$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft File: plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json) Hash identifier: gaPEO5fI/U9s6d3a46FTsW7p+Pv5fk0tZ8CIjV+BZOw= Subject key identifier: 4F:A5:D1:77:BA:A8:9C:32:02:34:D3:1A:76:8E:EE:CD:B3:DD:2E:31 Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 Certificate issuer: /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft Manifest number: 043A Signing time: Fri 25 Apr 2025 00:02:33 +0000 Manifest this update: Fri 25 Apr 2025 00:02:32 +0000 Manifest next update: Fri 02 May 2025 00:02:32 +0000 Files and hashes: 1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: Pf2J3RtyIwe0n9RXIJMwhJUPNHABJYvQ7KL+P0YBczA=) 2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Validity Not Before: Apr 25 00:02:32 2025 GMT Not After : May 2 00:02:32 2025 GMT Subject: CN=680ad119-99d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:24:50:5b:dc:5d:96:62:f8:e0:cb:89:44: f7:77:4e:f3:0e:1c:fa:aa:47:49:18:d9:c8:59:2e: 57:84:9e:b7:d4:88:a4:3e:92:63:db:72:b4:71:39: 2e:57:b9:fa:34:40:ad:bc:09:24:47:c5:c5:fd:40: 4c:62:13:53:0d:72:7e:58:c4:0b:25:64:ef:3a:d8: fe:f6:c9:81:5a:f6:ce:e0:89:72:38:e4:3a:e1:a0: 91:a1:5d:e3:77:38:75:44:78:38:de:78:e3:ee:0d: 68:46:9b:a9:4b:4d:50:d7:93:9b:4b:6d:65:78:4f: 29:e4:08:58:28:28:02:40:49:0e:16:b0:c2:e3:da: 5c:52:12:a8:a3:1a:60:ac:0d:55:ec:86:6c:78:03: b4:6e:66:ea:6d:6a:65:09:2b:29:40:34:c5:ac:c0: 32:88:ff:e7:9d:15:49:67:55:c8:cf:a5:0e:c1:a4: 16:0b:10:bb:a7:00:f6:d8:b1:29:18:b8:4c:1d:fb: 7f:89:39:74:f5:73:60:2c:63:48:14:15:31:a5:a5: 72:24:fc:60:f4:11:6d:04:ce:45:cf:57:61:48:bc: 41:2a:99:53:b3:b3:37:33:23:4f:83:c7:af:bd:69: 27:51:f5:65:74:65:58:d3:0c:3f:17:dd:36:2e:c9: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:D1:77:BA:A8:9C:32:02:34:D3:1A:76:8E:EE:CD:B3:DD:2E:31 X509v3 Authority Key Identifier: keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8b:12:d8:9f:b0:b6:05:ee:2a:d6:39:8f:bc:3b:da:18:cb: 57:0f:5a:0f:e3:0f:53:b0:fc:93:b2:67:88:a1:8d:16:70:10: 9d:93:21:79:dd:a7:8c:fd:4d:09:52:90:5f:dd:8a:e2:b9:13: e5:0b:5f:da:7d:c7:e9:a0:66:47:98:22:94:9b:18:6e:6c:fc: 19:87:74:79:ec:9f:b4:40:34:a0:cc:e2:7e:64:62:e8:10:47: 3a:c8:d7:65:46:58:b0:0f:d8:e2:ea:dc:44:7b:bd:4d:f2:78: 27:f7:03:b6:18:8b:d0:56:dc:6c:10:b9:f0:d9:f4:45:e3:f0: e0:54:fc:9f:d2:9f:a9:cc:f2:65:9d:97:89:16:d6:e8:fd:ac: 85:fb:10:39:9b:bb:c3:40:36:68:96:03:6e:b1:9f:5c:64:7b: d4:cd:66:ae:c9:f7:8e:b0:9c:07:50:97:b3:09:7d:6f:80:34: 1e:eb:6a:a0:49:e1:de:4f:ee:7d:2f:4f:6e:5c:5a:be:ee:ac: ed:3d:9c:63:73:c0:d7:97:e4:c8:d0:41:23:01:90:ba:93:75: 38:38:91:a9:a5:3d:0a:39:86:12:8e:af:80:86:72:5c:74:56: 0d:af:94:f0:82:26:71:58:d2:75:76:78:4e:99:88:cf:32:05: 18:11:e4:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBFQjUxMTAvBgNVBAUTKEE2NTAyOTBBQkM3NDE5RjQyMEU0MDFCQkIzQTQ0RDA4 MTNEMUYxNjkwHhcNMjUwNDI1MDAwMjMyWhcNMjUwNTAyMDAwMjMyWjAYMRYwFAYD VQQDEw02ODBhZDExOS05OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hQkUFvcXZZi+ODLiUT3d07zDhz6qkdJGNnIWS5XhJ631IikPpJj23K0cTku V7n6NECtvAkkR8XF/UBMYhNTDXJ+WMQLJWTvOtj+9smBWvbO4IlyOOQ64aCRoV3j dzh1RHg43njj7g1oRpupS01Q15ObS21leE8p5AhYKCgCQEkOFrDC49pcUhKooxpg rA1V7IZseAO0bmbqbWplCSspQDTFrMAyiP/nnRVJZ1XIz6UOwaQWCxC7pwD22LEp GLhMHft/iTl09XNgLGNIFBUxpaVyJPxg9BFtBM5Fz1dhSLxBKplTs7M3MyNPg8ev vWknUfVldGVY0ww/F902LsmfPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+l0Xe6 qJwyAjTTGnaO7s2z3S4xMB8GA1UdIwQYMBaAFKZQKQq8dBn0IOQBu7OkTQgT0fFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEVCNS9FNEVFOTJDRTU1 RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdmUWc1QUc3czZSTkNCUFI4 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsQXBDcngwR2ZRZzVBRzdzNlJOQ0JQUjhXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEVCNS9FNEVFOTJDRTU1RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdm UWc1QUc3czZSTkNCUFI4V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeixLYn7C2Be4q1jmPvDvaGMtXD1oP4w9TsPyTsmeIoY0WcBCdkyF5 3aeM/U0JUpBf3YriuRPlC1/afcfpoGZHmCKUmxhubPwZh3R57J+0QDSgzOJ+ZGLo EEc6yNdlRliwD9ji6txEe71N8ngn9wO2GIvQVtxsELnw2fRF4/DgVPyf0p+pzPJl nZeJFtbo/ayF+xA5m7vDQDZolgNusZ9cZHvUzWauyfeOsJwHUJezCX1vgDQe62qg SeHeT+59L09uXFq+7qztPZxjc8DXl+TI0EEjAZC6k3U4OJGppT0KOYYSjq+AhnJc dFYNr5TwgiZxWNJ1dnhOmYjPMgUYEeQl -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:18 2025 by rpki-client