$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json) Hash identifier: CrWi2wVSr22pEFDOdr4GkTFwi7VuhDb8jcTC4Kp57tg= Subject key identifier: 75:23:FE:7D:F1:F6:A7:24:02:1F:01:D6:9C:A1:C4:51:79:8B:97:70 Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 Certificate issuer: /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft Manifest number: 0672 Signing time: Thu 24 Apr 2025 22:06:55 +0000 Manifest this update: Thu 24 Apr 2025 22:06:54 +0000 Manifest next update: Thu 01 May 2025 22:06:54 +0000 Files and hashes: 1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: LjFa9CnZcY0UUd3NDyegX7mETvfaN/VK4CzbKp1ynUk=) 2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: d5GYDhOIlD2Y6V3aPBFRagLvqFIYFYSveCQyFaynEfU=) 3: 625827FC74D811EB99569279C4F9AE02.roa (hash: nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EBC, serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Validity Not Before: Apr 24 22:06:54 2025 GMT Not After : May 1 22:06:54 2025 GMT Subject: CN=680ab5ff-edf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:0d:ae:1b:ea:b0:f7:52:48:10:d9:70:0d: b2:53:55:06:2b:f7:33:d0:ce:65:d0:12:91:2e:9b: 1c:5b:61:a6:46:41:56:60:71:3d:e6:79:b4:3e:fa: 91:60:4d:f8:71:50:32:db:68:b0:a6:7b:73:21:2a: 20:55:05:eb:f2:e7:1c:60:d5:74:7a:77:95:7d:05: b8:ff:b8:39:8f:f5:a0:88:57:9a:2e:13:0e:38:9d: 8d:b7:47:35:d6:a8:9f:4d:3d:89:1f:26:89:5c:b0: 25:97:f3:82:89:d1:6a:7d:c1:81:4f:f5:cd:f5:5e: 35:c7:68:7c:95:33:d2:f6:e6:83:49:62:cc:61:42: 78:c6:b3:ae:69:46:0c:4f:00:43:85:9c:24:1a:ef: b5:b0:c1:31:23:0e:61:69:b9:9f:1d:eb:16:19:77: 4a:a0:c6:ea:da:50:da:24:c3:34:44:27:e7:be:cd: 09:9b:a3:50:63:ee:55:90:cc:20:88:c3:51:74:b7: d9:9a:a6:e5:ad:83:13:f6:c9:df:57:ea:d5:8e:7f: 8d:61:23:68:7c:63:2d:53:f8:90:e1:a9:21:19:b0: 94:f0:e9:29:9e:e6:bc:2e:3c:8f:36:58:68:40:7e: 4e:48:f9:e2:ab:ad:c4:a1:fe:94:88:54:7a:75:dc: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:23:FE:7D:F1:F6:A7:24:02:1F:01:D6:9C:A1:C4:51:79:8B:97:70 X509v3 Authority Key Identifier: keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d2:04:8e:6a:24:0d:be:74:10:cd:b4:d9:f2:e3:26:0b:33: 2e:f0:1c:4d:17:1f:70:bb:50:a5:a5:b4:fd:4b:82:ae:24:3d: ac:98:e0:e8:4b:89:c2:3a:be:07:e2:71:f5:53:00:d0:65:fc: 17:d6:6b:e6:40:03:31:fa:ec:bf:a5:89:da:38:37:91:36:a5: 37:06:7d:f7:2e:c9:49:4e:c3:a8:76:16:48:72:b6:df:0f:c3: 1b:70:6a:77:fc:ab:67:84:84:af:88:5d:df:f5:e6:b5:d4:48: e3:98:98:6a:49:a1:5a:35:46:27:f6:2a:af:c1:b6:05:59:61: cb:af:6a:88:97:4a:6c:56:27:ec:02:3b:e5:cf:81:26:10:5d: a3:fd:ab:aa:b8:36:1b:6e:52:93:d6:28:44:cf:49:e7:f6:31: ef:f4:d2:d6:66:a8:9e:60:8a:64:37:77:09:3f:20:ff:f8:e7: 41:4b:6c:5b:22:78:b2:db:16:70:37:ed:36:43:de:1f:12:9d: 0a:d1:75:e5:0c:9c:7f:f3:8c:4f:c5:b2:3d:d2:1c:5a:70:c2: 1e:be:71:b7:3f:7e:e6:7a:82:30:df:32:b7:55:c1:ce:ad:a0: 27:c6:ec:2d:e3:4b:7e:a8:f9:30:5b:ea:2e:c6:21:f8:c2:6d: c3:9d:a9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz NEExNzIzMTIwHhcNMjUwNDI0MjIwNjU0WhcNMjUwNTAxMjIwNjU0WjAYMRYwFAYD VQQDEw02ODBhYjVmZi1lZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssUNrhvqsPdSSBDZcA2yU1UGK/cz0M5l0BKRLpscW2GmRkFWYHE95nm0PvqR YE34cVAy22iwpntzISogVQXr8uccYNV0eneVfQW4/7g5j/WgiFeaLhMOOJ2Nt0c1 1qifTT2JHyaJXLAll/OCidFqfcGBT/XN9V41x2h8lTPS9uaDSWLMYUJ4xrOuaUYM TwBDhZwkGu+1sMExIw5habmfHesWGXdKoMbq2lDaJMM0RCfnvs0Jm6NQY+5VkMwg iMNRdLfZmqblrYMT9snfV+rVjn+NYSNofGMtU/iQ4akhGbCU8Okpnua8LjyPNlho QH5OSPniq63Eof6UiFR6ddx0hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUj/n3x 9qckAh8B1pyhxFF5i5dwMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0 RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVCQy8zODgzNDE0ODc0RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExw TzRpYzgtT0dtc0Ewb1hJeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT0gSOaiQNvnQQzbTZ8uMmCzMu8BxNFx9wu1ClpbT9S4KuJD2smODo S4nCOr4H4nH1UwDQZfwX1mvmQAMx+uy/pYnaODeRNqU3Bn33LslJTsOodhZIcrbf D8MbcGp3/KtnhISviF3f9ea11EjjmJhqSaFaNUYn9iqvwbYFWWHLr2qIl0psVifs Ajvlz4EmEF2j/auquDYbblKT1ihEz0nn9jHv9NLWZqieYIpkN3cJPyD/+OdBS2xb Iniy2xZwN+02Q94fEp0K0XXlDJx/84xPxbI90hxacMIevnG3P37meoIw3zK3VcHO raAnxuwt40t+qPkwW+ouxiH4wm3Dnan3 -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:37 2025 by rpki-client