$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: BPawWvp/5L4K5wGsj8AxAI36xCmrzCBnC2GCVwsFa/g= Subject key identifier: 49:90:41:5D:14:4C:6C:32:1E:7E:57:20:4B:7B:3A:16:31:7B:29:B2 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 04DE Signing time: Thu 24 Apr 2025 23:32:28 +0000 Manifest this update: Thu 24 Apr 2025 23:32:28 +0000 Manifest next update: Thu 01 May 2025 23:32:28 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: g+Kwr9IsFptFug9uhRAwQPm87FJ4Iw9eKFGUFXQtWM4=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: ECduF6HgxTLoDLFAm0PdDIfSdNYqt9EVcY+nm8e4XyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Apr 24 23:32:28 2025 GMT Not After : May 1 23:32:28 2025 GMT Subject: CN=680aca0c-5daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:b1:3c:ff:a5:4e:99:d4:96:d1:01:7e:4b: 99:e4:4e:4b:0d:e6:18:25:db:ee:c1:5a:58:5f:50: ec:f5:3b:0d:a5:ba:bc:f6:f6:eb:e3:5e:e2:7a:06: d5:8e:b3:ed:15:ed:69:8e:12:af:1a:88:22:1b:0c: ed:2f:29:51:36:99:2c:01:1b:44:7d:4a:16:86:64: 63:d8:ea:0e:38:36:c7:c0:8d:35:9d:5f:51:91:07: b1:d5:c9:8a:94:96:d4:bc:aa:7e:dc:8d:8f:7b:e9: 33:3f:16:b8:81:55:3d:21:5c:02:80:b2:4c:e5:c3: 02:52:05:15:24:d1:37:db:3b:ba:ee:6a:1a:e1:ed: 58:72:cd:18:00:12:a7:d5:37:5c:27:f4:f6:f8:a6: 9d:56:5a:c9:ac:f4:ba:aa:6d:5d:83:3e:02:09:a4: eb:69:f1:eb:2d:ff:5b:90:13:5b:db:99:ff:5b:14: 14:67:a2:26:d9:d2:9d:c4:b6:c4:bc:7e:86:c2:df: 2f:96:c0:55:d4:07:b9:87:ed:29:93:f5:84:42:7b: c1:9e:dc:53:87:06:39:5f:86:e1:36:78:7b:27:b6: 91:06:0c:c7:af:5c:fc:26:40:94:f4:94:fc:0a:88: e9:b0:15:9c:b6:92:d0:e6:2e:97:18:d8:da:9a:b0: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:90:41:5D:14:4C:6C:32:1E:7E:57:20:4B:7B:3A:16:31:7B:29:B2 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e3:70:d3:a7:bb:16:94:92:20:b6:82:16:3a:da:23:e5:cb: 2f:01:d8:38:f4:33:0b:7e:69:b6:fe:ad:26:60:e5:93:08:1d: d6:0b:63:74:90:ea:ac:3d:a1:e2:91:9e:3b:43:e3:ca:c5:bd: e5:5b:f7:16:c7:4d:19:ca:e0:1d:3a:c0:83:d2:57:fd:0f:17: 21:9e:5a:2f:2d:37:51:89:9c:00:02:c2:1a:4d:3d:de:d2:9f: 6d:22:c6:23:bd:86:4d:91:7c:3e:e9:91:ee:ee:3e:9f:dd:41: fb:c5:3f:6f:fe:66:94:92:c7:f4:4d:62:f4:39:2e:e6:15:4c: fb:24:76:1a:1a:f2:24:a9:a6:34:dd:02:24:1f:3a:07:18:59: 00:82:da:25:ac:db:17:f5:91:f3:06:71:ef:ac:ac:d6:40:6d: f2:aa:f9:09:76:f4:3d:69:ed:e2:ef:34:76:5e:8a:cd:6f:13: 8b:6b:bd:b1:e8:0f:19:03:4f:f0:ed:b1:da:38:2f:61:a0:da: e8:a3:bf:f1:c9:fb:72:e4:16:db:bc:9f:b3:d0:97:b2:4d:82: 36:26:68:29:57:3a:de:f7:23:ec:1b:77:5d:bf:e8:f0:a5:50: ae:42:81:6a:6f:14:5f:1a:5c:b1:be:cf:2f:52:18:98:0e:a5: 4f:47:1b:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjUwNDI0MjMzMjI4WhcNMjUwNTAxMjMzMjI4WjAYMRYwFAYD VQQDEw02ODBhY2EwYy01ZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTmxPP+lTpnUltEBfkuZ5E5LDeYYJdvuwVpYX1Ds9TsNpbq89vbr417iegbV jrPtFe1pjhKvGogiGwztLylRNpksARtEfUoWhmRj2OoOODbHwI01nV9RkQex1cmK lJbUvKp+3I2Pe+kzPxa4gVU9IVwCgLJM5cMCUgUVJNE32zu67moa4e1Ycs0YABKn 1TdcJ/T2+KadVlrJrPS6qm1dgz4CCaTrafHrLf9bkBNb25n/WxQUZ6Im2dKdxLbE vH6Gwt8vlsBV1Ae5h+0pk/WEQnvBntxThwY5X4bhNnh7J7aRBgzHr1z8JkCU9JT8 CojpsBWctpLQ5i6XGNjamrBWIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmQQV0U TGwyHn5XIEt7OhYxeymyMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp43DTp7sWlJIgtoIWOtoj5csvAdg49DMLfmm2/q0mYOWTCB3WC2N0 kOqsPaHikZ47Q+PKxb3lW/cWx00ZyuAdOsCD0lf9DxchnlovLTdRiZwAAsIaTT3e 0p9tIsYjvYZNkXw+6ZHu7j6f3UH7xT9v/maUksf0TWL0OS7mFUz7JHYaGvIkqaY0 3QIkHzoHGFkAgtolrNsX9ZHzBnHvrKzWQG3yqvkJdvQ9ae3i7zR2XorNbxOLa72x 6A8ZA0/w7bHaOC9hoNroo7/xyfty5BbbvJ+z0JeyTYI2JmgpVzre9yPsG3ddv+jw pVCuQoFqbxRfGlyxvs8vUhiYDqVPRxvE -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:25 2025 by rpki-client