$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: 5sNJz0UxBPfQqIDCizX8QLrqPi4POOwTgTS9+hZzxSg= Subject key identifier: 5F:05:3C:DE:40:BB:40:3F:DC:DE:B2:3B:5C:17:7A:D6:46:51:9C:F3 Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 0182 Signing time: Fri 25 Apr 2025 02:48:26 +0000 Manifest this update: Fri 25 Apr 2025 02:48:25 +0000 Manifest next update: Fri 02 May 2025 02:48:25 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: zKFkL2wvCu8QbI57UWj19ykMzk1O7zr/bKhdqyn+B9s=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: 95TYzLOqwMphVUCVsji8mDMvFKrsCaokY8ysHX5ZUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: Apr 25 02:48:25 2025 GMT Not After : May 2 02:48:25 2025 GMT Subject: CN=680af7fa-cd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:9f:9d:38:63:c8:44:d9:4b:0d:c0:3e:26: 44:2e:0b:31:90:60:79:d0:4f:3c:70:a3:54:7f:08: fd:f5:c0:28:4f:6e:f2:96:f9:ed:82:6b:ba:ef:56: 5d:79:f4:bf:aa:a6:64:69:aa:45:c3:c6:8c:8e:6a: a7:c3:db:7b:67:7b:77:b5:35:52:ef:91:6b:3c:74: d9:88:9e:23:8f:ce:70:bd:52:2c:fb:03:c2:61:c7: 42:fb:f7:00:0b:71:ff:93:48:b4:6e:e5:98:42:e9: 05:3d:33:df:09:c9:68:8e:56:fa:e8:d3:95:6b:01: ea:52:71:b2:f3:f9:10:dd:7f:ba:13:c1:6b:d6:ab: dc:0e:4e:85:dc:f2:96:c6:57:d8:73:fa:8b:ea:34: fd:8b:e1:99:07:87:9e:75:e1:6e:27:2e:98:bd:6a: a0:4b:93:37:63:83:b0:9d:63:77:c3:60:ef:23:95: 31:5b:73:76:92:63:61:6d:82:10:1b:c0:f5:99:a2: 70:cf:21:ca:e3:7b:1a:cd:aa:38:fe:aa:31:84:86: f2:5e:ce:86:37:b4:e6:b5:a8:4c:65:84:a9:cb:de: 9b:2f:9e:54:c5:c0:6c:92:da:0a:d9:c0:7f:dc:82: 63:e4:5f:3e:28:7d:32:b9:6f:ff:38:49:78:bf:2b: de:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:3C:DE:40:BB:40:3F:DC:DE:B2:3B:5C:17:7A:D6:46:51:9C:F3 X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7e:3b:76:35:78:63:8c:5c:7e:4f:5d:c7:06:48:6b:db:51: 9f:b2:b9:0d:7b:c0:f4:70:78:63:ca:9c:60:75:47:0c:a3:c3: 2d:05:23:14:15:73:4e:2b:97:a6:cb:46:72:a6:ce:14:a6:a9: b0:e0:50:c4:b2:6f:63:c0:c4:9c:54:e6:e1:82:fa:f5:a3:6a: 01:e3:2d:d8:ef:e5:f7:ec:0f:a3:0c:b1:d9:93:75:85:9d:41: 6c:ee:ed:39:3e:10:48:5f:55:22:16:af:1f:c1:1e:f2:7e:43: 98:a9:e3:fa:ff:89:04:6b:34:c9:db:ea:c1:c9:23:45:5a:5f: 81:a0:09:04:f0:c5:e4:90:88:5d:fd:26:63:05:4a:ad:d8:e4: 3e:e4:45:6d:ab:a2:d3:d8:02:dd:80:e1:d7:a5:1d:8a:a1:92: 41:4e:a6:2d:31:0e:17:63:28:1e:c3:b2:9c:82:f1:59:e0:3c: 1d:a3:43:b8:d4:0b:9f:2a:61:8d:93:ea:b9:31:03:52:8c:2e: be:42:d6:9b:f4:d8:9d:44:b4:34:a2:a3:d6:ea:e4:23:b7:da: 71:8a:e8:b5:8a:13:a3:eb:35:ce:2b:b6:20:33:60:ff:4a:e8: 2e:3d:5b:9c:3f:b8:1b:4f:27:c0:ff:b9:14:e3:74:a7:00:94: 78:a7:68:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUwNDI1MDI0ODI1WhcNMjUwNTAyMDI0ODI1WjAYMRYwFAYD VQQDEw02ODBhZjdmYS1jZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2afnThjyETZSw3APiZELgsxkGB50E88cKNUfwj99cAoT27ylvntgmu671Zd efS/qqZkaapFw8aMjmqnw9t7Z3t3tTVS75FrPHTZiJ4jj85wvVIs+wPCYcdC+/cA C3H/k0i0buWYQukFPTPfCclojlb66NOVawHqUnGy8/kQ3X+6E8Fr1qvcDk6F3PKW xlfYc/qL6jT9i+GZB4eedeFuJy6YvWqgS5M3Y4OwnWN3w2DvI5UxW3N2kmNhbYIQ G8D1maJwzyHK43sazao4/qoxhIbyXs6GN7TmtahMZYSpy96bL55UxcBsktoK2cB/ 3IJj5F8+KH0yuW//OEl4vyveAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8FPN5A u0A/3N6yO1wXetZGUZzzMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCufjt2NXhjjFx+T13HBkhr21GfsrkNe8D0cHhjypxgdUcMo8MtBSMU FXNOK5emy0Zyps4Upqmw4FDEsm9jwMScVObhgvr1o2oB4y3Y7+X37A+jDLHZk3WF nUFs7u05PhBIX1UiFq8fwR7yfkOYqeP6/4kEazTJ2+rBySNFWl+BoAkE8MXkkIhd /SZjBUqt2OQ+5EVtq6LT2ALdgOHXpR2KoZJBTqYtMQ4XYygew7KcgvFZ4Dwdo0O4 1AufKmGNk+q5MQNSjC6+Qtab9NidRLQ0oqPW6uQjt9pxiui1ihOj6zXOK7YgM2D/ SuguPVucP7gbTyfA/7kU43SnAJR4p2jH -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:45 2025 by rpki-client