$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: NK65PvctQ8jJ6hjlrND7mKOrYTGpp24ExsyuPyJZ6Qg= Subject key identifier: A0:65:E1:E1:DE:6A:FD:AB:F9:C0:03:C9:4B:56:1A:AE:24:40:6C:A4 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: DA Signing time: Fri 25 Apr 2025 04:36:32 +0000 Manifest this update: Fri 25 Apr 2025 04:36:32 +0000 Manifest next update: Fri 02 May 2025 04:36:32 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 7HXkqY9c0/UXJAth9Qz9UR8FtG6yWAp4oDxrfv7XSsQ=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Apr 25 04:36:32 2025 GMT Not After : May 2 04:36:32 2025 GMT Subject: CN=680b1150-71a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:ae:c4:6e:9f:4c:87:40:32:78:61:1e:8a: 55:0c:f5:5f:b4:c1:85:68:a8:be:06:00:a2:7d:50: 1e:4b:86:42:fa:c4:fd:43:f0:5c:f8:58:7f:4a:c1: 8e:ca:20:46:27:fd:e8:e7:7a:5c:15:c3:e9:2a:18: a7:69:5b:74:dc:92:5a:f0:c6:6e:9c:6b:50:f6:29: 59:54:78:98:55:d5:46:86:59:c7:a1:5e:c6:7a:1b: 23:af:21:64:6c:af:0f:aa:d6:d2:64:62:92:c1:91: 3a:47:27:74:31:59:c7:2e:d8:f3:29:f1:33:64:57: e1:18:09:64:67:26:3c:8a:ce:56:60:03:15:1a:f3: 45:31:3c:75:f6:e0:3c:de:ff:f1:f2:54:aa:2f:a2: 38:1c:4c:80:82:58:41:d3:81:37:af:31:6a:16:eb: 6d:33:0c:6d:10:ba:f1:70:9b:8f:2c:98:37:c8:ed: 83:17:a1:3e:25:77:56:47:07:f5:02:5c:8f:23:77: de:46:85:f3:03:94:59:cf:39:a2:c5:ab:7f:d6:8b: 77:ac:d4:78:4a:c7:31:49:4c:6e:91:70:2f:ab:0f: 45:f0:90:2c:42:91:2c:b2:93:66:71:0e:0a:6d:10: 25:ae:9d:9a:6d:bf:b0:3b:5f:fc:a7:d2:50:f9:78: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:65:E1:E1:DE:6A:FD:AB:F9:C0:03:C9:4B:56:1A:AE:24:40:6C:A4 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:e3:b1:09:72:6a:63:15:20:8d:1b:14:87:90:31:4a:88: 83:ca:7c:3a:ca:48:60:9e:67:aa:a7:aa:f3:3d:ff:cf:2d:2a: d3:41:e0:a7:5b:88:0f:ef:8d:43:2b:ec:46:43:5e:60:48:00: 88:df:83:aa:2b:a1:95:2f:b3:5c:b4:80:4a:46:cf:8c:51:0a: f3:c8:4b:39:17:bc:69:7f:0b:e1:67:2f:cf:93:2e:b0:a1:35: e1:49:fb:84:4b:48:d0:20:d4:30:9e:06:83:10:69:53:3d:a4: c8:26:5a:95:d8:eb:c4:19:70:6e:e0:c3:56:c8:c2:c8:b3:7c: b4:29:01:29:be:a1:75:d7:0e:1e:0e:40:6f:8a:7f:4a:56:df: f7:c3:ca:5d:e4:a0:70:b2:40:ec:8d:2c:32:ca:2e:6c:d2:a6: 6f:5b:bc:e8:62:9b:ca:c8:ac:8e:d5:ea:7c:9e:86:11:99:bb: 64:d7:b4:89:c9:a5:5a:f0:43:d1:59:af:78:b8:f0:c6:48:03: 83:c6:30:0a:f0:d9:5e:73:a3:06:26:8b:06:59:2e:4c:a2:82: fd:14:74:14:14:03:7c:51:62:44:97:70:77:62:a5:ed:d8:7f: f9:65:d8:d1:4f:85:77:03:1b:14:d1:bc:4d:4a:cd:07:e3:fe: ff:65:0e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwNDI1MDQzNjMyWhcNMjUwNTAyMDQzNjMyWjAYMRYwFAYD VQQDEw02ODBiMTE1MC03MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VauxG6fTIdAMnhhHopVDPVftMGFaKi+BgCifVAeS4ZC+sT9Q/Bc+Fh/SsGO yiBGJ/3o53pcFcPpKhinaVt03JJa8MZunGtQ9ilZVHiYVdVGhlnHoV7GehsjryFk bK8PqtbSZGKSwZE6Ryd0MVnHLtjzKfEzZFfhGAlkZyY8is5WYAMVGvNFMTx19uA8 3v/x8lSqL6I4HEyAglhB04E3rzFqFuttMwxtELrxcJuPLJg3yO2DF6E+JXdWRwf1 AlyPI3feRoXzA5RZzzmixat/1ot3rNR4SscxSUxukXAvqw9F8JAsQpEsspNmcQ4K bRAlrp2abb+wO1/8p9JQ+XhvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBl4eHe av2r+cADyUtWGq4kQGykMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbzuOxCXJqYxUgjRsUh5AxSoiDynw6ykhgnmeqp6rzPf/PLSrTQeCn W4gP741DK+xGQ15gSACI34OqK6GVL7NctIBKRs+MUQrzyEs5F7xpfwvhZy/Pky6w oTXhSfuES0jQINQwngaDEGlTPaTIJlqV2OvEGXBu4MNWyMLIs3y0KQEpvqF11w4e DkBvin9KVt/3w8pd5KBwskDsjSwyyi5s0qZvW7zoYpvKyKyO1ep8noYRmbtk17SJ yaVa8EPRWa94uPDGSAODxjAK8Nlec6MGJosGWS5MooL9FHQUFAN8UWJEl3B3YqXt 2H/5ZdjRT4V3AxsU0bxNSs0H4/7/ZQ6z -----END CERTIFICATE-----Generated at Sat Apr 26 14:11:02 2025 by rpki-client