$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: teuyhLkcanhbyzdzkoZEXr73bnVK9Gb+tac0U7XSYEs= Subject key identifier: E6:A0:E8:5D:EA:83:38:9E:22:C4:66:4D:67:23:5F:1C:F8:5D:49:B3 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 0884 Signing time: Thu 24 Apr 2025 20:29:35 +0000 Manifest this update: Thu 24 Apr 2025 20:29:34 +0000 Manifest next update: Thu 01 May 2025 20:29:34 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: XxRVJ8Y9M32xmyzQC0Tz5lwxQb39IFdqK9i9bSzfb/Y=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Apr 24 20:29:34 2025 GMT Not After : May 1 20:29:34 2025 GMT Subject: CN=680a9f2f-272e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:b4:9c:4a:ba:65:26:8e:07:41:51:aa:27: 81:12:a8:99:0b:21:8a:f3:38:a7:63:b9:43:b1:a8: ba:15:68:b7:4a:f6:6c:67:f9:70:bb:a7:0a:b2:19: 63:0e:4a:8c:17:5f:a4:c4:3b:00:a0:ce:04:76:0d: 44:7f:db:88:42:87:01:b5:b5:29:d3:bd:e1:0d:57: e7:8d:c7:61:00:59:58:f6:9a:21:91:92:2a:22:c2: 5c:8c:b0:f9:e4:55:b4:da:e4:7b:42:d0:e0:11:24: 66:c7:df:e9:a2:b8:9a:05:f6:29:09:61:31:7e:93: 1c:fd:7b:6e:21:74:65:06:f2:2d:30:7c:8e:a7:2e: ff:72:db:dd:ad:1f:21:5c:3a:eb:46:c4:a9:13:8c: 3a:3e:10:c1:f5:58:de:91:54:44:bd:b7:ef:9f:f8: 8c:b0:e0:e2:58:db:41:97:cd:7b:e7:aa:67:83:24: 2d:56:31:5d:e7:fb:c3:61:6d:42:aa:a7:e5:41:57: 39:de:b4:f2:3d:a3:78:6a:35:28:18:a4:38:4a:12: 72:b9:93:9b:6d:3f:5c:bd:73:4f:f6:b3:f5:e3:04: 97:a0:1f:00:81:94:60:53:30:04:fd:f1:a5:ec:73: ca:97:a1:1f:22:01:de:c5:cb:cd:88:70:ee:31:b7: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A0:E8:5D:EA:83:38:9E:22:C4:66:4D:67:23:5F:1C:F8:5D:49:B3 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:94:b3:13:f9:f5:2a:0b:82:51:6d:1a:f2:3b:46:9f:ba:5f: 60:79:cf:96:cb:29:ed:b0:3a:e1:ef:71:2c:26:74:ec:1c:04: 81:f1:c9:ae:0f:54:d1:59:4f:89:50:7a:bc:a7:f6:48:e5:6f: a4:26:7f:bd:c4:7a:20:ee:8b:98:11:eb:6e:1e:3b:0e:6a:5a: a0:f7:82:c9:91:63:03:2a:47:23:6a:d7:d1:f1:5d:c7:f9:d8: 52:5c:19:5a:10:33:60:7c:46:47:fd:1f:98:1d:96:95:63:93: 87:72:89:c9:3a:a7:74:b0:ca:68:ad:cf:41:4f:90:18:72:3f: ae:93:69:0c:f5:92:84:d9:2f:28:66:70:4d:78:10:a0:a4:db: bf:b7:91:f7:e6:64:d7:2e:f2:35:59:57:f5:ce:3e:4e:65:62: de:fa:8f:55:1d:24:67:93:b1:b7:fc:46:40:4e:be:f4:61:eb: be:b6:00:f5:08:b4:6f:31:47:b8:7e:25:0a:d2:d0:9a:5f:d9: d7:52:08:d4:5a:f1:7e:bb:09:0d:bd:88:6b:ce:58:57:93:c6: ad:a9:47:ba:df:20:8a:c2:03:45:cf:79:e0:99:b7:c5:a5:4b: a4:86:72:74:df:e3:af:25:e7:2c:46:9c:cc:9c:93:b6:e0:ab: c5:ed:7e:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUwNDI0MjAyOTM0WhcNMjUwNTAxMjAyOTM0WjAYMRYwFAYD VQQDEw02ODBhOWYyZi0yNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAO0nEq6ZSaOB0FRqieBEqiZCyGK8zinY7lDsai6FWi3SvZsZ/lwu6cKshlj DkqMF1+kxDsAoM4Edg1Ef9uIQocBtbUp073hDVfnjcdhAFlY9pohkZIqIsJcjLD5 5FW02uR7QtDgESRmx9/poriaBfYpCWExfpMc/XtuIXRlBvItMHyOpy7/ctvdrR8h XDrrRsSpE4w6PhDB9VjekVREvbfvn/iMsODiWNtBl81756pngyQtVjFd5/vDYW1C qqflQVc53rTyPaN4ajUoGKQ4ShJyuZObbT9cvXNP9rP14wSXoB8AgZRgUzAE/fGl 7HPKl6EfIgHexcvNiHDuMbc8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOag6F3q gzieIsRmTWcjXxz4XUmzMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBElLMT+fUqC4JRbRryO0aful9gec+WyyntsDrh73EsJnTsHASB8cmu D1TRWU+JUHq8p/ZI5W+kJn+9xHog7ouYEetuHjsOalqg94LJkWMDKkcjatfR8V3H +dhSXBlaEDNgfEZH/R+YHZaVY5OHconJOqd0sMporc9BT5AYcj+uk2kM9ZKE2S8o ZnBNeBCgpNu/t5H35mTXLvI1WVf1zj5OZWLe+o9VHSRnk7G3/EZATr70Yeu+tgD1 CLRvMUe4fiUK0tCaX9nXUgjUWvF+uwkNvYhrzlhXk8atqUe63yCKwgNFz3ngmbfF pUukhnJ03+OvJecsRpzMnJO24KvF7X6v -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:05 2025 by rpki-client