$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: DEBrayQgzU+MjY3Oclz+HQiAq/rTpL1L/JSuRVIlDbg= Subject key identifier: 28:0A:E4:8B:7D:80:60:A5:45:18:84:5B:4D:43:82:6E:9F:70:20:91 Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 0434 Signing time: Fri 25 Apr 2025 00:05:02 +0000 Manifest this update: Fri 25 Apr 2025 00:05:02 +0000 Manifest next update: Fri 02 May 2025 00:05:02 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: Z/PPCTs7QsGS+LVLZjKUe+MYQWGtafsZELQfD8w47Bk=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: Apr 25 00:05:02 2025 GMT Not After : May 2 00:05:02 2025 GMT Subject: CN=680ad1ae-fdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:d0:3e:e6:58:55:68:0e:de:9d:f7:b1:3c: 49:db:24:6e:c2:3c:92:ff:9f:d3:a1:bd:93:9e:83: 0a:24:e3:2d:0f:86:cc:00:50:06:3c:87:a6:ec:23: 3e:6b:96:b3:9c:39:cd:e7:94:c1:2f:6c:bf:24:df: b6:d8:e0:fd:45:30:60:11:cb:99:63:d2:fe:f0:ba: 80:71:d6:3b:f4:8a:62:47:aa:57:bc:13:94:78:e9: 19:ad:2b:a2:91:85:17:d2:b5:84:d5:28:9e:50:1b: f5:18:04:0d:eb:12:ba:a9:dd:0f:cb:d4:71:6f:44: 10:ce:79:0c:a3:fc:4b:5c:5f:f2:b3:94:04:75:7d: d1:7f:74:d1:de:59:3b:0b:78:e0:d3:bf:91:fb:48: 17:95:34:4e:f5:aa:68:2d:fb:3d:36:ef:7f:a2:f3: 25:3a:4b:1a:22:07:f4:3e:1f:ab:f8:7e:14:fb:8e: 7e:9d:3a:fe:c9:0f:47:36:19:63:10:dd:c5:2a:ab: 57:a7:07:ea:5d:c0:58:10:19:d4:29:37:7a:03:47: fb:8e:92:39:d2:92:a6:c5:bf:cb:45:01:7d:cf:d2: 5c:3f:6d:39:bc:f7:d0:16:f4:c8:c9:11:90:f5:cd: b1:c0:eb:13:b4:42:e8:58:bb:65:ad:d0:11:af:44: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0A:E4:8B:7D:80:60:A5:45:18:84:5B:4D:43:82:6E:9F:70:20:91 X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c1:1a:6f:8d:7a:a6:d9:40:c0:21:1f:75:d8:a2:32:cc:a1: a3:ce:cb:c0:05:ec:bb:d5:b8:70:31:24:ea:34:da:df:c4:82: 12:71:d8:65:e2:ee:b9:fb:ea:26:80:58:1e:fc:2a:0f:78:44: b1:9d:ca:f6:42:98:10:31:a7:11:48:36:2e:7e:3a:c5:5b:49: 42:cd:e5:99:d4:67:a0:4b:3a:f0:2d:74:9a:c1:b2:00:5d:6e: aa:5a:c6:91:e9:1b:77:5d:64:10:41:49:31:d2:04:b4:cc:ad: 17:b6:74:21:b1:51:62:25:49:4a:8e:0d:6f:b4:50:1c:08:c5: 54:bf:3a:84:97:db:7e:55:bc:10:ee:f2:af:4b:dc:9d:3e:ed: 15:63:bb:d1:27:50:2b:bf:ba:a6:84:4f:7b:b0:45:54:8e:2c: 89:b9:72:0b:36:79:b7:c0:59:c5:1b:d4:89:7f:ae:51:c0:81: 97:9d:ee:05:65:ab:7b:cd:0f:f0:ff:89:5d:5b:04:c3:26:ef: 31:21:56:22:09:31:52:06:cc:85:03:72:b4:5c:2b:8a:39:c5: 07:5d:61:3c:17:81:6e:bb:9a:17:38:54:ae:99:99:cc:f6:6b: 09:35:12:93:21:8d:14:4c:ab:e2:33:5b:d6:68:0b:6b:ae:de: b4:35:c8:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUwNDI1MDAwNTAyWhcNMjUwNTAyMDAwNTAyWjAYMRYwFAYD VQQDEw02ODBhZDFhZS1mZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sTQPuZYVWgO3p33sTxJ2yRuwjyS/5/Tob2TnoMKJOMtD4bMAFAGPIem7CM+ a5aznDnN55TBL2y/JN+22OD9RTBgEcuZY9L+8LqAcdY79IpiR6pXvBOUeOkZrSui kYUX0rWE1SieUBv1GAQN6xK6qd0Py9Rxb0QQznkMo/xLXF/ys5QEdX3Rf3TR3lk7 C3jg07+R+0gXlTRO9apoLfs9Nu9/ovMlOksaIgf0Ph+r+H4U+45+nTr+yQ9HNhlj EN3FKqtXpwfqXcBYEBnUKTd6A0f7jpI50pKmxb/LRQF9z9JcP205vPfQFvTIyRGQ 9c2xwOsTtELoWLtlrdARr0TY5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgK5It9 gGClRRiEW01Dgm6fcCCRMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7wRpvjXqm2UDAIR912KIyzKGjzsvABey71bhwMSTqNNrfxIIScdhl 4u65++omgFge/CoPeESxncr2QpgQMacRSDYufjrFW0lCzeWZ1GegSzrwLXSawbIA XW6qWsaR6Rt3XWQQQUkx0gS0zK0XtnQhsVFiJUlKjg1vtFAcCMVUvzqEl9t+VbwQ 7vKvS9ydPu0VY7vRJ1Arv7qmhE97sEVUjiyJuXILNnm3wFnFG9SJf65RwIGXne4F Zat7zQ/w/4ldWwTDJu8xIVYiCTFSBsyFA3K0XCuKOcUHXWE8F4Fuu5oXOFSumZnM 9msJNRKTIY0UTKviM1vWaAtrrt60Nci0 -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:34 2025 by rpki-client