$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: b9olVPJspLKtEt+02E8yHNGCU5FYtyO/u471RGE9HnI= Subject key identifier: 34:7A:15:CE:59:98:29:CD:56:6D:30:AE:F0:37:B8:68:9F:F7:2D:99 Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: 019D Signing time: Fri 25 Apr 2025 02:32:33 +0000 Manifest this update: Fri 25 Apr 2025 02:32:33 +0000 Manifest next update: Fri 02 May 2025 02:32:33 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: HwMr8yQT5zlbGDIsemLKYNvfWp8Jj3dzxzswBkm1mwk=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: Apr 25 02:32:33 2025 GMT Not After : May 2 02:32:33 2025 GMT Subject: CN=680af441-3c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:5b:0f:d3:db:e4:e0:de:6d:98:d8:d1:76: 28:62:b8:53:bc:b0:ae:31:b9:8b:6d:a2:0b:51:d3: 92:f9:ca:1b:b4:5d:2b:6b:f8:e7:03:09:dc:da:6c: fb:7b:25:70:d0:08:fe:2c:34:fc:c5:3a:68:03:ce: 3e:97:30:c7:eb:9c:ac:6b:24:d9:d8:7d:87:e3:df: b0:31:ad:db:96:84:7b:fa:8f:ba:63:bd:ef:87:4a: 51:a0:58:26:e9:10:9f:07:7d:cc:0e:10:1c:bb:3d: ff:ce:58:2e:f8:fc:bc:be:38:93:72:76:70:e6:11: fe:9a:09:e2:ce:83:20:ba:98:83:81:d5:00:dd:2b: 8d:e0:ed:45:b3:07:fd:1c:f4:74:04:d6:42:eb:b5: 44:68:1d:6a:3f:5d:31:df:1c:fe:d2:ae:a6:c8:36: c5:37:50:97:00:b2:b4:e5:2e:1f:89:8f:b3:c8:0a: e3:58:52:d4:76:de:86:c6:0f:c0:c0:90:80:67:ec: 70:96:9b:22:49:7c:79:e3:48:26:83:2f:07:eb:1a: dc:65:9e:62:ca:8b:b9:d9:82:0a:ff:c7:9f:af:98: a9:4a:30:50:da:88:ad:32:5a:30:7f:5a:b4:d7:e1: d1:98:f7:63:be:18:4a:31:63:19:92:d1:56:b8:26: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7A:15:CE:59:98:29:CD:56:6D:30:AE:F0:37:B8:68:9F:F7:2D:99 X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:09:26:e6:87:5a:45:81:5d:43:fc:c5:91:94:a4:48:ea:0b: f7:35:ca:59:72:41:d2:9f:0b:0a:4e:fb:19:d5:32:3d:19:45: 10:0f:7f:5b:48:cd:b1:c2:cd:d0:3c:4a:75:ed:23:0b:ce:96: 5a:c9:81:a4:8d:8e:f4:d9:c6:c7:52:c3:f7:04:63:5b:18:e0: 48:71:e8:ee:94:51:80:21:44:86:11:80:aa:16:07:60:e5:bd: 5e:89:cc:41:be:7d:64:95:18:66:0f:9b:c0:03:da:3b:a0:1c: 03:10:b6:d5:db:bc:f5:b5:27:2a:57:08:13:4c:9d:ec:99:0c: 39:80:81:04:06:ff:a1:72:d1:51:aa:c3:72:5d:32:70:44:d1: f1:c4:6a:4a:0a:a4:25:2d:5e:f8:ab:ba:52:61:4b:a7:a2:88: 83:95:9d:4b:15:d3:38:2d:1b:6a:cc:d0:84:6b:47:5d:2b:6c: 4c:3d:7c:a0:34:0c:0b:0c:1e:7d:a9:fc:e6:f6:d5:ba:86:9a: c1:2c:ca:6e:9c:2e:45:4b:a2:f6:4d:51:9b:c9:f0:fd:ba:6a: ba:38:a1:39:75:80:49:8c:17:bc:09:ed:bd:61:56:90:8b:55: 7d:34:d3:4b:64:2e:34:14:59:d2:41:46:d6:6b:1c:b8:20:c5: d3:ab:94:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjUwNDI1MDIzMjMzWhcNMjUwNTAyMDIzMjMzWjAYMRYwFAYD VQQDEw02ODBhZjQ0MS0zYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGdbD9Pb5ODebZjY0XYoYrhTvLCuMbmLbaILUdOS+cobtF0ra/jnAwnc2mz7 eyVw0Aj+LDT8xTpoA84+lzDH65ysayTZ2H2H49+wMa3bloR7+o+6Y73vh0pRoFgm 6RCfB33MDhAcuz3/zlgu+Py8vjiTcnZw5hH+mgnizoMgupiDgdUA3SuN4O1Fswf9 HPR0BNZC67VEaB1qP10x3xz+0q6myDbFN1CXALK05S4fiY+zyArjWFLUdt6Gxg/A wJCAZ+xwlpsiSXx540gmgy8H6xrcZZ5iyou52YIK/8efr5ipSjBQ2oitMlowf1q0 1+HRmPdjvhhKMWMZktFWuCbslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR6Fc5Z mCnNVm0wrvA3uGif9y2ZMB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnCSbmh1pFgV1D/MWRlKRI6gv3NcpZckHSnwsKTvsZ1TI9GUUQD39b SM2xws3QPEp17SMLzpZayYGkjY702cbHUsP3BGNbGOBIcejulFGAIUSGEYCqFgdg 5b1eicxBvn1klRhmD5vAA9o7oBwDELbV27z1tScqVwgTTJ3smQw5gIEEBv+hctFR qsNyXTJwRNHxxGpKCqQlLV74q7pSYUunooiDlZ1LFdM4LRtqzNCEa0ddK2xMPXyg NAwLDB59qfzm9tW6hprBLMpunC5FS6L2TVGbyfD9umq6OKE5dYBJjBe8Ce29YVaQ i1V9NNNLZC40FFnSQUbWaxy4IMXTq5TJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:38 2025 by rpki-client