$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json) Hash identifier: 8NifCCDIJ0/ZpxoetT/6JiFNLF+qugM3so+M7FOMZzE= Subject key identifier: 53:9B:82:DD:FF:8D:3F:FF:2E:EC:2D:CE:D4:BF:70:E1:F8:1E:7B:86 Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft Manifest number: 08E3 Signing time: Thu 24 Apr 2025 20:18:54 +0000 Manifest this update: Thu 24 Apr 2025 20:18:53 +0000 Manifest next update: Thu 01 May 2025 20:18:53 +0000 Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: 3JtbWrrPK+3eUwOpHWp3Jmph6oRWsTAVZnROAokfaOk=) 2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Lf+OpNRolRnNyf7s3LctxABHJRYGwAmVNkJb5Q4x0vo=) 3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: GurqPE7vf79zU82Gehwj1ctZametXlaKlIqkpoDGL9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Validity Not Before: Apr 24 20:18:53 2025 GMT Not After : May 1 20:18:53 2025 GMT Subject: CN=680a9cad-f6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:55:b0:67:d7:fa:50:5b:ae:a1:c4:11:71: 05:13:b7:66:e5:25:0e:5b:3f:2a:cb:02:93:a1:64: 08:9f:6f:d5:7c:02:37:b6:3b:02:d1:0f:68:08:f0: 22:16:7d:90:ec:83:7a:8a:94:01:1c:0a:aa:cf:05: 04:c0:ae:29:43:b4:09:d5:70:aa:13:03:8a:0f:79: 25:d8:84:20:54:ba:c2:c8:61:e0:b8:0a:33:3a:4b: 0b:b8:62:fc:e5:5a:1e:39:a3:f5:25:2a:2f:b1:ae: bf:35:63:29:f3:14:0f:8b:1b:5e:bf:c2:0f:38:6c: b7:b8:c9:91:b4:d2:22:92:de:33:ed:ba:13:a1:b4: 81:a0:b1:13:83:9a:c0:e0:ba:02:29:08:c5:d0:6f: 7b:0e:90:60:e3:31:50:45:13:9e:05:16:a4:e5:89: 0f:79:d6:38:f9:ae:b1:d6:47:cb:83:e0:e7:a2:63: 87:78:46:1c:a5:8e:7d:c5:f1:57:56:43:78:1d:e2: 41:55:32:de:f5:26:fd:97:0e:31:39:e2:e4:d0:01: 6a:cf:1e:38:dd:a2:d5:11:93:0d:c2:ef:ba:57:0f: 70:5a:04:38:a1:ad:28:7b:11:7f:9c:a8:51:03:72: 0d:62:17:20:d1:ad:f4:0d:83:92:18:0b:1f:02:73: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9B:82:DD:FF:8D:3F:FF:2E:EC:2D:CE:D4:BF:70:E1:F8:1E:7B:86 X509v3 Authority Key Identifier: keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:bd:bd:31:08:05:3f:4c:47:18:3e:48:a2:81:c5:8f:f3:d9: 67:38:c9:b8:b6:f0:80:da:66:3b:a5:f7:bf:cc:ca:93:bd:64: 14:0e:b1:80:bb:19:78:3f:79:b5:07:52:2d:25:ba:66:90:de: d5:2c:ce:0b:36:bf:62:5f:33:2d:09:b8:fd:89:ca:8e:fb:cf: 06:98:cd:b7:b6:f3:a4:5a:44:9c:b6:60:a0:ba:08:60:bd:b3: 49:3f:a5:f3:fd:97:b0:40:7d:e1:c4:cd:ba:22:fc:48:f1:b8: af:d6:a6:3f:8b:bc:43:54:6c:4f:cc:ba:08:5b:35:40:46:6b: 53:1e:ad:3a:0d:3e:84:04:57:55:09:29:4b:ff:a0:78:50:1b: 35:25:62:2a:87:d0:15:00:7b:2e:3e:7e:99:f6:e7:a0:59:d1: ca:eb:37:2b:87:2b:0f:72:ce:6b:fc:b2:7c:4b:e0:2c:47:bf: 84:14:7e:c6:76:dc:a5:47:84:63:da:74:12:30:23:88:fa:41: 3e:90:fd:fd:33:15:f6:d7:29:bb:2e:be:ee:36:5e:e5:8c:50: d0:ce:42:a4:7e:22:14:cc:f4:b5:c6:19:10:4a:54:5f:75:32: 0a:af:e2:47:9e:3a:b7:09:38:42:ff:e5:65:a3:fd:7e:1c:f7: 6f:dc:db:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD MTUyREVCM0UwHhcNMjUwNDI0MjAxODUzWhcNMjUwNTAxMjAxODUzWjAYMRYwFAYD VQQDEw02ODBhOWNhZC1mNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6tVsGfX+lBbrqHEEXEFE7dm5SUOWz8qywKToWQIn2/VfAI3tjsC0Q9oCPAi Fn2Q7IN6ipQBHAqqzwUEwK4pQ7QJ1XCqEwOKD3kl2IQgVLrCyGHguAozOksLuGL8 5VoeOaP1JSovsa6/NWMp8xQPixtev8IPOGy3uMmRtNIikt4z7boTobSBoLETg5rA 4LoCKQjF0G97DpBg4zFQRROeBRak5YkPedY4+a6x1kfLg+DnomOHeEYcpY59xfFX VkN4HeJBVTLe9Sb9lw4xOeLk0AFqzx443aLVEZMNwu+6Vw9wWgQ4oa0oexF/nKhR A3INYhcg0a30DYOSGAsfAnNcowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFObgt3/ jT//LuwtztS/cOH4HnuGMB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9EQzU0RDlBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVX c1pUcmlFa3VrQ0hCVXQ2ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3vb0xCAU/TEcYPkiigcWP89lnOMm4tvCA2mY7pfe/zMqTvWQUDrGA uxl4P3m1B1ItJbpmkN7VLM4LNr9iXzMtCbj9icqO+88GmM23tvOkWkSctmCgughg vbNJP6Xz/ZewQH3hxM26IvxI8biv1qY/i7xDVGxPzLoIWzVARmtTHq06DT6EBFdV CSlL/6B4UBs1JWIqh9AVAHsuPn6Z9uegWdHK6zcrhysPcs5r/LJ8S+AsR7+EFH7G dtylR4Rj2nQSMCOI+kE+kP39MxX21ym7Lr7uNl7ljFDQzkKkfiIUzPS1xhkQSlRf dTIKr+JHnjq3CThC/+Vlo/1+HPdv3Nt4 -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:35 2025 by rpki-client