$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: zRjY/rL+SoEX7abhg0rGStX1cD/e3vuxB43DJhbHWoE= Subject key identifier: 77:D6:F0:09:5E:FA:B2:04:3E:24:80:BC:99:95:03:C2:45:E8:6D:17 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 031C Signing time: Fri 25 Apr 2025 00:56:22 +0000 Manifest this update: Fri 25 Apr 2025 00:56:21 +0000 Manifest next update: Fri 02 May 2025 00:56:21 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 7/6x4Y2spo9htnkDFoHluhUgcEa0iGXIgZOt+omKeBA=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Apr 25 00:56:21 2025 GMT Not After : May 2 00:56:21 2025 GMT Subject: CN=680addb5-13d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:18:6d:70:14:0d:44:2f:62:f7:82:c9:ec: 6e:4e:9d:40:71:a5:f7:ba:bd:d3:23:39:b7:d8:56: 8d:91:15:6f:95:58:7f:6d:cb:fa:27:94:62:6f:ce: 4b:db:7c:da:70:d2:3c:2d:8a:90:02:60:6b:0d:34: a7:2a:fd:19:6f:9b:0b:b8:25:65:55:6d:2a:27:0f: 79:74:cf:e7:20:bc:f3:6c:02:4a:7f:6d:0d:e6:8d: 0f:93:98:10:19:6e:14:57:57:0e:d2:ac:73:13:a7: 57:54:1c:85:5a:1b:4a:ff:f0:a3:03:1f:67:d3:d8: 6b:52:3b:e0:b7:ff:8c:ff:8e:97:c4:92:99:e1:e2: 42:59:a7:bf:1c:a5:b8:c3:96:c9:11:e5:2b:76:9d: b5:64:88:70:5d:1b:d1:7a:d4:f5:98:1c:c5:23:bd: d2:8a:81:b5:38:74:54:44:56:4e:2f:ed:e2:d0:60: 03:3d:d1:c3:ee:2b:f0:f4:cd:6c:86:02:ce:a2:32: 85:55:42:a3:20:31:3c:ce:b6:d2:b4:6d:f1:d8:85: fc:52:fb:fb:7c:fc:c3:89:14:d4:ae:bc:ba:c3:d6: c2:70:8f:1d:4e:2c:f6:4e:06:a0:3e:60:3a:79:b2: e2:23:35:85:dc:78:f5:ce:c5:4c:b9:4d:d5:49:53: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D6:F0:09:5E:FA:B2:04:3E:24:80:BC:99:95:03:C2:45:E8:6D:17 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a3:71:de:b1:c0:db:db:01:c8:59:0e:f7:12:ef:47:33:b8: f8:ee:9c:93:f8:38:3e:6c:4d:f4:85:35:0e:ab:74:a0:df:06: a1:27:70:f3:9e:c9:fe:e7:67:cd:47:d6:35:52:c3:ae:a9:b6: 9d:28:7e:b9:4a:75:99:61:62:6b:52:29:fb:0c:1c:22:0f:4a: 99:ad:2b:c7:15:51:8b:0b:a6:76:28:d2:da:d5:c7:f9:b2:d0: 5e:ee:d8:00:dc:18:2d:45:bd:a2:f9:6d:ef:c5:8c:c1:18:1b: d6:fa:71:07:6d:11:e6:7c:f8:f1:e4:a9:e4:e1:da:cd:39:30: bd:97:f0:53:4d:23:a5:64:d6:ba:9f:15:68:dd:8a:86:42:15: 6c:98:5f:76:8f:e8:0d:a6:72:c2:9c:cb:31:5f:af:87:fe:f9: 77:90:15:90:9f:c1:ed:94:92:c2:8f:69:a0:e2:a1:1d:3c:8e: a4:d1:50:02:c8:52:47:26:f7:2b:d3:2b:f2:f5:9a:4f:16:c7: 9b:81:b5:5e:bc:0c:98:eb:b1:fc:99:45:d9:b5:21:d3:a7:cd: 30:88:24:77:5d:27:ed:70:22:8f:51:00:88:f5:49:5b:14:bc: bc:b0:73:24:9d:72:8e:4e:8c:ed:4a:56:53:e9:fd:b6:f9:c7: c2:64:ac:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwNDI1MDA1NjIxWhcNMjUwNTAyMDA1NjIxWjAYMRYwFAYD VQQDEw02ODBhZGRiNS0xM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphMYbXAUDUQvYveCyexuTp1AcaX3ur3TIzm32FaNkRVvlVh/bcv6J5Rib85L 23zacNI8LYqQAmBrDTSnKv0Zb5sLuCVlVW0qJw95dM/nILzzbAJKf20N5o0Pk5gQ GW4UV1cO0qxzE6dXVByFWhtK//CjAx9n09hrUjvgt/+M/46XxJKZ4eJCWae/HKW4 w5bJEeUrdp21ZIhwXRvRetT1mBzFI73SioG1OHRURFZOL+3i0GADPdHD7ivw9M1s hgLOojKFVUKjIDE8zrbStG3x2IX8Uvv7fPzDiRTUrry6w9bCcI8dTiz2TgagPmA6 ebLiIzWF3Hj1zsVMuU3VSVPxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfW8Ale +rIEPiSAvJmVA8JF6G0XMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3o3HescDb2wHIWQ73Eu9HM7j47pyT+Dg+bE30hTUOq3Sg3wahJ3Dz nsn+52fNR9Y1UsOuqbadKH65SnWZYWJrUin7DBwiD0qZrSvHFVGLC6Z2KNLa1cf5 stBe7tgA3BgtRb2i+W3vxYzBGBvW+nEHbRHmfPjx5Knk4drNOTC9l/BTTSOlZNa6 nxVo3YqGQhVsmF92j+gNpnLCnMsxX6+H/vl3kBWQn8HtlJLCj2mg4qEdPI6k0VAC yFJHJvcr0yvy9ZpPFsebgbVevAyY67H8mUXZtSHTp80wiCR3XSftcCKPUQCI9Ulb FLy8sHMknXKOToztSlZT6f22+cfCZKxe -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:23 2025 by rpki-client