$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json) Hash identifier: bqG22umuth/48a8mTvQXpuA4yjDHLkB0w6+99Yw9994= Subject key identifier: EB:E4:F0:7F:C6:E7:2A:BC:64:49:09:60:28:1E:06:61:AF:29:AF:54 Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft Manifest number: 0BE7 Signing time: Thu 24 Apr 2025 18:42:09 +0000 Manifest this update: Thu 24 Apr 2025 18:42:09 +0000 Manifest next update: Thu 01 May 2025 18:42:09 +0000 Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: xbB9qdhbsGHaiM4eJXK+bDfBNb74R6tYoZlK3Avoc5c=) 2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: t3eros23i5jos6SsnfnITnVUwueCJZ09uU5hK4xc9ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Apr 24 18:42:09 2025 GMT Not After : May 1 18:42:09 2025 GMT Subject: CN=680a8601-c4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:0c:01:4c:ac:52:75:81:1a:db:13:b4:6a: 78:14:c2:f2:a1:be:d7:b7:93:12:9e:a5:50:38:7e: ac:15:e8:3a:c1:cf:36:38:9d:f4:e6:9c:99:f3:fa: dc:53:fe:54:36:d1:02:11:e3:7d:c5:49:0a:82:4e: f2:17:30:d1:b1:51:86:a1:3c:7a:ac:ca:c1:a6:85: 47:90:ab:69:4d:91:bd:0b:a9:78:e9:00:6f:21:d0: 5c:50:1d:c7:de:83:40:16:be:35:01:98:d4:94:30: 81:bf:f5:34:89:13:cf:4c:19:39:27:03:04:49:bf: 63:46:13:bd:4c:20:8b:65:ef:46:87:7f:dc:90:26: fc:5f:54:cc:b5:0d:d3:1b:cb:a5:45:3a:84:e8:55: ad:25:d9:f5:a4:f0:5f:f2:8c:b0:70:39:70:00:c5: bf:63:9c:f0:d3:ee:a6:b7:28:4e:e8:43:c1:34:c8: 28:28:d2:52:28:7a:ef:9c:cc:a5:f6:bd:d3:21:2c: d2:85:29:ec:29:9d:70:26:7a:ba:fe:20:2a:a7:0f: eb:b0:88:60:c4:f2:53:02:3d:a3:a2:95:13:df:63: f8:57:b3:56:86:ec:b6:42:39:bc:ce:da:2e:82:06: ee:ac:ed:c4:7e:97:dc:60:ff:61:1b:64:a5:9e:66: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E4:F0:7F:C6:E7:2A:BC:64:49:09:60:28:1E:06:61:AF:29:AF:54 X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cd:16:e5:4c:37:05:91:19:09:92:c8:e6:71:1e:ac:c2:ae: df:e1:c2:9f:fe:28:dc:19:6f:97:1c:7d:b8:ed:08:82:54:40: fc:03:6b:da:b3:bd:4a:6e:63:ec:8a:f3:80:66:ea:b6:a8:c2: bf:50:10:83:00:29:b6:ea:73:a6:d4:46:93:f9:6c:f9:fb:1c: 52:0d:33:89:7e:35:07:9c:8b:f0:56:42:71:61:66:21:81:c0: 0f:09:a6:3c:ce:45:b1:ff:e9:12:2a:b3:5a:bc:af:6e:6e:ed: 2a:e3:e0:29:19:e3:a8:65:a0:5f:28:5d:09:0a:18:32:64:fe: f8:78:c2:f5:8a:7e:1a:43:45:16:6c:12:d6:12:c2:f8:71:13: 48:33:e4:f7:eb:1f:aa:c6:18:c7:51:8e:ac:1c:af:98:eb:d7: 8a:52:bc:91:3c:fe:73:29:84:fb:cb:4c:4c:41:83:ef:54:0b: 0e:7e:a5:81:00:57:e0:8a:cc:10:5d:b7:3f:95:3c:22:0f:12: 1e:a9:8d:77:3b:42:39:a2:14:9d:5d:70:4b:b1:58:86:72:85: 2a:b4:e3:07:0d:3f:c9:6f:eb:b5:f3:b1:54:8e:c0:b2:1e:ff: c7:6f:a6:e3:56:f5:c9:25:4f:04:71:cc:49:e6:08:86:d5:bf: b0:3e:9b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjUwNDI0MTg0MjA5WhcNMjUwNTAxMTg0MjA5WjAYMRYwFAYD VQQDEw02ODBhODYwMS1jNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VAMAUysUnWBGtsTtGp4FMLyob7Xt5MSnqVQOH6sFeg6wc82OJ305pyZ8/rc U/5UNtECEeN9xUkKgk7yFzDRsVGGoTx6rMrBpoVHkKtpTZG9C6l46QBvIdBcUB3H 3oNAFr41AZjUlDCBv/U0iRPPTBk5JwMESb9jRhO9TCCLZe9Gh3/ckCb8X1TMtQ3T G8ulRTqE6FWtJdn1pPBf8oywcDlwAMW/Y5zw0+6mtyhO6EPBNMgoKNJSKHrvnMyl 9r3TISzShSnsKZ1wJnq6/iAqpw/rsIhgxPJTAj2jopUT32P4V7NWhuy2Qjm8ztou ggburO3EfpfcYP9hG2SlnmYSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvk8H/G 5yq8ZEkJYCgeBmGvKa9UMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzI4NS9GRTdGNjM3QzE0MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQz OU1KMEZUOTFOdlBmaWZsSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzRblTDcFkRkJksjmcR6swq7f4cKf/ijcGW+XHH247QiCVED8A2va s71KbmPsivOAZuq2qMK/UBCDACm26nOm1EaT+Wz5+xxSDTOJfjUHnIvwVkJxYWYh gcAPCaY8zkWx/+kSKrNavK9ubu0q4+ApGeOoZaBfKF0JChgyZP74eML1in4aQ0UW bBLWEsL4cRNIM+T36x+qxhjHUY6sHK+Y69eKUryRPP5zKYT7y0xMQYPvVAsOfqWB AFfgiswQXbc/lTwiDxIeqY13O0I5ohSdXXBLsViGcoUqtOMHDT/Jb+u187FUjsCy Hv/Hb6bjVvXJJU8EccxJ5giG1b+wPptf -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:22 2025 by rpki-client