$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: Qiumbp5doKY7CXx1dIQI/noFqqSYhJzMO1wzVdRhb84= Subject key identifier: 7E:52:E0:E6:31:1E:3F:47:00:FC:52:73:06:44:55:85:F8:07:7E:EB Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: F7 Signing time: Fri 25 Apr 2025 04:20:30 +0000 Manifest this update: Fri 25 Apr 2025 04:20:30 +0000 Manifest next update: Fri 02 May 2025 04:20:30 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: FUlwvxRmRRnIVHoMddK//ANZRRObrneJu10+jaaemJs=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: 0bfhohRWkw+mHnMOok0JegQjrp5R3WBkt6xVLjqYhaM=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: 9uv33qCd79bYBodXMfJmbwWFz6eg4sXVPhBBvtjp6jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Apr 25 04:20:30 2025 GMT Not After : May 2 04:20:30 2025 GMT Subject: CN=680b0d8e-f1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:bb:27:2a:72:b3:69:b6:50:4a:90:1a:59: 95:a4:76:be:af:ea:54:97:98:53:8f:35:fd:d6:06: 98:7a:60:a8:88:32:24:8c:03:c4:e4:6d:a3:46:8b: d1:e1:51:e4:4b:0f:a9:56:0d:a2:6e:bc:a5:d2:b4: 3c:f5:33:ab:6a:08:13:23:66:88:e4:e6:b5:fe:cc: b0:80:94:ef:d9:f1:81:62:04:df:71:1c:f3:19:43: cf:cd:a9:f5:84:51:b4:31:ff:1e:58:06:b4:d4:a0: ce:8a:83:29:27:79:7f:f2:03:f4:b8:57:22:ee:47: b7:e5:a3:7e:dd:ba:22:de:a5:82:0d:c2:7b:fa:6d: 84:f1:ea:ef:51:ad:c3:e6:a0:f5:24:fd:66:d0:48: 49:a7:1f:bd:db:ee:2e:88:b0:47:12:4a:a8:75:53: ec:4a:0d:91:ea:55:01:b5:cd:3c:9c:f8:04:33:04: d7:ae:94:85:27:cb:f9:8d:fa:e7:f9:15:4e:e1:d9: b2:b9:b7:d0:3f:82:04:ce:42:a2:04:fb:3c:e8:ba: db:69:ab:8d:a5:30:3a:45:eb:33:b7:82:34:4c:3e: c8:30:01:5d:60:14:63:62:bd:7d:ba:e8:ae:96:56: df:3b:72:e5:39:80:f0:1c:26:7f:35:bd:b1:24:30: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:52:E0:E6:31:1E:3F:47:00:FC:52:73:06:44:55:85:F8:07:7E:EB X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b2:83:27:3f:1e:24:e7:97:83:55:f4:1c:90:eb:98:0f:6c: b6:a0:7c:a9:2d:58:61:64:c0:22:23:0a:86:87:49:5d:5d:99: 82:cf:3f:1a:07:7b:79:a2:c5:62:f5:14:37:ef:5e:55:f8:fd: 5c:4b:66:a6:fb:de:ad:d2:1a:6f:6a:59:b0:3f:2b:35:0a:0e: 11:ea:68:92:37:f5:6d:0e:5a:a7:c9:02:7d:81:72:80:be:be: 0c:fc:9f:f8:3f:1c:0b:0d:0d:9b:d6:ec:32:f4:d3:a3:95:bc: 4a:27:66:26:b3:df:05:04:46:ef:a6:04:14:af:c0:cb:6f:79: 81:57:2e:fc:28:cd:10:05:b4:3f:83:69:64:c9:b6:18:00:e5: de:50:3a:a3:fb:be:90:94:1a:07:44:54:2c:97:44:c4:b8:aa: c2:a7:eb:b9:8d:07:ea:2b:ff:fb:d5:28:89:fd:bf:2d:db:37: e7:f8:58:65:46:91:7f:68:33:dc:d8:c4:00:84:97:9f:af:73: 2e:ca:07:02:08:c9:74:73:6a:94:c1:47:c1:bf:78:32:8b:71: d6:53:df:d8:9e:8f:13:e2:6d:fc:9f:ed:f0:0b:e9:5d:f2:69: 46:ca:15:bb:d2:29:05:69:ca:31:8f:b2:b9:e3:46:cd:7b:fb: 43:07:d6:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwNDI1MDQyMDMwWhcNMjUwNTAyMDQyMDMwWjAYMRYwFAYD VQQDEw02ODBiMGQ4ZS1mMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK27Jypys2m2UEqQGlmVpHa+r+pUl5hTjzX91gaYemCoiDIkjAPE5G2jRovR 4VHkSw+pVg2ibryl0rQ89TOraggTI2aI5Oa1/sywgJTv2fGBYgTfcRzzGUPPzan1 hFG0Mf8eWAa01KDOioMpJ3l/8gP0uFci7ke35aN+3boi3qWCDcJ7+m2E8ervUa3D 5qD1JP1m0EhJpx+92+4uiLBHEkqodVPsSg2R6lUBtc08nPgEMwTXrpSFJ8v5jfrn +RVO4dmyubfQP4IEzkKiBPs86LrbaauNpTA6Reszt4I0TD7IMAFdYBRjYr19uuiu llbfO3LlOYDwHCZ/Nb2xJDC5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5S4OYx Hj9HAPxScwZEVYX4B37rMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJsoMnPx4k55eDVfQckOuYD2y2oHypLVhhZMAiIwqGh0ldXZmCzz8a B3t5osVi9RQ3715V+P1cS2am+96t0hpvalmwPys1Cg4R6miSN/VtDlqnyQJ9gXKA vr4M/J/4PxwLDQ2b1uwy9NOjlbxKJ2Yms98FBEbvpgQUr8DLb3mBVy78KM0QBbQ/ g2lkybYYAOXeUDqj+76QlBoHRFQsl0TEuKrCp+u5jQfqK//71SiJ/b8t2zfn+Fhl RpF/aDPc2MQAhJefr3MuygcCCMl0c2qUwUfBv3gyi3HWU9/Yno8T4m38n+3wC+ld 8mlGyhW70ikFacoxj7K540bNe/tDB9ZR -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:10 2025 by rpki-client