTul3qtVCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK6SRXA Nqc7HC0zGk/M5w49nnB3MB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBC8J6/SNoVj9fdBikco72KMWyIsi0bxBcXosW6F8q3vBbtzXBM2nn Kc0gIOb+nKZeCwR60y6vw2CVvSv47TtDZEayjheX9g667GBx6dC0jkVcstm0MgPq z9k9urFkZPOQXQ6gaYdUZtDdj7tYsk5qKrSuCRR/2aP1nyK+apMyO7ESk8sWrBYP ikUhLU1vUOnlKR2GsNJ6w/7Z/cLILa0FW0UqlFCoVZxjJAZObvvJGz+djd42g58P bYLR9flqlgPT029jsHU1qKDywUY90NNSwZyJQ1LuGEGWwbuYzrBZ2Pb8Jg+ZXd4A jOcdtcqGwQQuLDnoZ2cqkr74tP5agJ7x -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:38 2025 by rpki-client