$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft File: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json) Hash identifier: 6MDvjD/ffsGbzb77WI/m88M0hSqA7gpJZ4mRkPg1ZOI= Subject key identifier: 1C:10:89:48:42:1B:4B:6E:BC:4D:BD:A5:4D:99:7D:13:22:45:8E:EB Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Certificate serial: 036F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft Manifest number: 035B Signing time: Mon 21 Apr 2025 00:39:21 +0000 Manifest this update: Mon 21 Apr 2025 00:39:21 +0000 Manifest next update: Mon 28 Apr 2025 00:39:21 +0000 Files and hashes: 1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: 3eTEZc2YeU0e4b6nluDkFaNKTR0WtCoA1Srs7mdItE0=) 2: 9D5E76267A5B11EFAB107D22C4F9AE02.roa (hash: 9EpF1KSRDUTf9NcUi/a70PIVjE8UhhzWQZ3BPoHFE5E=) 3: AF8F74D07A5B11EFAD45A522C4F9AE02.roa (hash: vRjukEW4CGsNZU7R18s79FlIRs3QIG4fzBAqDqQhjVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DEF, serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Validity Not Before: Apr 21 00:39:21 2025 GMT Not After : Apr 28 00:39:21 2025 GMT Subject: CN=680593b9-9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:6d:a0:17:da:02:7e:b3:a7:d7:75:3e:00: f1:a0:41:e8:ea:5d:b7:62:f1:60:ce:e7:2e:00:e2: 5f:a8:0c:64:52:f3:a3:a0:2d:94:9b:aa:80:74:5d: d4:6a:03:d0:c6:16:3c:d9:d3:e6:21:2c:44:0c:b2: 92:b0:af:6b:f3:3b:d2:7f:40:da:7e:63:d3:e0:98: cd:71:92:d6:99:ac:4c:52:14:39:5d:68:5a:c3:87: 48:77:e4:f7:7f:52:72:99:d9:0b:2e:05:da:ec:f1: 4a:9b:cf:1c:83:ae:91:b4:69:f3:8c:1d:8c:63:23: 99:e2:6d:73:8c:af:8f:36:6c:12:b7:5d:dc:11:90: 27:09:f4:a4:70:cd:69:55:57:af:5c:91:7f:7a:57: 90:6c:2c:d4:ff:14:9c:e9:6f:ff:72:b2:2f:71:80: 4b:e6:c3:f9:60:7e:06:39:b6:44:e5:ca:21:f0:76: 03:cc:06:cb:cb:be:2d:a6:b2:d4:8f:9f:08:4f:63: 71:d6:fa:fc:fa:a0:eb:e5:1a:d1:6d:3a:43:4f:00: fc:02:1a:f6:11:90:74:08:14:ef:48:f0:b6:e0:73: 20:af:25:e9:c9:99:0e:27:e9:5b:db:6f:fc:f3:ef: 21:98:5c:b4:d0:87:54:d4:f3:cc:11:5d:4d:87:50: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:10:89:48:42:1B:4B:6E:BC:4D:BD:A5:4D:99:7D:13:22:45:8E:EB X509v3 Authority Key Identifier: keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f7:5d:51:29:b6:3c:fd:5e:7c:7d:d3:73:28:9b:c4:1d:46: 77:72:a2:9d:af:e1:96:a3:55:3d:1e:41:d2:ac:2e:ae:62:f3: b4:27:9d:2e:32:0e:b4:e2:59:36:76:57:52:92:f0:41:80:fe: b4:0d:19:9b:4c:58:03:03:74:86:27:85:1f:d0:a4:8f:cd:64: d3:8e:77:81:9a:c1:74:60:e9:94:ed:52:ff:1a:75:56:de:dc: 09:f0:fb:9b:9e:c8:25:ae:a4:48:f6:35:97:63:0e:a6:b5:8c: ee:8b:11:e3:c6:f4:61:6b:f4:4a:31:58:ba:74:d4:dc:82:a6: 39:5c:91:4e:bd:b6:63:c9:fa:29:cf:f3:11:0a:53:ea:3c:d0: 0d:93:84:a3:39:f2:a7:eb:07:82:85:28:4f:8b:29:02:f9:cb: 48:cf:17:81:05:6b:c2:4b:ec:89:0a:d0:ff:17:0b:fa:eb:0b: 16:5f:02:68:83:8d:be:ee:67:02:1d:77:cf:ab:97:1d:63:40: 19:30:c1:cd:b4:31:61:be:ae:8b:77:06:95:6a:eb:11:3b:a8: 9d:7b:28:f2:d1:d5:b8:f5:ba:f0:f5:85:c2:f4:b9:27:07:0e: 11:54:09:9b:af:6b:2f:83:57:dc:2e:84:cd:21:1a:ec:1a:8b: 4a:65:dc:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJERUYxMTAvBgNVBAUTKEUzRUI5NTRCNDQ3MjFFNDExQUFGMDkzODMxMENDMTAz RUE0QzhCQjQwHhcNMjUwNDIxMDAzOTIxWhcNMjUwNDI4MDAzOTIxWjAYMRYwFAYD VQQDEw02ODA1OTNiOS05YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMxtoBfaAn6zp9d1PgDxoEHo6l23YvFgzucuAOJfqAxkUvOjoC2Um6qAdF3U agPQxhY82dPmISxEDLKSsK9r8zvSf0DafmPT4JjNcZLWmaxMUhQ5XWhaw4dId+T3 f1JymdkLLgXa7PFKm88cg66RtGnzjB2MYyOZ4m1zjK+PNmwSt13cEZAnCfSkcM1p VVevXJF/eleQbCzU/xSc6W//crIvcYBL5sP5YH4GObZE5coh8HYDzAbLy74tprLU j58IT2Nx1vr8+qDr5RrRbTpDTwD8Ahr2EZB0CBTvSPC24HMgryXpyZkOJ+lb22/8 8+8hmFy00IdU1PPMEV1Nh1CgiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwQiUhC G0tuvE29pU2ZfRMiRY7rMB8GA1UdIwQYMBaAFOPrlUtEch5BGq8JODEMwQPqTIu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRFRi8xOEY2OTg3Q0Iz RDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhrRWFyd2s0TVF6QkEtcE1p N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtdVZTMFJ5SGtFYXJ3azRNUXpCQS1wTWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRFRi8xOEY2OTg3Q0IzRDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhr RWFyd2s0TVF6QkEtcE1pN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv911RKbY8/V58fdNzKJvEHUZ3cqKdr+GWo1U9HkHSrC6uYvO0J50u Mg604lk2dldSkvBBgP60DRmbTFgDA3SGJ4Uf0KSPzWTTjneBmsF0YOmU7VL/GnVW 3twJ8PubnsglrqRI9jWXYw6mtYzuixHjxvRha/RKMVi6dNTcgqY5XJFOvbZjyfop z/MRClPqPNANk4SjOfKn6weChShPiykC+ctIzxeBBWvCS+yJCtD/Fwv66wsWXwJo g42+7mcCHXfPq5cdY0AZMMHNtDFhvq6LdwaVausRO6ideyjy0dW49brw9YXC9Lkn Bw4RVAmbr2svg1fcLoTNIRrsGotKZdy/ -----END CERTIFICATE-----Generated at Mon Apr 21 10:51:41 2025 by rpki-client