$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft File: mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json) Hash identifier: 1NKFyx9QBNcmZhylKAT1RItb+ZjUo1UlT3lxhd1Xzzo= Subject key identifier: 4F:14:14:CC:AA:8C:4D:FB:71:83:85:2C:5B:F5:78:6F:11:9C:6F:2D Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 Certificate issuer: /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft Manifest number: 0178 Signing time: Fri 25 Apr 2025 02:53:40 +0000 Manifest this update: Fri 25 Apr 2025 02:53:39 +0000 Manifest next update: Fri 02 May 2025 02:53:39 +0000 Files and hashes: 1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: Jg53CiJ09dBcMG+btJQkCOSOHCSYxp52G9DYYdx0+dk=) 2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Validity Not Before: Apr 25 02:53:39 2025 GMT Not After : May 2 02:53:39 2025 GMT Subject: CN=680af933-8527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:69:98:c4:ca:79:81:66:05:ac:88:e3:5b: 96:80:d5:cd:41:06:2a:3f:8d:64:8c:9d:14:5c:3a: 38:fe:01:fa:e9:6d:da:06:83:93:4a:18:b4:67:b7: ed:5c:07:2e:51:2a:01:3d:bf:f7:db:02:54:48:ff: 0e:69:68:cd:7f:8d:0e:9b:37:28:1d:09:54:80:e4: ce:95:b9:5b:32:0e:fe:05:5c:d9:20:1d:05:77:c1: 6c:dd:46:7f:e7:3d:2f:3b:65:fa:09:5f:c4:89:3c: f0:d1:5a:ca:cb:aa:31:35:ee:9d:25:30:ac:87:b5: 11:32:f3:53:f4:54:1c:2e:41:5b:07:e6:9a:06:13: 29:c1:3d:31:f4:2d:65:7f:aa:db:a8:5f:e9:75:b8: 26:30:45:3b:7f:69:9e:b7:c7:92:15:ee:f1:78:03: c6:c6:09:e9:a0:a1:7c:43:9f:dc:25:78:7e:97:6d: 9b:a3:be:d8:36:ea:8f:a7:c4:6f:4e:2b:98:08:22: d6:69:61:8e:20:bc:b6:83:db:4b:ef:be:8c:e7:aa: 27:cf:b0:38:d3:f7:36:32:4d:f8:f0:77:ac:19:60: f6:ae:ff:4b:c6:1d:25:c1:f7:8e:f2:23:51:59:e2: 64:e5:0b:5a:52:c6:4a:08:d2:93:10:c1:51:57:74: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:14:14:CC:AA:8C:4D:FB:71:83:85:2C:5B:F5:78:6F:11:9C:6F:2D X509v3 Authority Key Identifier: keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:77:d8:cb:9a:12:4a:45:d5:cf:36:30:4a:c1:cf:c3:38:36: ad:db:a3:84:66:30:e7:07:f8:04:9c:f3:4d:00:2e:07:9c:f0: 76:39:b5:90:ac:45:24:25:a7:d7:6d:a0:b4:bd:5a:97:b0:53: 96:18:86:dd:43:11:d1:56:b8:b0:84:4c:f8:81:f3:63:a5:43: 2b:10:14:ed:26:d5:67:be:20:3a:6e:41:02:2b:6a:1d:75:5e: d6:38:2b:52:d3:67:b7:0c:7b:74:af:98:fc:61:7b:20:0a:96: f2:da:78:1b:67:52:bf:d3:2c:64:ce:b9:95:79:1a:e2:1c:e2: 98:9e:b6:4c:0b:84:fb:0a:c7:58:f8:8a:e3:37:54:91:30:c2: 48:24:4f:0d:a2:aa:d1:d6:86:eb:c4:fa:33:04:3c:e8:61:34: 27:08:1a:ff:12:49:75:06:69:46:57:fe:43:06:d9:bc:6e:92: 71:9a:3b:cb:2e:e0:be:ab:8f:47:d2:e8:f2:e1:c4:53:0e:c8: 1b:1b:26:d5:4c:05:fa:6a:eb:3c:0f:d0:15:34:b8:64:eb:8f: b2:0a:86:f6:95:f8:e7:08:0b:e9:67:03:9b:2d:99:16:f7:90: 50:6e:a3:d0:50:83:0a:b8:e7:8a:e7:1a:06:d5:dc:1e:11:00: 0f:a1:1a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzNTkxMTAvBgNVBAUTKDk5OUJBMzc0MTEwMjhBNjJGQjUxNURDRjAyOENEQTJE QzlBQkM5RDEwHhcNMjUwNDI1MDI1MzM5WhcNMjUwNTAyMDI1MzM5WjAYMRYwFAYD VQQDEw02ODBhZjkzMy04NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12FpmMTKeYFmBayI41uWgNXNQQYqP41kjJ0UXDo4/gH66W3aBoOTShi0Z7ft XAcuUSoBPb/32wJUSP8OaWjNf40OmzcoHQlUgOTOlblbMg7+BVzZIB0Fd8Fs3UZ/ 5z0vO2X6CV/EiTzw0VrKy6oxNe6dJTCsh7URMvNT9FQcLkFbB+aaBhMpwT0x9C1l f6rbqF/pdbgmMEU7f2met8eSFe7xeAPGxgnpoKF8Q5/cJXh+l22bo77YNuqPp8Rv TiuYCCLWaWGOILy2g9tL776M56onz7A40/c2Mk348HesGWD2rv9Lxh0lwfeO8iNR WeJk5QtaUsZKCNKTEMFRV3TqJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8UFMyq jE37cYOFLFv1eG8RnG8tMB8GA1UdIwQYMBaAFJmbo3QRAopi+1FdzwKM2i3Jq8nR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDM1OS8zMzVFNjU2MkU0 QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2ltTDdVVjNQQW96YUxjbXJ5 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21adWpkQkVDaW1MN1VWM1BBb3phTGNtcnlkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDM1OS8zMzVFNjU2MkU0QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJFQ2lt TDdVVjNQQW96YUxjbXJ5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsd9jLmhJKRdXPNjBKwc/DODat26OEZjDnB/gEnPNNAC4HnPB2ObWQ rEUkJafXbaC0vVqXsFOWGIbdQxHRVriwhEz4gfNjpUMrEBTtJtVnviA6bkECK2od dV7WOCtS02e3DHt0r5j8YXsgCpby2ngbZ1K/0yxkzrmVeRriHOKYnrZMC4T7CsdY +IrjN1SRMMJIJE8NoqrR1obrxPozBDzoYTQnCBr/Ekl1BmlGV/5DBtm8bpJxmjvL LuC+q49H0ujy4cRTDsgbGybVTAX6aus8D9AVNLhk64+yCob2lfjnCAvpZwObLZkW 95BQbqPQUIMKuOeK5xoG1dweEQAPoRry -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:14 2025 by rpki-client