$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: rGZmJ9l+Zxe4RNfLx2OQB6UjxssTUS6N+9ySSWQ+Tg4= Subject key identifier: C1:44:ED:E6:29:D4:67:AA:BA:AC:81:D0:AC:72:C8:84:09:25:8B:30 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0D81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0D50 Signing time: Thu 24 Apr 2025 17:59:54 +0000 Manifest this update: Thu 24 Apr 2025 17:59:54 +0000 Manifest next update: Thu 01 May 2025 17:59:54 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: jfG0xnKCbi8FaZsuKtATqDP0HNiHeNpEtmnsYaT8Lf0=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 6E3B2E4CB7DD11EFADA41824C4F9AE02.roa (hash: RVQKfSvs+RymaMikyvw4Y5AS7WPGj8lGMKZQ0myGItY=) 4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: WZVD3OFnLCd+Z+EztJUmZvetknrgOnaCpDqtEU+1mk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3457 (0xd81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Apr 24 17:59:54 2025 GMT Not After : May 1 17:59:54 2025 GMT Subject: CN=680a7c1a-03e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:c4:40:33:9e:af:dc:9a:06:52:bd:17:45: 85:30:65:c4:b3:b1:0f:9f:50:e4:e5:f8:1e:e7:cb: 12:08:bd:2d:d8:c2:66:fb:97:89:09:ae:9d:d6:00: 79:e9:ac:be:fa:6b:91:e5:2b:2b:82:98:06:d1:ac: 41:37:af:32:9c:21:4c:a7:e0:aa:ad:de:6c:b0:a9: 89:94:1d:8b:48:73:75:18:16:61:c9:fa:22:eb:59: f3:21:07:a8:ed:c4:6b:37:47:d7:ef:4c:e2:80:09: bd:4a:66:65:21:7c:ba:c0:4d:bc:82:c9:75:33:6b: 79:2b:af:9d:8e:16:d3:8d:be:cb:be:19:59:bc:e7: f0:58:56:d1:bb:ee:a1:7c:f6:0e:6a:8a:7a:0d:32: c2:c9:97:65:60:b0:ed:76:51:a3:f5:67:a2:74:6e: c7:9b:f5:53:6b:27:38:4f:9d:0d:8c:f3:4f:23:32: 66:bf:27:7c:ed:16:14:3c:03:e9:da:22:16:8c:45: ae:a6:88:01:26:5a:1e:d8:7b:f8:c5:35:bc:e1:c9: 6a:7f:d4:50:06:3b:b8:d4:ab:b9:93:b2:ae:06:d8: 64:46:2d:f5:81:45:5c:b8:86:39:1f:2b:40:20:8d: c0:03:b5:ec:96:4f:0e:98:a1:e0:d4:05:5f:da:38: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:ED:E6:29:D4:67:AA:BA:AC:81:D0:AC:72:C8:84:09:25:8B:30 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:22:4e:6c:51:20:37:53:ca:03:b7:a5:03:65:50:d0:34:32: e4:3c:0d:09:0d:2a:7b:a4:0c:b0:71:90:61:d6:37:00:99:9b: e1:20:1d:92:4e:14:f5:43:47:10:56:63:71:30:16:e0:86:9b: df:28:07:4e:a4:c6:de:f7:ae:c5:e5:75:95:76:d3:d4:c1:86: 1e:81:c4:c1:b8:c8:5f:99:b1:13:1c:86:60:dd:91:7e:c2:cb: ea:f3:37:80:36:42:be:3f:78:f8:da:18:3d:38:85:16:73:7f: 2d:52:5f:69:04:a7:b7:0e:f5:4b:00:1d:f1:aa:8f:ff:4d:71: c8:b3:52:86:55:21:e3:a1:a9:d7:9d:f0:4a:1f:5a:2a:60:cf: a0:7f:4f:a6:4a:3a:4e:92:46:1c:e3:e3:9c:c8:8a:14:52:64: c1:96:bd:3e:a2:4f:a8:fe:8c:71:a6:b4:d1:09:9e:e2:8e:86: 8c:1f:7d:f9:b7:aa:bb:60:be:de:f6:a8:57:50:9c:14:95:16: e7:29:d5:16:76:df:97:14:24:b9:a4:2f:9b:89:64:99:ea:5b: 8a:76:05:4c:d0:14:2f:7b:83:fd:54:a3:51:1f:76:1e:79:2f: 1c:af:74:d4:de:70:13:9e:17:60:ff:d6:ba:b9:f7:d4:00:fe: 28:ab:18:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwNDI0MTc1OTU0WhcNMjUwNTAxMTc1OTU0WjAYMRYwFAYD VQQDEw02ODBhN2MxYS0wM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywzEQDOer9yaBlK9F0WFMGXEs7EPn1Dk5fge58sSCL0t2MJm+5eJCa6d1gB5 6ay++muR5SsrgpgG0axBN68ynCFMp+Cqrd5ssKmJlB2LSHN1GBZhyfoi61nzIQeo 7cRrN0fX70zigAm9SmZlIXy6wE28gsl1M2t5K6+djhbTjb7LvhlZvOfwWFbRu+6h fPYOaop6DTLCyZdlYLDtdlGj9WeidG7Hm/VTayc4T50NjPNPIzJmvyd87RYUPAPp 2iIWjEWupogBJloe2Hv4xTW84clqf9RQBju41Ku5k7KuBthkRi31gUVcuIY5HytA II3AA7Xslk8OmKHg1AVf2jiHNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFE7eYp 1GequqyB0KxyyIQJJYswMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJIk5sUSA3U8oDt6UDZVDQNDLkPA0JDSp7pAywcZBh1jcAmZvhIB2S ThT1Q0cQVmNxMBbghpvfKAdOpMbe967F5XWVdtPUwYYegcTBuMhfmbETHIZg3ZF+ wsvq8zeANkK+P3j42hg9OIUWc38tUl9pBKe3DvVLAB3xqo//TXHIs1KGVSHjoanX nfBKH1oqYM+gf0+mSjpOkkYc4+OcyIoUUmTBlr0+ok+o/oxxprTRCZ7ijoaMH335 t6q7YL7e9qhXUJwUlRbnKdUWdt+XFCS5pC+biWSZ6luKdgVM0BQve4P9VKNRH3Ye eS8cr3TU3nATnhdg/9a6uffUAP4oqxhs -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:44 2025 by rpki-client