$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json) Hash identifier: G8vXjroY450SBFq0HD+hhktJrDLVNDkC+JhF7MD9ex8= Subject key identifier: C3:C1:87:E4:4B:BC:89:F9:1D:ED:B0:3F:5C:55:CE:FA:F7:4D:A6:AC Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft Manifest number: 031C Signing time: Fri 25 Apr 2025 00:54:20 +0000 Manifest this update: Fri 25 Apr 2025 00:54:20 +0000 Manifest next update: Fri 02 May 2025 00:54:20 +0000 Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: 2Ye4cFuZ5bH53UqC2Vgulf0gf9JL+tevKXLYQKzLtDA=) 2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: YgVhX2rX+zPQ1467o887/FhnDxbWRkvwY5a2EYtW2qQ=) 3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: 4fhVLBhfu57aeFMCKT6xqBWKFb9Ogft79B2/qJ68TUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235, serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Apr 25 00:54:20 2025 GMT Not After : May 2 00:54:20 2025 GMT Subject: CN=680add3c-e935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:4e:98:0c:45:a9:c8:c0:22:cd:e4:41:71: 90:cd:8b:21:70:25:50:fa:8d:f3:a9:2d:4d:e8:85: b2:23:ce:ac:7e:67:9e:36:22:07:a3:c4:6f:52:56: 8e:ec:93:f1:80:23:6a:71:25:31:f9:d7:f3:e8:a0: 78:85:c3:9e:90:3e:27:80:43:92:5f:75:bf:48:ae: b3:6d:ef:71:83:e9:f5:01:b3:1e:21:2c:1c:8d:11: e6:84:5f:47:88:47:07:34:85:38:2e:d7:f1:8f:68: 9b:dc:0e:e2:71:5e:4b:b5:e4:e8:29:1d:18:18:dd: 43:20:ff:20:aa:08:73:3d:38:c8:ed:8d:4c:0e:e4: 4f:97:76:c0:67:ad:94:b2:b9:5c:22:c5:23:99:11: 9b:65:9a:96:03:23:e5:59:e4:a5:44:08:0e:13:3e: 6b:8c:80:df:83:5b:35:08:fb:65:b7:ed:26:9f:4f: ed:f4:63:e4:48:fc:c0:18:b9:b2:84:6e:71:b5:d0: 54:e8:91:a7:85:1b:67:ee:7f:b8:39:8e:be:c2:a8: e1:ac:34:5e:e0:a1:40:97:1b:ae:4d:f1:9d:d4:eb: 48:ab:ed:77:91:df:ed:51:07:65:ca:f9:ce:f6:8b: 01:e3:3c:02:ac:42:77:70:59:a6:7c:37:d1:d8:07: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:87:E4:4B:BC:89:F9:1D:ED:B0:3F:5C:55:CE:FA:F7:4D:A6:AC X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:1b:3c:e4:61:95:18:77:fa:06:f4:6f:75:5a:03:64:5e:3d: d8:0d:1b:0f:ed:a8:d1:04:e9:cb:59:e9:f8:aa:d1:20:f5:29: 20:13:35:fa:ee:b4:4f:2e:38:41:68:79:0c:1e:02:69:10:ab: 95:b8:c9:5a:fd:a8:ef:4f:ac:ca:74:55:f0:d9:fe:1a:be:40: 0e:42:c1:d4:2b:70:2d:2a:ff:f7:db:03:d3:03:62:b9:3f:c1: 62:31:0c:48:c1:4a:22:8a:83:89:16:18:92:b4:52:d9:dd:49: ea:53:e3:03:36:cf:e1:ee:33:e3:6d:72:5c:1d:a3:fc:47:24: 99:74:da:74:d4:12:57:50:ca:20:7a:50:b4:c0:92:95:93:98: c5:9a:45:4b:ba:db:c1:69:56:7f:a8:bf:2e:04:78:71:79:2a: 2d:4f:f9:84:48:7f:88:38:b0:54:4b:55:df:11:f8:f6:02:9a: 84:cb:71:02:c8:46:e6:b6:c6:76:89:e5:89:65:eb:88:fa:ae: 34:a6:39:87:d4:e1:e7:b6:3d:77:f4:b1:6a:70:76:0e:45:8c: a8:e8:99:d5:53:be:4e:43:53:de:d8:3e:c9:5e:8b:9c:47:00: 51:30:95:97:0e:f4:1c:73:6d:4f:c9:74:73:95:f6:a1:87:ca: 82:5d:d4:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjUwNDI1MDA1NDIwWhcNMjUwNTAyMDA1NDIwWjAYMRYwFAYD VQQDEw02ODBhZGQzYy1lOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPpOmAxFqcjAIs3kQXGQzYshcCVQ+o3zqS1N6IWyI86sfmeeNiIHo8RvUlaO 7JPxgCNqcSUx+dfz6KB4hcOekD4ngEOSX3W/SK6zbe9xg+n1AbMeISwcjRHmhF9H iEcHNIU4Ltfxj2ib3A7icV5LteToKR0YGN1DIP8gqghzPTjI7Y1MDuRPl3bAZ62U srlcIsUjmRGbZZqWAyPlWeSlRAgOEz5rjIDfg1s1CPtlt+0mn0/t9GPkSPzAGLmy hG5xtdBU6JGnhRtn7n+4OY6+wqjhrDRe4KFAlxuuTfGd1OtIq+13kd/tUQdlyvnO 9osB4zwCrEJ3cFmmfDfR2AdE7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPBh+RL vIn5He2wP1xVzvr3TaasMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0 LS1nSVBlMXBlaWJXSS01bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKGzzkYZUYd/oG9G91WgNkXj3YDRsP7ajRBOnLWen4qtEg9SkgEzX6 7rRPLjhBaHkMHgJpEKuVuMla/ajvT6zKdFXw2f4avkAOQsHUK3AtKv/32wPTA2K5 P8FiMQxIwUoiioOJFhiStFLZ3UnqU+MDNs/h7jPjbXJcHaP8RySZdNp01BJXUMog elC0wJKVk5jFmkVLutvBaVZ/qL8uBHhxeSotT/mESH+IOLBUS1XfEfj2ApqEy3EC yEbmtsZ2ieWJZeuI+q40pjmH1OHntj139LFqcHYORYyo6JnVU75OQ1Pe2D7JXouc RwBRMJWXDvQcc21PyXRzlfahh8qCXdT2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:21 2025 by rpki-client