$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: ugcdFOz3tr63v0fwfXiiZ9jiM2A8lbm3SNxnGoxMq5g= Subject key identifier: 2D:9D:29:B4:FB:3C:6E:8A:F7:70:DD:E6:60:B8:E7:97:73:DE:E0:13 Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 02C0 Signing time: Fri 25 Apr 2025 01:10:41 +0000 Manifest this update: Fri 25 Apr 2025 01:10:40 +0000 Manifest next update: Fri 02 May 2025 01:10:40 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: JyaqLVGN0U3JXwdODHkjQ17VdvOC+dIhFwLBxN/YEwY=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: WvT7aspKo+sHWby0nr7AYPsexTa44Dr6ROlq3v6GSX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Apr 25 01:10:40 2025 GMT Not After : May 2 01:10:40 2025 GMT Subject: CN=680ae111-4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:5d:8b:36:62:61:be:00:c6:8e:46:35:86: ac:76:ff:32:9e:b8:9e:c4:f1:29:1c:f6:ce:73:6c: a6:a1:30:40:61:7a:2b:e1:8c:b8:bc:a0:c6:40:e6: d0:61:06:ea:25:f6:8e:5d:01:b4:3c:b6:c9:da:31: b0:7b:1c:16:c4:de:29:32:ba:61:1e:ef:dd:6e:0f: 18:98:c8:28:25:c7:db:b5:20:3f:cf:73:57:6c:a5: d5:30:7d:3e:db:e6:fe:31:bb:7d:99:8f:73:25:bb: 10:1d:d1:32:5a:f8:3c:66:61:24:c8:21:97:9b:5e: 01:5a:90:1c:c9:64:5f:93:bd:50:cf:42:e1:b9:5b: 3d:8d:51:a2:bd:a1:35:26:64:d1:77:9e:d0:dd:d0: 1c:d2:84:0d:e2:ab:cf:3c:e7:65:da:5a:16:3a:52: 26:da:7c:b4:a5:59:f2:74:93:95:8e:86:08:2e:26: b4:2b:4f:4f:2b:ea:95:a9:97:2b:02:4b:23:e7:c0: 59:32:6f:dc:3b:a6:41:8b:34:13:e6:b0:70:9a:dd: cd:b0:30:82:76:f1:3d:39:48:35:6b:fa:0e:e7:57: 45:be:29:7e:13:07:d8:24:7e:a4:b3:75:bf:64:44: 33:99:47:1c:14:c9:39:8d:f3:e9:48:46:bf:29:d5: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:29:B4:FB:3C:6E:8A:F7:70:DD:E6:60:B8:E7:97:73:DE:E0:13 X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:19:c6:27:37:a6:ea:2e:6b:aa:bc:92:04:2a:83:d3:36:1d: 8b:52:22:bc:32:82:96:83:1c:02:d2:72:9d:ec:45:29:57:15: a1:a2:8e:4d:fb:72:1f:b5:78:00:d6:de:04:43:bb:e6:19:84: cd:48:74:3a:3b:c8:30:53:bb:8c:06:01:25:5f:02:b2:42:1b: d0:87:c7:0d:09:15:b3:61:d7:ca:e6:0b:53:e5:05:c8:78:17: 0a:70:c9:7a:d5:7d:0e:34:99:5c:ef:06:df:9c:5b:04:81:2c: ac:d3:ca:31:c6:0e:73:e8:c1:39:44:e9:74:24:c8:9b:d4:35: 9f:a6:64:0f:16:2b:14:93:8e:4a:2c:1b:fe:f3:6f:c0:25:60: ba:d3:2e:2b:02:d9:17:df:e5:5b:79:d1:82:af:bf:d9:03:3f: 19:13:17:aa:50:02:3e:08:4e:22:06:b3:2b:af:6d:fb:92:0c: 26:29:f2:85:e8:59:ff:09:e4:49:fb:51:c3:06:07:46:67:fe: 13:61:58:ae:bd:99:f6:44:66:4f:b9:34:eb:0d:96:2e:b7:e4: 0e:86:9e:ef:96:ac:b9:a0:ee:18:8d:f4:26:41:b1:75:38:dc: d3:47:1e:19:7a:ee:e0:8f:f3:50:4b:5d:00:3d:09:a5:9f:8f: 40:d4:61:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwNDI1MDExMDQwWhcNMjUwNTAyMDExMDQwWjAYMRYwFAYD VQQDEw02ODBhZTExMS00OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5FdizZiYb4Axo5GNYasdv8ynriexPEpHPbOc2ymoTBAYXor4Yy4vKDGQObQ YQbqJfaOXQG0PLbJ2jGwexwWxN4pMrphHu/dbg8YmMgoJcfbtSA/z3NXbKXVMH0+ 2+b+Mbt9mY9zJbsQHdEyWvg8ZmEkyCGXm14BWpAcyWRfk71Qz0LhuVs9jVGivaE1 JmTRd57Q3dAc0oQN4qvPPOdl2loWOlIm2ny0pVnydJOVjoYILia0K09PK+qVqZcr Aksj58BZMm/cO6ZBizQT5rBwmt3NsDCCdvE9OUg1a/oO51dFvil+EwfYJH6ks3W/ ZEQzmUccFMk5jfPpSEa/KdVbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2dKbT7 PG6K93Dd5mC455dz3uATMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdGcYnN6bqLmuqvJIEKoPTNh2LUiK8MoKWgxwC0nKd7EUpVxWhoo5N +3IftXgA1t4EQ7vmGYTNSHQ6O8gwU7uMBgElXwKyQhvQh8cNCRWzYdfK5gtT5QXI eBcKcMl61X0ONJlc7wbfnFsEgSys08oxxg5z6ME5ROl0JMib1DWfpmQPFisUk45K LBv+82/AJWC60y4rAtkX3+VbedGCr7/ZAz8ZExeqUAI+CE4iBrMrr237kgwmKfKF 6Fn/CeRJ+1HDBgdGZ/4TYViuvZn2RGZPuTTrDZYut+QOhp7vlqy5oO4YjfQmQbF1 ONzTRx4Zeu7gj/NQS10APQmln49A1GFk -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:00 2025 by rpki-client