$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: 6UzM9jPJVFsktKlsbrmmSa/WZAU27uDgoeFmQJ8Dbuc= Subject key identifier: 29:28:1A:C6:99:8A:69:73:E4:5E:82:9A:33:E4:9F:AE:15:CE:3E:3B Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 02BF Signing time: Fri 25 Apr 2025 01:13:25 +0000 Manifest this update: Fri 25 Apr 2025 01:13:25 +0000 Manifest next update: Fri 02 May 2025 01:13:25 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: Odi87s1DYSxmYw5WiRL/Gq8A2KS3DwzFeckcrs0fgl0=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: E8vwAczjvQJXB4RuH83+id/dNjBD9Eo3yf3KRRas1Z8=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Apr 25 01:13:25 2025 GMT Not After : May 2 01:13:25 2025 GMT Subject: CN=680ae1b5-de5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:e2:26:55:d0:a1:dc:85:0c:1d:61:fb:d3: 29:b4:8a:0d:79:b3:8b:e0:6e:c8:94:94:f0:a3:3b: 59:c8:db:6f:bb:00:5d:2d:a2:ba:30:ae:2e:c9:03: 1d:85:80:a3:47:2d:74:db:20:ca:e0:e9:3a:22:d0: e1:84:d5:d2:fd:8d:0b:f5:e3:3f:fb:33:82:97:3e: 59:7e:71:e2:56:a8:5d:ad:13:3f:4f:e7:08:6d:dc: ac:6e:29:30:74:35:5b:61:fc:4d:5b:4f:d2:39:b0: 7e:33:4c:90:37:82:8d:df:f4:3a:29:0f:f5:b4:0c: 53:01:d1:a3:15:1b:c2:f6:73:cf:49:3c:ca:ef:b1: 9c:4c:7a:a6:a9:59:00:80:e4:82:ac:5e:5d:26:67: c7:bf:32:b4:13:6e:4a:7f:d4:29:38:84:82:cf:7b: 45:a1:7a:c0:76:4e:41:f2:d2:39:a3:8a:f0:55:4d: 78:43:46:12:e2:be:93:53:5a:26:0a:f3:3f:4a:35: 98:8c:b0:77:65:f3:33:1a:72:15:fe:4f:95:74:86: bd:d9:da:bd:d9:7b:3a:20:07:9c:62:8c:90:06:a4: e7:70:56:db:78:18:22:8b:7b:fc:ed:14:44:8b:81: 23:56:ff:db:2c:20:5f:d5:16:82:77:1c:c8:12:ce: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:1A:C6:99:8A:69:73:E4:5E:82:9A:33:E4:9F:AE:15:CE:3E:3B X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e2:eb:4e:ed:10:11:3f:08:32:85:5b:e9:da:75:e1:6f:f3: 3b:90:f3:d9:bf:6f:b4:be:ce:2c:29:30:10:3c:df:0b:58:5a: 0c:70:c0:55:6b:9b:98:a6:35:9e:b0:05:1e:60:37:a6:f8:ea: 0b:a5:6f:bb:17:30:f7:6a:2b:58:b0:6d:ea:04:31:2c:2f:1f: d8:a8:4b:f9:a4:f2:fb:49:aa:e2:d0:69:7b:ab:12:fe:2e:19: e0:0b:35:23:29:e6:62:f9:4c:fe:a5:20:62:8c:08:82:9f:b1: 82:c3:79:f7:01:4a:85:fa:8b:f7:a6:9f:97:12:72:12:dc:2d: aa:ee:38:01:32:ae:c1:29:d4:e6:f2:80:94:7e:ae:a7:35:e5: 07:8b:6d:35:99:8f:4c:e0:68:e7:84:73:b3:30:e6:00:db:81: bf:7d:19:78:7b:50:d9:cb:c3:33:fc:c0:a6:61:4d:10:21:75: 61:38:40:8c:3f:11:e6:dd:25:38:f0:68:6e:9f:bd:71:36:13: f9:2d:d4:08:59:97:0b:4b:12:1b:ff:cd:a3:20:25:42:c6:d5: 21:b3:36:6b:c0:b3:2e:08:7e:71:42:03:c3:b9:8c:1c:1e:0c: f7:a5:38:ad:0e:5a:dd:8e:31:8b:e6:1b:5c:3f:60:5b:3f:39: df:26:1c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjUwNDI1MDExMzI1WhcNMjUwNTAyMDExMzI1WjAYMRYwFAYD VQQDEw02ODBhZTFiNS1kZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWbiJlXQodyFDB1h+9MptIoNebOL4G7IlJTwoztZyNtvuwBdLaK6MK4uyQMd hYCjRy102yDK4Ok6ItDhhNXS/Y0L9eM/+zOClz5ZfnHiVqhdrRM/T+cIbdysbikw dDVbYfxNW0/SObB+M0yQN4KN3/Q6KQ/1tAxTAdGjFRvC9nPPSTzK77GcTHqmqVkA gOSCrF5dJmfHvzK0E25Kf9QpOISCz3tFoXrAdk5B8tI5o4rwVU14Q0YS4r6TU1om CvM/SjWYjLB3ZfMzGnIV/k+VdIa92dq92Xs6IAecYoyQBqTncFbbeBgii3v87RRE i4EjVv/bLCBf1RaCdxzIEs4djQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkoGsaZ imlz5F6CmjPkn64Vzj47MB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/4utO7RARPwgyhVvp2nXhb/M7kPPZv2+0vs4sKTAQPN8LWFoMcMBV a5uYpjWesAUeYDem+OoLpW+7FzD3aitYsG3qBDEsLx/YqEv5pPL7Sari0Gl7qxL+ LhngCzUjKeZi+Uz+pSBijAiCn7GCw3n3AUqF+ov3pp+XEnIS3C2q7jgBMq7BKdTm 8oCUfq6nNeUHi201mY9M4GjnhHOzMOYA24G/fRl4e1DZy8Mz/MCmYU0QIXVhOECM PxHm3SU48Ghun71xNhP5LdQIWZcLSxIb/82jICVCxtUhszZrwLMuCH5xQgPDuYwc Hgz3pTitDlrdjjGL5htcP2BbPznfJhze -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:38 2025 by rpki-client