$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: Ie7dWYDiU2gwEl9IJTQjhXOnP5AYh1A8kVegfEb0OYc= Subject key identifier: 8E:2B:4C:4B:16:FB:5E:9D:E2:E5:56:C7:4D:18:29:BA:54:DD:C3:5D Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 034A Signing time: Fri 25 Apr 2025 00:50:28 +0000 Manifest this update: Fri 25 Apr 2025 00:50:27 +0000 Manifest next update: Fri 02 May 2025 00:50:27 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: TwBhpo06MS3wdA5FzyVfstRKimFiT/v99LGUpschNik=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Apr 25 00:50:27 2025 GMT Not After : May 2 00:50:27 2025 GMT Subject: CN=680adc53-7080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:f1:07:fd:2b:45:e6:4a:71:68:72:e3:c9: 88:71:03:40:b7:86:79:16:a1:77:46:8d:ef:59:0a: d4:13:13:18:88:1f:df:cd:a6:fd:0d:62:6d:ff:0b: 14:21:f1:1c:a8:ac:e5:4c:33:42:15:fa:df:22:1b: f6:b6:3c:f7:78:22:4d:20:4b:86:c4:a5:85:27:67: cc:fe:f7:0a:b3:0a:53:91:65:a5:b8:6f:4f:02:35: d8:e7:6e:92:b4:b9:8c:23:ae:b4:04:53:3c:22:7e: c1:ab:c6:de:9e:3e:70:9a:10:38:99:c4:ee:8d:9e: e8:60:be:8e:35:9a:ba:2a:c9:92:26:cd:5f:2a:80: 39:5c:81:f2:2b:e9:81:1f:31:2c:f8:eb:cb:72:d0: f8:c3:91:67:87:3a:63:51:3d:45:38:89:54:84:7a: fa:f3:0a:67:c7:1e:49:b9:3e:31:4b:40:81:97:4f: f4:c7:f6:2c:10:f4:52:e5:0d:73:6d:e5:44:df:9f: 41:86:a5:97:ed:17:7a:13:60:c3:aa:61:ce:1c:9e: bc:b8:86:87:04:ec:9f:3a:36:f2:c4:21:12:9c:53: 4a:9f:0f:87:19:9e:8d:a0:02:f2:df:47:02:69:bd: 12:69:b9:31:4e:fe:99:7e:e5:28:79:59:3f:65:69: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:4C:4B:16:FB:5E:9D:E2:E5:56:C7:4D:18:29:BA:54:DD:C3:5D X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ee:cf:02:3b:9a:7a:70:79:25:50:7a:93:ff:51:51:2b:17: bf:93:05:8a:9f:68:88:9a:2d:a4:86:61:91:6d:b4:19:69:9c: 06:7e:75:f5:4e:b9:fd:45:cf:88:58:49:8f:5f:9c:1f:e8:3b: e5:ec:d4:04:db:d5:32:09:3e:38:72:47:48:17:91:ca:23:05: 21:56:0c:d8:b4:1f:ec:17:b6:83:3e:a9:f2:cc:a2:1c:1e:3a: e9:da:16:48:0b:5d:f7:8e:98:29:a8:60:2f:72:8a:28:2b:fd: c0:65:d1:d1:f0:42:a9:20:d9:e7:78:20:15:b5:4c:87:45:e2: 0d:5c:6a:fc:15:7a:85:05:51:75:b0:65:d6:41:aa:4b:2f:3f: 36:08:0c:ed:a9:18:e1:f4:05:0f:88:97:e1:68:b3:65:8a:8a: 84:a8:e3:3c:cc:e0:dd:51:b5:b2:16:53:fb:fd:4a:10:b6:e1: 14:93:f5:bd:4c:a2:1f:73:ad:7a:7c:14:26:e9:76:2b:19:81: 76:42:15:9f:c7:79:91:0d:b1:e1:c0:64:81:f1:04:7e:c1:33: 3d:fa:95:c6:fb:29:ea:61:82:67:30:06:c5:c1:7e:79:a4:70: dd:bb:15:d1:4f:8a:aa:22:03:f3:a4:06:95:30:4f:43:7d:91: b1:3a:5d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwNDI1MDA1MDI3WhcNMjUwNTAyMDA1MDI3WjAYMRYwFAYD VQQDEw02ODBhZGM1My03MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFPxB/0rReZKcWhy48mIcQNAt4Z5FqF3Ro3vWQrUExMYiB/fzab9DWJt/wsU IfEcqKzlTDNCFfrfIhv2tjz3eCJNIEuGxKWFJ2fM/vcKswpTkWWluG9PAjXY526S tLmMI660BFM8In7Bq8benj5wmhA4mcTujZ7oYL6ONZq6KsmSJs1fKoA5XIHyK+mB HzEs+OvLctD4w5FnhzpjUT1FOIlUhHr68wpnxx5JuT4xS0CBl0/0x/YsEPRS5Q1z beVE359BhqWX7Rd6E2DDqmHOHJ68uIaHBOyfOjbyxCESnFNKnw+HGZ6NoALy30cC ab0SabkxTv6ZfuUoeVk/ZWmTxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4rTEsW +16d4uVWx00YKbpU3cNdMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7s8CO5p6cHklUHqT/1FRKxe/kwWKn2iImi2khmGRbbQZaZwGfnX1 Trn9Rc+IWEmPX5wf6Dvl7NQE29UyCT44ckdIF5HKIwUhVgzYtB/sF7aDPqnyzKIc Hjrp2hZIC133jpgpqGAvcoooK/3AZdHR8EKpINnneCAVtUyHReINXGr8FXqFBVF1 sGXWQapLLz82CAztqRjh9AUPiJfhaLNlioqEqOM8zODdUbWyFlP7/UoQtuEUk/W9 TKIfc616fBQm6XYrGYF2QhWfx3mRDbHhwGSB8QR+wTM9+pXG+ynqYYJnMAbFwX55 pHDduxXRT4qqIgPzpAaVME9DfZGxOl3d -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:08 2025 by rpki-client