$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft (raw, json) Hash identifier: vwvHdg7vlw6cYoVEUsJHEF0qHY3BooZjuaxth5/sWvM= Subject key identifier: 35:51:70:1E:37:C9:11:4A:8B:CC:89:D2:AC:19:1B:93:C6:2A:8C:04 Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft Manifest number: 2C Signing time: Fri 25 Apr 2025 06:43:37 +0000 Manifest this update: Fri 25 Apr 2025 06:43:37 +0000 Manifest next update: Fri 02 May 2025 06:43:37 +0000 Files and hashes: 1: U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl (hash: VevoIKh5ocETrOBwWFvLJh5Kv4ohYy7NJws1YmzXhEo=) 2: 30CC092AE53011EFA140503EC4F9AE02.roa (hash: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=) 3: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (hash: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Validity Not Before: Apr 25 06:43:37 2025 GMT Not After : May 2 06:43:37 2025 GMT Subject: CN=680b2f19-b5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:7b:01:8c:c2:2f:6f:4f:15:df:aa:bf:6d: 44:46:bc:a1:27:19:59:90:6e:16:21:ea:c9:83:19: f2:36:38:f8:27:14:c5:5a:f3:d9:a4:11:82:04:ef: 0a:73:19:69:a9:b8:c1:bc:55:4b:99:4c:6b:95:51: 95:59:12:c2:86:5b:9d:83:ca:de:ca:80:05:3b:2c: 11:56:56:f8:1c:43:65:33:ab:0b:6e:a8:47:04:d7: 32:3d:d3:6f:5d:29:4b:17:a3:da:be:69:63:2e:37: c3:2b:e2:2e:91:c4:ee:f9:19:73:cf:7f:52:e9:43: 0e:ac:b0:90:d3:2c:41:42:22:b7:4c:28:d8:eb:74: e8:55:2b:93:47:4d:c2:e7:32:6a:8e:08:87:ff:59: e4:b6:d2:78:1c:04:d8:99:d6:de:a1:b9:24:90:5e: db:21:1e:2d:3c:ef:dc:da:ad:32:99:8b:1d:1d:81: 82:c4:57:7b:fa:5e:e4:18:d9:0e:e6:93:d4:4f:77: 55:f1:60:63:3d:cd:da:26:9a:42:98:03:bd:9d:02: 8d:c1:34:18:14:ca:9f:8b:23:77:f7:74:44:c6:42: eb:4e:77:8d:bb:07:79:69:93:9d:4a:a4:ef:39:40: 0e:da:6d:74:87:22:52:e7:ab:38:f6:7e:9c:df:16: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:51:70:1E:37:C9:11:4A:8B:CC:89:D2:AC:19:1B:93:C6:2A:8C:04 X509v3 Authority Key Identifier: keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:48:ec:93:ee:eb:62:46:8f:60:d4:9c:4a:82:5e:40:a1:2d: 5a:9f:cc:53:67:dd:49:e9:f5:23:62:b5:4e:3b:8a:74:c8:5c: 8a:6b:87:76:86:5e:14:2a:cb:81:77:0a:79:42:25:22:d6:f6: aa:3c:b0:95:42:43:75:85:a3:17:67:f4:de:f7:09:35:89:69: a1:5d:62:32:33:15:3e:01:8b:6b:dd:2e:b2:63:21:fe:eb:e6: 88:46:34:2c:a9:21:33:01:ef:05:ca:01:48:a9:ed:b9:2f:a5: 79:dd:41:9e:bf:85:8a:ed:b0:9b:0a:67:ab:4c:18:53:f1:e8: fe:05:3b:c2:5e:6b:95:3a:e1:5d:01:35:43:65:7f:dc:24:cb: b5:db:d6:94:13:98:c4:48:8a:41:29:44:7f:e4:39:d6:3a:d2: 59:f2:5d:6d:da:ff:28:4b:9c:55:d6:4f:d0:58:33:2f:da:ab: aa:e7:44:fe:ea:ba:c7:12:76:e8:54:36:c8:16:41:95:ad:52: 18:10:61:99:11:00:cc:9e:d0:0b:53:8a:59:f4:74:3b:1b:04: 76:73:74:7f:f2:ee:aa:72:ca:27:22:61:e0:2c:e6:ca:8e:15: e7:07:8e:02:e7:59:60:7a:69:e3:9a:87:60:35:b2:05:0a:b2: 27:34:be:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDgzODExMC8GA1UEBRMoNTNFQzhGNEYxMEE5NDA2NDQ2MjgyM0FBMjk5QkIyODY2 MDBFREYwOTAeFw0yNTA0MjUwNjQzMzdaFw0yNTA1MDIwNjQzMzdaMBgxFjAUBgNV BAMTDTY4MGIyZjE5LWI1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5c3sBjMIvb08V36q/bURGvKEnGVmQbhYh6smDGfI2OPgnFMVa89mkEYIE7wpz GWmpuMG8VUuZTGuVUZVZEsKGW52Dyt7KgAU7LBFWVvgcQ2UzqwtuqEcE1zI9029d KUsXo9q+aWMuN8Mr4i6RxO75GXPPf1LpQw6ssJDTLEFCIrdMKNjrdOhVK5NHTcLn MmqOCIf/WeS20ngcBNiZ1t6huSSQXtshHi0879zarTKZix0dgYLEV3v6XuQY2Q7m k9RPd1XxYGM9zdommkKYA72dAo3BNBgUyp+LI3f3dETGQutOd427B3lpk51KpO85 QA7abXSHIlLnqzj2fpzfFnbTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNVFwHjfJ EUqLzInSrBkbk8YqjAQwHwYDVR0jBBgwFoAUU+yPTxCpQGRGKCOqKZuyhmAO3wkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwODM4LzBEMTk5NTdBRTUy QTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdSR0tDT3FLWnV5aG1BTzN3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS15UFR4Q3BRR1JHS0NPcUtadXlobUFPM3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw ODM4LzBEMTk5NTdBRTUyQTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdS R0tDT3FLWnV5aG1BTzN3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHtI7JPu62JGj2DUnEqCXkChLVqfzFNn3Unp9SNitU47inTIXIprh3aG XhQqy4F3CnlCJSLW9qo8sJVCQ3WFoxdn9N73CTWJaaFdYjIzFT4Bi2vdLrJjIf7r 5ohGNCypITMB7wXKAUip7bkvpXndQZ6/hYrtsJsKZ6tMGFPx6P4FO8Jea5U64V0B NUNlf9wky7Xb1pQTmMRIikEpRH/kOdY60lnyXW3a/yhLnFXWT9BYMy/aq6rnRP7q uscSduhUNsgWQZWtUhgQYZkRAMye0AtTiln0dDsbBHZzdH/y7qpyyiciYeAs5sqO FecHjgLnWWB6aeOah2A1sgUKsic0vgg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:40 2025 by rpki-client