$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: 5mrNkoh0szMHgB74hMmSR4yb5btkjpnVrEEuiGKJn0Q= Subject key identifier: B6:D3:32:00:E4:FF:96:FC:F4:93:88:C2:F0:5C:BF:DC:F5:F4:43:3C Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 0421 Signing time: Fri 25 Apr 2025 00:10:23 +0000 Manifest this update: Fri 25 Apr 2025 00:10:23 +0000 Manifest next update: Fri 02 May 2025 00:10:23 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: xtwNn4pwKoWofrxteyaySy8EIVgtnePSFg5H4HspBmM=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Apr 25 00:10:23 2025 GMT Not After : May 2 00:10:23 2025 GMT Subject: CN=680ad2ef-4ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:72:a3:8a:84:0d:2a:ca:ad:9b:71:76:0b: 2c:14:9d:af:3a:9b:fb:23:e7:ed:43:46:75:77:71: 67:69:8c:d5:72:fc:2c:a4:5e:14:e3:f7:4d:22:49: 65:fe:08:70:e1:c8:13:2a:dc:0f:5a:37:c5:be:0a: 3d:22:60:77:85:12:f7:a0:8b:c3:ec:05:4f:8a:8d: 41:8b:73:d2:ce:ab:ba:ac:32:0a:ff:f8:5f:d6:a4: d0:a0:1e:96:70:51:a4:87:c5:68:93:82:02:35:b3: f2:cc:72:9b:52:39:25:87:ff:fd:27:bf:f1:e8:47: 4f:4c:02:82:b9:ee:fd:2e:78:85:e2:65:f4:c1:15: a2:cf:65:00:3e:53:95:d4:4e:a4:77:d8:f1:70:43: 69:8b:29:1b:0f:39:83:ed:29:83:97:f0:47:52:bb: 12:d1:4f:91:f8:92:8e:5b:2f:83:6a:c5:2f:90:a3: a0:35:95:3d:06:0f:8c:23:cd:cb:d0:b3:98:1a:0c: 8d:a5:56:9c:fa:7f:77:6a:15:94:e0:9c:d5:ba:e7: 02:17:1b:d0:d9:a7:c2:64:c9:9d:44:b1:00:9a:cc: a0:b2:75:1b:7d:cc:5c:20:b5:28:05:8c:00:8d:46: 49:72:cd:7a:c0:5c:d0:24:4a:09:7c:08:f0:9c:0f: e6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:32:00:E4:FF:96:FC:F4:93:88:C2:F0:5C:BF:DC:F5:F4:43:3C X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:aa:a6:a0:a7:52:54:ee:61:23:57:28:9f:63:f6:cc:e9:3a: 44:cf:f3:2a:bb:c3:bf:92:4e:be:98:70:35:53:cb:e9:a2:c2: 41:92:e1:53:16:1f:e6:3d:e4:55:7d:92:93:b8:08:06:b9:ce: 7f:ba:4d:da:1b:71:90:1d:73:c1:e3:b3:0c:76:12:97:4d:d3: ee:3f:75:03:9d:10:9d:30:fe:c5:e4:ba:d3:2f:18:e1:19:2a: 3c:34:5d:07:78:0b:7b:ce:6b:db:e5:09:c0:7a:b3:b0:ec:1a: b3:a4:c7:83:e0:c5:6b:ad:88:07:9b:b5:e3:d9:16:6c:cf:71: c1:e5:e5:39:8c:5d:3d:12:b0:dd:c3:e1:1e:07:34:51:87:1f: 03:17:38:30:96:30:d0:b0:24:c7:43:f0:19:54:2d:85:86:56: ff:0f:03:c1:00:fc:40:33:53:a4:17:b0:0a:f7:e7:f2:8d:97: 17:71:1d:ef:88:b2:d5:39:ac:9b:17:8c:ea:3f:19:c7:27:a6: 30:6b:48:62:33:cc:f9:24:96:8f:d8:fc:d1:14:d7:6d:62:5d: 2b:34:1f:e1:92:e1:74:51:60:29:90:4e:f6:01:72:e0:af:e4: 8e:ed:ea:59:7d:8f:0e:7f:ea:3c:a8:86:9b:e9:4f:1f:15:36: 69:26:a0:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwNDI1MDAxMDIzWhcNMjUwNTAyMDAxMDIzWjAYMRYwFAYD VQQDEw02ODBhZDJlZi00ZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ipyo4qEDSrKrZtxdgssFJ2vOpv7I+ftQ0Z1d3FnaYzVcvwspF4U4/dNIkll /ghw4cgTKtwPWjfFvgo9ImB3hRL3oIvD7AVPio1Bi3PSzqu6rDIK//hf1qTQoB6W cFGkh8Vok4ICNbPyzHKbUjklh//9J7/x6EdPTAKCue79LniF4mX0wRWiz2UAPlOV 1E6kd9jxcENpiykbDzmD7SmDl/BHUrsS0U+R+JKOWy+DasUvkKOgNZU9Bg+MI83L 0LOYGgyNpVac+n93ahWU4JzVuucCFxvQ2afCZMmdRLEAmsygsnUbfcxcILUoBYwA jUZJcs16wFzQJEoJfAjwnA/mDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbTMgDk /5b89JOIwvBcv9z19EM8MB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxqqagp1JU7mEjVyifY/bM6TpEz/Mqu8O/kk6+mHA1U8vposJBkuFT Fh/mPeRVfZKTuAgGuc5/uk3aG3GQHXPB47MMdhKXTdPuP3UDnRCdMP7F5LrTLxjh GSo8NF0HeAt7zmvb5QnAerOw7BqzpMeD4MVrrYgHm7Xj2RZsz3HB5eU5jF09ErDd w+EeBzRRhx8DFzgwljDQsCTHQ/AZVC2Fhlb/DwPBAPxAM1OkF7AK9+fyjZcXcR3v iLLVOaybF4zqPxnHJ6Ywa0hiM8z5JJaP2PzRFNdtYl0rNB/hkuF0UWApkE72AXLg r+SO7epZfY8Of+o8qIab6U8fFTZpJqDG -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:40 2025 by rpki-client