$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: 7PiYY0bKsH2Y3dT6KxKEXgfy5j6HNdMc21TZxOASzHk= Subject key identifier: 21:64:5D:12:25:9A:75:74:93:1E:6D:9D:43:AC:AB:65:D9:0B:4A:2F Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 01D9 Signing time: Fri 25 Apr 2025 01:58:43 +0000 Manifest this update: Fri 25 Apr 2025 01:58:42 +0000 Manifest next update: Fri 02 May 2025 01:58:42 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: 5ilUJ3+bgkwVMsbZWA0Zc7ZKsOFVDC+Z4SzRMI3GywU=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Apr 25 01:58:42 2025 GMT Not After : May 2 01:58:42 2025 GMT Subject: CN=680aec52-1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:cc:f8:37:50:21:8d:73:03:00:74:5a:e1: dc:a0:46:94:e0:b4:72:4f:a5:df:f9:8a:74:25:83: ec:f4:a4:6b:50:79:54:07:43:23:91:f8:d8:f6:dc: 28:4e:98:c7:4e:b9:94:68:03:33:42:85:be:75:84: 9f:2f:ce:ef:a6:56:43:11:23:fd:70:f4:cf:86:d0: 92:eb:92:ad:34:8c:a0:da:93:03:93:51:77:8b:0e: a3:fb:24:2f:b7:c6:56:6c:a8:6c:6c:78:dd:a0:b0: ef:f1:4d:73:86:a1:73:90:b2:14:f1:25:bd:7e:b9: 14:83:5a:fa:41:04:78:09:ad:f2:62:71:5c:b7:54: af:e0:a5:c3:a9:a1:1a:1b:dc:b6:39:5e:b6:4d:03: 8b:00:8f:af:9e:22:e4:6d:0f:64:5d:16:66:45:82: 69:a5:be:25:1c:02:4e:d2:76:a9:4a:9b:cb:5f:ac: c4:f4:09:1e:91:1a:c3:f0:7d:63:7f:a2:31:8d:3f: de:6c:ca:c5:a6:44:89:27:64:9f:df:c8:71:41:92: 30:39:9e:cc:ef:14:f6:79:56:1f:4b:28:c9:b2:6a: c9:ba:7e:c9:42:8b:5d:54:ec:f8:a7:23:4d:f8:e9: cf:83:fa:d8:59:6f:0f:d3:ca:70:2c:06:c5:bc:bc: fc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:5D:12:25:9A:75:74:93:1E:6D:9D:43:AC:AB:65:D9:0B:4A:2F X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:15:25:5d:86:7b:e7:c6:b4:b7:cd:4c:60:02:1c:6d:b7:fa: 5e:3d:4f:6c:bb:51:3d:68:87:01:d4:07:44:70:35:f5:bf:e9: a7:b6:6e:8f:22:96:7e:96:be:65:20:e1:96:3a:32:e6:af:26: 8e:19:17:58:6b:df:7a:1e:b3:fe:7d:67:57:75:89:d8:82:61: 01:15:20:57:82:f0:b1:02:4a:39:78:e5:98:12:31:20:57:4d: 31:1e:9c:93:3d:22:59:41:22:47:b0:92:4f:2f:8b:54:5b:4f: 4a:25:e5:1d:6e:3b:d9:29:05:a9:b4:d4:ee:8a:20:d2:31:25: a7:5b:12:c9:96:ac:b0:a6:b3:d4:68:bb:50:2b:28:7e:cd:85: 47:a8:40:66:02:53:d9:b7:74:39:87:fb:de:ae:91:7d:dc:0e: f1:a7:00:2a:a8:79:be:4f:00:ce:4e:95:d0:64:b9:ff:b9:de: d5:8b:81:cd:63:9a:74:ec:a0:83:78:99:bb:e9:8e:d8:9c:c8: 34:e9:31:94:bc:0e:57:cc:fa:78:a8:37:76:5e:ec:ec:ea:ba: af:d5:d2:1f:11:fb:b4:86:8f:f0:34:0e:6d:d0:a8:a8:79:5f: d5:f2:c6:2c:81:4f:90:f7:b6:cf:fa:76:3f:ec:25:ea:98:4c: 85:b3:5f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUwNDI1MDE1ODQyWhcNMjUwNTAyMDE1ODQyWjAYMRYwFAYD VQQDEw02ODBhZWM1Mi0xMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylzM+DdQIY1zAwB0WuHcoEaU4LRyT6Xf+Yp0JYPs9KRrUHlUB0MjkfjY9two TpjHTrmUaAMzQoW+dYSfL87vplZDESP9cPTPhtCS65KtNIyg2pMDk1F3iw6j+yQv t8ZWbKhsbHjdoLDv8U1zhqFzkLIU8SW9frkUg1r6QQR4Ca3yYnFct1Sv4KXDqaEa G9y2OV62TQOLAI+vniLkbQ9kXRZmRYJppb4lHAJO0napSpvLX6zE9AkekRrD8H1j f6IxjT/ebMrFpkSJJ2Sf38hxQZIwOZ7M7xT2eVYfSyjJsmrJun7JQotdVOz4pyNN +OnPg/rYWW8P08pwLAbFvLz8mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFkXRIl mnV0kx5tnUOsq2XZC0ovMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmFSVdhnvnxrS3zUxgAhxtt/pePU9su1E9aIcB1AdEcDX1v+mntm6P IpZ+lr5lIOGWOjLmryaOGRdYa996HrP+fWdXdYnYgmEBFSBXgvCxAko5eOWYEjEg V00xHpyTPSJZQSJHsJJPL4tUW09KJeUdbjvZKQWptNTuiiDSMSWnWxLJlqywprPU aLtQKyh+zYVHqEBmAlPZt3Q5h/verpF93A7xpwAqqHm+TwDOTpXQZLn/ud7Vi4HN Y5p07KCDeJm76Y7YnMg06TGUvA5XzPp4qDd2Xuzs6rqv1dIfEfu0ho/wNA5t0Kio eV/V8sYsgU+Q97bP+nY/7CXqmEyFs18S -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:44 2025 by rpki-client