$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: ZpeQTtAY40y8RqYZxQNp+ydr8zVlm/+fgdShYxaDWy0= Subject key identifier: BD:6A:1B:D1:11:64:9C:08:44:35:D1:E3:57:02:AF:64:6D:D6:B0:98 Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: 55 Signing time: Fri 25 Apr 2025 06:10:46 +0000 Manifest this update: Fri 25 Apr 2025 06:10:46 +0000 Manifest next update: Fri 02 May 2025 06:10:46 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: 0WKEQjDJPc8zULiXfl436pMvwk1rJCWtpkarMoVchtQ=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Apr 25 06:10:46 2025 GMT Not After : May 2 06:10:46 2025 GMT Subject: CN=680b2766-7381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:97:8a:77:0a:04:8e:86:68:df:00:2c:91: a8:72:05:11:bc:fc:6f:e4:00:0c:19:39:1b:8e:8f: 52:42:98:2e:49:9c:9e:c9:22:37:e2:f0:a2:47:7c: 04:b7:7c:cb:13:78:1e:fa:11:cd:39:c6:77:fd:17: 21:76:57:43:fc:29:86:c9:84:52:10:9a:b4:21:27: d5:fe:99:29:9a:5d:80:f5:ba:14:3f:60:a2:4a:27: cd:d6:15:44:c2:8d:70:16:77:ec:93:6f:63:4e:91: 62:3c:eb:a6:df:b6:5f:61:ec:bc:6f:a2:06:d1:04: 88:4e:1a:0c:02:99:4a:fb:b9:d3:74:79:0f:39:53: a2:8d:87:9f:15:9d:1c:56:32:65:89:56:04:fb:64: e5:8a:0f:e5:f2:cb:6b:d8:30:93:f1:50:a5:ac:0c: 1f:0f:db:a3:49:96:e7:6f:7e:45:92:eb:2f:ed:35: f3:52:c9:76:94:22:04:81:92:0a:b3:46:76:08:a8: 5c:3a:a0:06:a8:3f:0a:54:08:73:e0:2e:47:53:32: 92:ec:e1:e0:20:53:b4:ce:1f:e7:e3:58:a1:65:2b: 27:7f:a5:13:5a:7b:ec:3a:38:01:83:ac:f0:e7:c6: 9f:f5:b8:23:3f:38:41:7e:43:59:4a:e1:88:f1:ba: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6A:1B:D1:11:64:9C:08:44:35:D1:E3:57:02:AF:64:6D:D6:B0:98 X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6c:11:7f:62:60:ab:8e:d9:8e:b2:3b:8f:6b:70:18:ee:95: 68:2b:f1:8d:b0:72:0c:6e:3c:6e:c0:6f:5c:b7:71:f8:45:0d: aa:fc:21:04:79:74:2e:a8:f0:98:9c:67:14:22:72:a6:4b:f7: cc:59:f9:b3:01:27:6b:f9:b5:dc:bc:5a:23:61:66:83:5a:73: dd:a1:cf:bf:b0:75:0e:dd:68:1b:1d:01:da:de:27:66:84:05: 35:a3:7b:c0:6e:77:63:af:36:9b:24:26:53:57:1a:b8:4b:3d: e4:e8:3f:9b:be:06:82:7d:30:f8:5e:be:06:20:87:ac:cc:36: 03:a7:31:06:38:9f:1d:fe:2e:2e:1c:0c:ef:82:3f:b0:f2:7c: 0b:9a:0e:97:07:66:68:68:ee:1d:17:26:90:6f:10:f8:1b:71: 4e:d9:b3:00:17:93:66:2b:f8:1c:78:47:70:4b:30:6d:00:79: b9:f5:b1:77:61:fc:fb:f3:f1:e1:dd:70:f8:12:ba:64:89:6d: 6b:4e:61:5f:77:e9:aa:6a:1a:92:09:ce:fc:67:33:7d:c1:28: 10:48:f5:20:5f:59:78:72:41:96:6f:65:9c:24:6c:6d:56:da: a1:9c:d4:3d:55:88:81:25:f8:7c:32:9a:26:3d:af:47:44:5d: 6c:a6:4d:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDE2NDExMC8GA1UEBRMoMDk0QzhCQzVEQURDQ0Q5QzJGQjNDRjQ1RDE0NjRERUVD RjNBMUM2MDAeFw0yNTA0MjUwNjEwNDZaFw0yNTA1MDIwNjEwNDZaMBgxFjAUBgNV BAMTDTY4MGIyNzY2LTczODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRnZeKdwoEjoZo3wAskahyBRG8/G/kAAwZORuOj1JCmC5JnJ7JIjfi8KJHfAS3 fMsTeB76Ec05xnf9FyF2V0P8KYbJhFIQmrQhJ9X+mSmaXYD1uhQ/YKJKJ83WFUTC jXAWd+yTb2NOkWI866bftl9h7LxvogbRBIhOGgwCmUr7udN0eQ85U6KNh58VnRxW MmWJVgT7ZOWKD+Xyy2vYMJPxUKWsDB8P26NJludvfkWS6y/tNfNSyXaUIgSBkgqz RnYIqFw6oAaoPwpUCHPgLkdTMpLs4eAgU7TOH+fjWKFlKyd/pRNae+w6OAGDrPDn xp/1uCM/OEF+Q1lK4YjxujXRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvWob0RFk nAhENdHjVwKvZG3WsJgwHwYDVR0jBBgwFoAUCUyLxdrczZwvs89F0UZN7s86HGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0FFNzIyODlDQTE4 MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1V5THhkcmN6Wnd2czg5RjBVWk43czg2SEdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 MTY0L0FFNzIyODlDQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3 dnM4OUYwVVpON3M4NkhHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdsEX9iYKuO2Y6yO49rcBjulWgr8Y2wcgxuPG7Ab1y3cfhFDar8IQR5 dC6o8JicZxQicqZL98xZ+bMBJ2v5tdy8WiNhZoNac92hz7+wdQ7daBsdAdreJ2aE BTWje8Bud2OvNpskJlNXGrhLPeToP5u+BoJ9MPhevgYgh6zMNgOnMQY4nx3+Li4c DO+CP7DyfAuaDpcHZmho7h0XJpBvEPgbcU7ZswAXk2Yr+Bx4R3BLMG0Aebn1sXdh /Pvz8eHdcPgSumSJbWtOYV936apqGpIJzvxnM33BKBBI9SBfWXhyQZZvZZwkbG1W 2qGc1D1ViIEl+HwymiY9r0dEXWymTU0= -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:55 2025 by rpki-client