$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: uexIg0uZB72v4RxobFa8O4GUomP+F8rcwnklfcZ7PJk= Subject key identifier: E8:C0:10:29:1A:46:E3:4A:D9:BA:03:B8:F2:FB:76:26:C3:0C:33:CE Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 014F Signing time: Fri 25 Apr 2025 03:18:25 +0000 Manifest this update: Fri 25 Apr 2025 03:18:24 +0000 Manifest next update: Fri 02 May 2025 03:18:24 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: eAk1hrucbsQyZFxCUBiDafTamaRuv0BHPt/IYgifPyg=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: k+tzt38gMzmau0c2rmQWNYzVDcpA9LwBPBlXy9g9UUQ=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: GPm7lgmcPBXG9N85GnRJZzvPZx2wbvxxB75DoAT8PYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Apr 25 03:18:24 2025 GMT Not After : May 2 03:18:24 2025 GMT Subject: CN=680aff00-0059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:3a:06:c9:84:a1:67:1d:f7:61:43:5c:de: 63:46:47:ac:d8:2a:0b:e4:c2:77:3c:ee:7b:9b:1f: be:20:67:43:0c:41:ae:27:b4:b3:72:af:bd:1a:8e: b9:30:a8:e6:76:5f:fd:66:01:17:2a:48:d2:33:0d: 62:a2:55:d3:af:cd:80:33:42:f7:f3:fe:a2:96:64: 20:6a:31:dd:74:29:da:88:b3:5c:49:68:bf:2b:ad: af:28:1b:42:3d:d2:37:fb:58:d0:9d:5c:3b:12:6d: 37:27:b7:ae:42:88:1d:28:d5:e6:5a:9a:c1:33:b6: 51:26:e4:7d:2c:29:ed:a4:ef:6a:7a:03:43:9f:c7: 7c:16:3e:fb:a2:f9:95:33:81:c0:7e:49:b0:63:ee: 4d:68:14:6a:29:3f:98:2c:5a:99:b7:ae:24:b2:cc: 4f:7d:31:7a:97:e1:c2:d6:25:6b:bc:5b:43:80:7b: d9:c3:7f:d1:bd:77:61:ea:71:12:8e:44:77:77:7c: 80:aa:79:d7:93:58:18:b9:61:0a:4a:9a:64:7b:a0: b9:4f:12:ac:3b:d6:a2:62:80:c2:86:5a:70:8c:8a: 3e:03:e6:26:20:60:79:64:c3:cc:4d:fa:b2:e5:76: 21:d3:f7:af:a9:ad:eb:56:cf:29:4e:76:59:3c:df: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C0:10:29:1A:46:E3:4A:D9:BA:03:B8:F2:FB:76:26:C3:0C:33:CE X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:29:89:ad:5a:59:75:dc:ea:b7:50:f1:2a:fa:c6:e8:d2:f4: b8:1c:ca:0a:9a:88:a1:b6:3a:c4:a0:b0:91:5b:73:b0:fe:09: 22:c2:de:a9:b8:f0:46:7c:17:3e:80:c5:05:b3:3f:56:82:11: 5a:64:4d:01:40:0c:90:d3:fa:af:b5:67:2a:fb:9f:4a:f8:50: f0:8e:c6:24:d3:1d:94:71:72:08:5b:c8:ff:f0:a2:40:60:d8: d8:0b:96:de:a7:a1:cd:4b:f4:3c:4d:f2:3c:a0:f6:bf:a4:a3: d7:c4:bf:98:c7:aa:7e:09:65:0a:8f:79:ef:70:47:3d:72:b4: 0e:b3:c3:33:79:af:f6:04:c8:85:c2:02:3e:a9:a0:40:d9:94: 96:0f:13:74:e0:71:27:cb:03:a8:d5:80:65:82:11:c5:29:08: 6c:9a:6c:7b:39:e1:77:d0:aa:fd:c7:bf:f3:e4:93:1b:d9:86: 1e:33:ac:d1:2c:8b:0f:4f:00:3c:8c:e8:fe:04:7e:63:5b:6b: 39:b8:7d:66:db:59:69:93:21:9d:35:1a:82:74:02:30:32:32: 8c:29:ea:a2:9f:34:ca:f7:3b:c3:08:1a:b7:67:d8:d8:70:2b: e2:fa:5a:e2:9d:8a:f1:ea:21:84:e7:c2:69:08:5b:be:bc:5e: dc:97:34:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUwNDI1MDMxODI0WhcNMjUwNTAyMDMxODI0WjAYMRYwFAYD VQQDEw02ODBhZmYwMC0wMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrE6BsmEoWcd92FDXN5jRkes2CoL5MJ3PO57mx++IGdDDEGuJ7Szcq+9Go65 MKjmdl/9ZgEXKkjSMw1iolXTr82AM0L38/6ilmQgajHddCnaiLNcSWi/K62vKBtC PdI3+1jQnVw7Em03J7euQogdKNXmWprBM7ZRJuR9LCntpO9qegNDn8d8Fj77ovmV M4HAfkmwY+5NaBRqKT+YLFqZt64kssxPfTF6l+HC1iVrvFtDgHvZw3/RvXdh6nES jkR3d3yAqnnXk1gYuWEKSppke6C5TxKsO9aiYoDChlpwjIo+A+YmIGB5ZMPMTfqy 5XYh0/evqa3rVs8pTnZZPN8hpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjAECka RuNK2boDuPL7dibDDDPOMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIKYmtWll13Oq3UPEq+sbo0vS4HMoKmoihtjrEoLCRW3Ow/gkiwt6p uPBGfBc+gMUFsz9WghFaZE0BQAyQ0/qvtWcq+59K+FDwjsYk0x2UcXIIW8j/8KJA YNjYC5bep6HNS/Q8TfI8oPa/pKPXxL+Yx6p+CWUKj3nvcEc9crQOs8Mzea/2BMiF wgI+qaBA2ZSWDxN04HEnywOo1YBlghHFKQhsmmx7OeF30Kr9x7/z5JMb2YYeM6zR LIsPTwA8jOj+BH5jW2s5uH1m21lpkyGdNRqCdAIwMjKMKeqinzTK9zvDCBq3Z9jY cCvi+lrinYrx6iGE58JpCFu+vF7clzSR -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:59 2025 by rpki-client