$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json) Hash identifier: ayv9DYWLTpgVgddKZWYli8JRq4/FkEwOSxyKYwFJS9c= Subject key identifier: 7B:D3:4F:12:87:9A:B9:8F:11:B1:5F:1E:32:09:F3:4F:0B:B2:DD:4D Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft Manifest number: 01C4 Signing time: Thu 01 May 2025 02:08:43 +0000 Manifest this update: Thu 01 May 2025 02:08:42 +0000 Manifest next update: Thu 08 May 2025 02:08:42 +0000 Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: jjGgS4KvmMXp8UvTg5/s6NZBuH8DkSsuzZBUYUWloNA=) 2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: csl85VTomjs4iPv8bKOFHRUkLivByj84d/cWaa81y8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: May 1 02:08:42 2025 GMT Not After : May 8 02:08:42 2025 GMT Subject: CN=6812d7ab-a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:a9:42:89:c9:20:a7:03:24:98:10:5d:0e: 68:d7:8a:2a:f6:7e:08:25:28:ac:b3:65:b7:47:75: 5d:0f:f7:dc:8c:3f:12:da:45:9a:72:38:85:ea:c7: 63:de:ac:12:fe:aa:d3:8f:3a:4a:10:e6:ce:6f:6f: 22:95:46:c6:8e:c1:a6:24:70:ca:bd:ea:8f:0a:19: 22:b2:29:f3:4f:10:cc:06:bd:7a:b6:31:34:9e:14: e5:67:51:07:e7:ec:57:a9:88:21:48:55:22:9b:91: 84:8f:a9:b9:3d:4c:26:82:ab:7a:2a:7d:54:46:28: 8d:4f:2e:22:97:d1:90:4c:85:0e:ad:1f:48:0b:72: b7:c4:d8:87:94:62:0e:0b:4a:d3:df:e6:c7:70:ec: db:38:60:26:e7:f5:24:cd:47:ea:4d:7f:79:4d:bf: f3:2a:03:cd:81:4a:41:89:cd:67:7c:13:aa:44:2c: e0:13:01:ec:3a:af:78:a3:6a:e6:c1:89:4d:ff:c8: 8c:5f:75:52:92:94:9b:0c:f6:6c:c3:ea:61:a8:e7: 4e:cd:52:9b:a5:67:2d:a5:f5:2a:fb:47:9e:64:60: 36:7c:0c:2d:28:33:18:5e:60:bd:62:73:98:8b:91: 7f:4d:66:63:ea:49:9c:89:52:0e:6b:e8:40:3f:34: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:4F:12:87:9A:B9:8F:11:B1:5F:1E:32:09:F3:4F:0B:B2:DD:4D X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:8e:74:9b:ae:cc:b6:04:8c:38:a4:72:ae:42:da:c8:d8:0f: d4:3f:19:e5:9c:bd:be:21:30:20:db:d4:01:8a:de:04:2d:90: e2:87:9d:8d:d6:76:ad:d4:1a:9e:50:6f:1a:6d:87:0f:ba:3f: a3:1a:36:c1:0a:4b:7c:8d:76:dd:9c:a3:43:28:9d:a1:f9:37: a0:30:3b:b9:1f:cb:9d:86:41:5e:1f:25:08:b2:c6:2b:8c:1c: 9a:9d:10:94:6f:ff:95:61:d9:0c:4a:c6:59:97:3d:22:48:cd: 9c:62:5a:70:34:71:82:57:e2:61:57:02:92:dc:10:01:af:9f: 69:b3:50:44:3b:93:dd:7c:1d:45:42:71:c1:d2:75:db:a4:c9: c5:2e:8b:9f:47:c7:8f:40:88:7d:d3:57:cd:c0:b7:d8:0c:2e: c9:4e:55:84:8d:db:ed:f0:d0:3d:c8:51:88:25:4a:00:7a:02: f2:80:ab:1f:db:27:4c:d8:23:35:e9:a6:4e:51:4b:ae:c8:54: 88:67:5d:27:fc:9b:97:80:c8:1a:f5:1b:54:a0:ad:db:13:17: 06:36:00:0e:1d:d8:f6:d2:8c:47:e7:0b:b3:db:42:0a:7e:2e: 47:7d:b6:e7:4f:ce:ba:6a:5f:03:47:ce:a3:1b:c3:02:75:cd: 86:83:6c:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjUwNTAxMDIwODQyWhcNMjUwNTA4MDIwODQyWjAYMRYwFAYD VQQDEw02ODEyZDdhYi1hOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOupQonJIKcDJJgQXQ5o14oq9n4IJSiss2W3R3VdD/fcjD8S2kWacjiF6sdj 3qwS/qrTjzpKEObOb28ilUbGjsGmJHDKveqPChkisinzTxDMBr16tjE0nhTlZ1EH 5+xXqYghSFUim5GEj6m5PUwmgqt6Kn1URiiNTy4il9GQTIUOrR9IC3K3xNiHlGIO C0rT3+bHcOzbOGAm5/UkzUfqTX95Tb/zKgPNgUpBic1nfBOqRCzgEwHsOq94o2rm wYlN/8iMX3VSkpSbDPZsw+phqOdOzVKbpWctpfUq+0eeZGA2fAwtKDMYXmC9YnOY i5F/TWZj6kmciVIOa+hAPzTKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvTTxKH mrmPEbFfHjIJ808Lst1NMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU X09Id3dOdXpHeHVDeU5MT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrjnSbrsy2BIw4pHKuQtrI2A/UPxnlnL2+ITAg29QBit4ELZDih52N 1nat1BqeUG8abYcPuj+jGjbBCkt8jXbdnKNDKJ2h+TegMDu5H8udhkFeHyUIssYr jByanRCUb/+VYdkMSsZZlz0iSM2cYlpwNHGCV+JhVwKS3BABr59ps1BEO5PdfB1F QnHB0nXbpMnFLoufR8ePQIh901fNwLfYDC7JTlWEjdvt8NA9yFGIJUoAegLygKsf 2ydM2CM16aZOUUuuyFSIZ10n/JuXgMga9RtUoK3bExcGNgAOHdj20oxH5wuz20IK fi5HfbbnT866al8DR86jG8MCdc2Gg2wc -----END CERTIFICATE-----Generated at Sat May 3 02:58:38 2025 by rpki-client