$ rpki-client -vvf rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft File: adcLNjVnbk9zG47xxYVbXi8n84g.mft (raw, json) Hash identifier: 8mRWG//zb5WgqOtrl2GNOrE7XGwmfBe8+3Za68G7kIg= Subject key identifier: D3:8D:59:F6:04:0A:62:AB:8B:AF:2A:00:DC:09:8C:EF:7F:37:4C:17 Authority key identifier: 69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88 Certificate issuer: /CN=A9174B04/serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft Manifest number: 01AA Signing time: Fri 25 Apr 2025 02:26:15 +0000 Manifest this update: Fri 25 Apr 2025 02:26:15 +0000 Manifest next update: Fri 02 May 2025 02:26:15 +0000 Files and hashes: 1: adcLNjVnbk9zG47xxYVbXi8n84g.crl (hash: w9P7qjzcdcLjA/OkS28m9uxepTf3ms4/yzoNe5DJZx8=) 2: 576B4A9298AB11EDBC12AA81C4F9AE02.roa (hash: CSlgFdLGV+e95mn8zR3CSgbH6nggaAqgy4bHPX51po0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174B04, serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388 Validity Not Before: Apr 25 02:26:15 2025 GMT Not After : May 2 02:26:15 2025 GMT Subject: CN=680af2c7-ca69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:a0:01:65:69:4d:29:c2:08:5a:8b:a2:43: 44:83:d7:c6:9a:fe:5b:e2:f6:6a:d3:3f:0f:98:a6: 71:e5:3e:0d:6f:05:20:68:3d:8e:8f:3c:35:a1:3b: 69:71:05:b2:d8:19:1a:56:62:de:aa:19:39:9c:05: 70:4e:31:f4:23:9e:d8:c8:58:11:d3:16:da:68:59: 80:3a:8d:74:be:ab:77:ba:d1:24:55:b8:04:66:da: 36:69:11:16:01:f9:ad:13:6c:8e:0b:4a:e4:9d:33: b5:1e:29:a0:a2:a3:6c:ad:30:61:6f:62:6b:ca:b5: af:ad:73:d0:3c:db:b7:ef:bf:e4:cd:34:26:3a:ae: 8e:1e:11:3a:1a:db:72:dc:75:22:ec:51:6b:1a:0c: 9e:af:83:ea:05:ec:3c:2a:af:a1:cb:c5:7d:12:6f: 83:21:67:fb:d2:2a:ec:20:32:59:37:1c:16:e7:b3: 55:c7:90:37:a9:df:e4:f7:f6:08:78:6b:4f:8c:16: 4a:7c:49:c6:b4:1a:92:4e:7c:4c:f1:af:bc:80:dc: b1:87:7b:81:74:1f:6c:e8:77:eb:b6:4c:52:39:5b: 01:77:e6:ba:f4:8a:a9:35:d5:97:7d:81:54:4f:d4: 4d:bd:a6:c4:e6:28:cd:87:37:0a:79:21:13:85:71: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:59:F6:04:0A:62:AB:8B:AF:2A:00:DC:09:8C:EF:7F:37:4C:17 X509v3 Authority Key Identifier: keyid:69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:65:c9:dc:f2:cf:26:21:25:06:ad:0c:e4:4d:19:b3:56:98: b7:3b:f7:27:e4:b7:90:3e:85:ed:c8:2c:42:55:54:73:31:b4: f5:dc:a3:ce:bb:37:60:db:0e:87:91:43:53:c0:ad:d7:2f:4b: a7:4d:a9:aa:d5:7c:b6:1b:cf:50:96:34:9c:15:22:38:45:da: 51:a9:a8:4a:05:bc:cc:bc:d1:01:87:c2:2c:84:53:a9:1e:bb: 54:0d:16:b4:d8:f3:21:dc:e8:22:d8:ef:8b:84:bd:b6:cb:76: 07:ae:52:ca:35:85:6d:00:45:b6:82:f4:cb:9a:67:4f:3c:b9: b1:cd:9b:ed:5a:ff:8a:72:93:bc:44:64:8c:11:54:c2:d6:3b: 30:c2:49:d2:a8:ce:2c:72:ac:53:3f:9d:69:4d:c3:3c:5a:66: 9d:42:fa:1e:5c:91:76:9b:74:eb:c2:c8:f5:83:80:34:fb:ef: 2d:6a:cf:90:14:e7:6e:0e:ad:f1:67:f2:f5:a3:51:09:6a:44: 22:8c:88:ec:a7:09:cf:1b:ba:86:0d:e0:65:2f:3c:0f:98:46: b6:81:95:2f:d0:28:fc:f8:d9:8f:84:2a:82:d8:ac:7c:88:a4: ad:e4:86:62:53:b9:6d:ff:fa:5d:38:b0:d8:04:3e:02:13:eb: c0:0e:ed:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCMDQxMTAvBgNVBAUTKDY5RDcwQjM2MzU2NzZFNEY3MzFCOEVGMUM1ODU1QjVF MkYyN0YzODgwHhcNMjUwNDI1MDIyNjE1WhcNMjUwNTAyMDIyNjE1WjAYMRYwFAYD VQQDEw02ODBhZjJjNy1jYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UCgAWVpTSnCCFqLokNEg9fGmv5b4vZq0z8PmKZx5T4NbwUgaD2Ojzw1oTtp cQWy2BkaVmLeqhk5nAVwTjH0I57YyFgR0xbaaFmAOo10vqt3utEkVbgEZto2aREW AfmtE2yOC0rknTO1HimgoqNsrTBhb2JryrWvrXPQPNu377/kzTQmOq6OHhE6Gtty 3HUi7FFrGgyer4PqBew8Kq+hy8V9Em+DIWf70irsIDJZNxwW57NVx5A3qd/k9/YI eGtPjBZKfEnGtBqSTnxM8a+8gNyxh3uBdB9s6HfrtkxSOVsBd+a69IqpNdWXfYFU T9RNvabE5ijNhzcKeSEThXE5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNONWfYE CmKri68qANwJjO9/N0wXMB8GA1UdIwQYMBaAFGnXCzY1Z25PcxuO8cWFW14vJ/OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEIwNC8zQzY4OUUwNjk4 QTcxMUVEQjk0REM4N0JDNEY5QUUwMi9hZGNMTmpWbmJrOXpHNDd4eFlWYlhpOG44 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FkY0xOalZuYms5ekc0N3h4WVZiWGk4bjg0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEIwNC8zQzY4OUUwNjk4QTcxMUVEQjk0REM4N0JDNEY5QUUwMi9hZGNMTmpWbmJr OXpHNDd4eFlWYlhpOG44NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCZcnc8s8mISUGrQzkTRmzVpi3O/cn5LeQPoXtyCxCVVRzMbT13KPO uzdg2w6HkUNTwK3XL0unTamq1Xy2G89QljScFSI4RdpRqahKBbzMvNEBh8IshFOp HrtUDRa02PMh3Ogi2O+LhL22y3YHrlLKNYVtAEW2gvTLmmdPPLmxzZvtWv+KcpO8 RGSMEVTC1jswwknSqM4scqxTP51pTcM8WmadQvoeXJF2m3Trwsj1g4A0++8tas+Q FOduDq3xZ/L1o1EJakQijIjspwnPG7qGDeBlLzwPmEa2gZUv0Cj8+NmPhCqC2Kx8 iKSt5IZiU7lt//pdOLDYBD4CE+vADu1t -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:22 2025 by rpki-client