$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft File: u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json) Hash identifier: czXGZeZp3RdKc/AV2IuMEDwskYak9kyAbLBK3zy43tM= Subject key identifier: A0:06:40:90:56:62:06:C4:11:BC:B5:29:03:65:07:8D:F2:90:74:F9 Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F Certificate issuer: /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft Manifest number: 07B4 Signing time: Thu 24 Apr 2025 21:07:06 +0000 Manifest this update: Thu 24 Apr 2025 21:07:05 +0000 Manifest next update: Thu 01 May 2025 21:07:05 +0000 Files and hashes: 1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: qBirJHEN1tqOQUG2LL23kTpvyDYdZSDjyd7nr510a6Y=) 2: 862720F4031611EB9086351AC4F9AE02.roa (hash: 2zKL2eeTJdxP4POaaALiM0rJiDZ4mdlP/D8Tb5yhoj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F Validity Not Before: Apr 24 21:07:05 2025 GMT Not After : May 1 21:07:05 2025 GMT Subject: CN=680aa7fa-f846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:06:7f:82:b0:a4:59:87:e2:c7:b0:b6:22: cd:cb:a8:19:d7:61:c3:4a:9a:3d:3a:fb:00:87:86: d1:0a:be:52:f8:78:b6:d1:b3:53:73:af:74:22:c5: d0:cd:d6:fa:5e:b6:b0:fe:67:e5:8c:59:f8:38:b7: 53:84:71:a5:d0:0f:a9:96:99:2c:93:18:f8:52:c6: 81:1b:fe:23:65:ec:72:4e:f0:7c:87:a8:94:f8:2e: 96:f0:01:07:74:a6:84:c1:c1:98:78:fb:53:2b:3c: 83:c1:7a:61:9b:f1:de:d4:b1:62:96:6c:2d:c3:cd: 88:06:bb:3d:c1:59:c7:0c:ec:43:a8:3b:d4:1f:e9: 12:8f:b2:50:b6:e0:58:52:af:2f:05:db:b2:75:92: 27:5f:a7:85:f3:9b:98:b9:10:3e:01:9c:e1:19:b2: 66:a9:dc:ed:24:d0:94:68:4f:33:1e:94:c8:31:1a: 00:30:89:1f:4b:2a:ca:0c:11:15:5d:35:b8:70:0f: 79:38:b2:de:d4:44:17:35:fe:65:17:64:97:68:32: 30:aa:29:f4:b2:dc:ac:f0:ee:c8:ef:34:97:8f:bf: d7:fc:6b:c7:68:1c:11:6e:b4:b9:96:1b:7b:cb:9f: e4:5a:3c:05:70:19:8b:4d:09:36:4a:e1:31:2d:27: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:06:40:90:56:62:06:C4:11:BC:B5:29:03:65:07:8D:F2:90:74:F9 X509v3 Authority Key Identifier: keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:16:92:c2:d4:9b:ab:6d:6d:63:fe:b4:99:0b:50:ff:86:be: b7:bc:c6:13:10:72:08:eb:85:1b:4d:95:cf:74:0f:7d:3e:ae: 10:49:8e:3e:54:f3:92:e4:ea:df:f4:1b:24:9e:52:cf:52:bc: 5f:f2:c0:c8:2b:99:d8:ad:97:a7:36:55:5d:0f:ac:37:af:05: ae:f2:ab:2a:7e:ce:79:1c:43:0c:fb:89:4c:bc:16:4b:59:74: 2a:5e:45:a2:c3:71:48:d7:ec:22:ea:96:57:92:d6:cc:19:fc: ba:d5:91:90:94:59:90:b7:59:8f:1f:54:96:89:e2:75:aa:03: 06:fa:41:d8:f9:a5:94:bf:02:d8:d1:0f:2a:38:fc:ac:2d:0e: 0e:03:6b:0c:ca:4a:ae:6e:64:4f:2e:19:f3:a5:ab:2a:50:7d: 75:3a:93:2b:22:ad:99:aa:e3:5f:e9:c5:b6:41:ed:58:bd:a7: b1:57:4b:86:8b:0c:95:c8:70:09:8e:06:b0:84:5b:4a:b0:9b: e0:b3:08:ba:4f:f8:86:82:cb:f4:e5:f1:2c:50:bc:3f:98:9e: 0c:51:f3:c7:e1:d2:65:0d:60:20:88:b6:6d:2f:ea:9c:2c:fc: 4a:be:01:72:42:12:45:ec:40:37:86:74:fd:bf:bb:ae:47:a0: c9:61:f4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG NTdDRkI5M0YwHhcNMjUwNDI0MjEwNzA1WhcNMjUwNTAxMjEwNzA1WjAYMRYwFAYD VQQDEw02ODBhYTdmYS1mODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfgGf4KwpFmH4sewtiLNy6gZ12HDSpo9OvsAh4bRCr5S+Hi20bNTc690IsXQ zdb6Xraw/mfljFn4OLdThHGl0A+plpkskxj4UsaBG/4jZexyTvB8h6iU+C6W8AEH dKaEwcGYePtTKzyDwXphm/He1LFilmwtw82IBrs9wVnHDOxDqDvUH+kSj7JQtuBY Uq8vBduydZInX6eF85uYuRA+AZzhGbJmqdztJNCUaE8zHpTIMRoAMIkfSyrKDBEV XTW4cA95OLLe1EQXNf5lF2SXaDIwqin0stys8O7I7zSXj7/X/GvHaBwRbrS5lht7 y5/kWjwFcBmLTQk2SuExLSdTEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAGQJBW YgbEEby1KQNlB43ykHT5MB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ2QS8zOUY0OEExMDAzMTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmda Y3Z3NjhjYk9hdnoxZlB1VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtFpLC1JurbW1j/rSZC1D/hr63vMYTEHII64UbTZXPdA99Pq4QSY4+ VPOS5Orf9BsknlLPUrxf8sDIK5nYrZenNlVdD6w3rwWu8qsqfs55HEMM+4lMvBZL WXQqXkWiw3FI1+wi6pZXktbMGfy61ZGQlFmQt1mPH1SWieJ1qgMG+kHY+aWUvwLY 0Q8qOPysLQ4OA2sMykqubmRPLhnzpasqUH11OpMrIq2ZquNf6cW2Qe1YvaexV0uG iwyVyHAJjgawhFtKsJvgswi6T/iGgsv05fEsULw/mJ4MUfPH4dJlDWAgiLZtL+qc LPxKvgFyQhJF7EA3hnT9v7uuR6DJYfRZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:43 2025 by rpki-client