$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: k+Iccqr3wuiP5EA3qFMjlo6ER3fouNX/zSlouxvOJzk= Subject key identifier: 39:2D:EA:74:D3:F6:8B:67:98:A1:1B:31:DC:F1:05:C6:72:20:98:3F Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0C3C Signing time: Thu 24 Apr 2025 18:20:23 +0000 Manifest this update: Thu 24 Apr 2025 18:20:22 +0000 Manifest next update: Thu 01 May 2025 18:20:22 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: 4o9L3bPXmSdZOmiX8JY6mK+wCLKbYyRKN/shGbyi57w=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Apr 24 18:20:22 2025 GMT Not After : May 1 18:20:22 2025 GMT Subject: CN=680a80e7-50d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:de:94:c1:4d:74:46:b4:4a:b3:5e:d3:03: ae:ba:af:64:d5:f1:4d:85:03:0c:11:1f:55:34:64: 51:07:35:4f:b8:6e:2e:3c:78:01:7d:9f:95:1f:e1: 88:f7:94:98:93:a3:5d:6e:51:ef:3e:40:9a:7b:be: 99:1b:cc:c0:8d:f3:7b:1a:8b:0f:aa:9e:34:5b:3e: 5c:e1:33:43:dc:de:c1:4e:45:10:0c:ae:f4:50:db: 49:38:96:a8:14:29:24:4c:ba:26:82:f0:eb:10:1b: bc:66:3b:a9:98:72:f4:48:d8:06:02:6e:2b:7a:20: 25:2a:e4:0c:58:a7:21:47:f1:19:7a:00:54:15:8e: 53:dc:23:16:f5:ef:aa:53:39:41:c6:36:44:aa:e2: f9:34:6d:78:e0:d7:ad:7f:ef:65:d9:7b:ed:b3:f8: 12:28:bb:9c:ce:80:b2:2c:64:57:81:87:4a:a8:a6: 54:8f:3b:2b:ae:31:5c:2e:08:d3:1d:77:88:c5:59: 89:22:d5:ac:56:96:80:19:0a:35:44:bb:95:d9:c2: af:0d:60:0f:25:29:37:2b:0d:1b:99:a0:a0:c5:c6: 38:d6:71:96:eb:39:95:8f:56:bf:0e:be:ac:7e:88: 6c:08:a4:bb:94:42:91:0f:c5:d7:af:32:c8:0c:73: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2D:EA:74:D3:F6:8B:67:98:A1:1B:31:DC:F1:05:C6:72:20:98:3F X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dd:27:9e:51:19:17:76:0b:eb:80:59:2b:eb:8f:9b:6b:23: d4:d8:48:16:61:85:0f:86:71:9a:e5:79:1d:fb:16:58:71:bc: b9:10:19:6e:d4:6e:76:6f:52:f4:bf:bb:74:5f:a6:11:c4:81: a0:d5:41:17:d7:c3:b9:5d:66:c2:a6:70:e7:85:c4:01:2b:82: 0f:60:b7:59:b8:27:30:0e:47:10:b5:bd:0e:55:3c:d8:ce:5d: ff:a8:78:3d:10:57:1b:46:0e:1a:18:da:f2:27:f4:0d:9d:05: bc:33:93:71:02:ae:da:81:89:1f:67:e4:9f:f0:76:31:ab:42: fa:47:63:c4:e3:6d:03:7b:92:55:8b:45:c0:40:36:af:8c:6e: d4:1f:cd:eb:3c:93:63:3c:d3:fd:d4:c0:a6:00:33:79:74:3c: e9:61:dc:1a:39:25:38:21:64:4f:f4:d8:7c:c0:7b:4b:d9:23: 11:1d:99:17:b0:40:e5:3c:8d:f8:10:b5:c7:89:bf:12:ad:09: 88:6d:84:e1:b8:e6:fd:b6:02:c0:f2:37:0d:7c:bf:8a:50:fd: 10:10:fc:23:1c:54:9a:99:3a:ab:f4:6e:d5:d1:d1:9b:d3:61: 3d:9a:34:f8:c1:a3:f3:41:a3:84:07:c3:7f:59:49:d3:01:bc: df:b8:2b:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUwNDI0MTgyMDIyWhcNMjUwNTAxMTgyMDIyWjAYMRYwFAYD VQQDEw02ODBhODBlNy01MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmffelMFNdEa0SrNe0wOuuq9k1fFNhQMMER9VNGRRBzVPuG4uPHgBfZ+VH+GI 95SYk6NdblHvPkCae76ZG8zAjfN7GosPqp40Wz5c4TND3N7BTkUQDK70UNtJOJao FCkkTLomgvDrEBu8ZjupmHL0SNgGAm4reiAlKuQMWKchR/EZegBUFY5T3CMW9e+q UzlBxjZEquL5NG144Netf+9l2Xvts/gSKLuczoCyLGRXgYdKqKZUjzsrrjFcLgjT HXeIxVmJItWsVpaAGQo1RLuV2cKvDWAPJSk3Kw0bmaCgxcY41nGW6zmVj1a/Dr6s fohsCKS7lEKRD8XXrzLIDHP4nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkt6nTT 9otnmKEbMdzxBcZyIJg/MB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM3SeeURkXdgvrgFkr64+bayPU2EgWYYUPhnGa5Xkd+xZYcby5EBlu 1G52b1L0v7t0X6YRxIGg1UEX18O5XWbCpnDnhcQBK4IPYLdZuCcwDkcQtb0OVTzY zl3/qHg9EFcbRg4aGNryJ/QNnQW8M5NxAq7agYkfZ+Sf8HYxq0L6R2PE420De5JV i0XAQDavjG7UH83rPJNjPNP91MCmADN5dDzpYdwaOSU4IWRP9Nh8wHtL2SMRHZkX sEDlPI34ELXHib8SrQmIbYThuOb9tgLA8jcNfL+KUP0QEPwjHFSamTqr9G7V0dGb 02E9mjT4waPzQaOEB8N/WUnTAbzfuCu8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:54 2025 by rpki-client