$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: xAVwvOuFlNQO/F4qrthoucvtbIWaowNwd9M4JRt06Yc= Subject key identifier: E6:E8:E7:DD:58:19:60:44:8D:E7:E1:AD:CE:D2:BA:22:4E:04:9F:5D Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 348C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 347C Signing time: Fri 04 Apr 2025 15:08:18 +0000 Manifest this update: Fri 04 Apr 2025 15:08:18 +0000 Manifest next update: Fri 11 Apr 2025 15:08:18 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: UWODodTB1o3FzQ7dJd0cjXC4b16nQmkS+n45hWQ1h+c=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: i+oLVOiTvF13PBUoOa9UfIxFEQhcYfTJRD1Exsj8GIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13452 (0x348c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB Validity Not Before: Apr 4 15:08:18 2025 GMT Not After : Apr 11 15:08:18 2025 GMT Subject: CN=67eff5e2-9102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:ab:4e:34:8f:d4:00:57:9d:65:b8:11:97: e7:c5:bc:59:46:9b:51:c5:0d:1f:ec:80:32:ce:cf: 0b:ef:e0:6f:91:e7:18:c1:53:e5:b5:fc:f5:00:58: d7:0b:66:38:ed:e6:9c:2f:09:16:ed:33:6a:1d:d5: 87:1b:dd:7a:3a:69:a4:05:2d:ea:4c:28:12:ea:b8: cb:20:02:05:21:30:54:ca:76:ea:b3:e9:51:a6:84: 22:66:9f:a4:0d:e8:6b:55:2d:ba:db:97:57:6e:03: 4b:2e:85:c5:bd:a9:d3:24:9b:74:c9:04:61:2b:c9: 41:40:33:4b:f3:b1:b9:a9:37:d4:33:e7:55:54:02: 82:94:2c:aa:0a:74:3a:70:70:95:58:10:6c:d5:1d: 79:88:e7:e0:df:b1:17:15:a5:3d:10:90:4d:bf:b9: 6d:d4:fe:a3:9e:4e:fb:1a:41:2c:cc:b5:68:c5:cd: 5c:73:f4:38:87:ab:91:e7:b1:62:74:56:6d:f8:aa: a8:52:9b:01:08:80:bd:2b:bf:e2:c2:c3:0a:f3:78: 10:83:b4:02:be:72:bf:9b:ac:96:f7:ea:61:a4:82: fb:a9:5c:a8:28:c2:c0:fb:84:d8:92:88:27:3e:2b: 11:51:bd:82:4f:6d:07:9d:82:ec:0d:e0:f8:c8:20: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E8:E7:DD:58:19:60:44:8D:E7:E1:AD:CE:D2:BA:22:4E:04:9F:5D X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:31:48:3e:6a:5f:eb:b5:14:62:20:ce:eb:1e:c9:e4:ac:9a: d0:e0:75:9a:56:f3:06:96:4f:71:b9:4c:1d:f2:32:88:0a:27: b9:fc:76:7b:9f:4a:d6:6d:fc:e3:cc:c1:2d:cf:c9:46:ac:10: fc:7f:3c:cf:51:ef:33:7b:76:20:53:3e:3f:8c:be:92:77:07: dd:a2:91:62:ea:fe:eb:4f:cd:7f:b9:4b:22:75:7b:91:78:da: 34:54:ad:ec:6e:0c:6e:91:ca:6c:75:d8:f7:62:17:2c:8f:08: dd:31:23:ab:60:95:c3:83:5c:e4:55:d8:85:8e:9d:1a:80:64: 18:a4:36:ad:af:9d:71:f0:77:c5:bb:27:21:bc:83:cf:d5:7c: 2a:e4:d7:96:42:b0:03:c0:d3:79:e9:d7:82:88:45:b9:6a:2f: 77:f8:47:69:24:54:ea:5e:ed:f2:e3:fe:0f:f1:fd:d4:02:53: 13:5e:7e:2b:5f:1a:09:97:91:6f:84:bb:68:43:77:21:99:85: 64:b4:d4:4f:79:c7:07:e7:71:75:64:1a:bc:62:16:63:f6:72: 78:18:c1:34:a0:ed:1e:92:cf:02:3c:2e:a8:06:33:87:66:8f: f0:2f:ef:97:e8:18:99:96:f6:15:32:70:4f:93:ca:bc:9f:a9: aa:8f:23:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjUwNDA0MTUwODE4WhcNMjUwNDExMTUwODE4WjAYMRYwFAYD VQQDEw02N2VmZjVlMi05MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbarTjSP1ABXnWW4EZfnxbxZRptRxQ0f7IAyzs8L7+BvkecYwVPltfz1AFjX C2Y47eacLwkW7TNqHdWHG916OmmkBS3qTCgS6rjLIAIFITBUynbqs+lRpoQiZp+k DehrVS2625dXbgNLLoXFvanTJJt0yQRhK8lBQDNL87G5qTfUM+dVVAKClCyqCnQ6 cHCVWBBs1R15iOfg37EXFaU9EJBNv7lt1P6jnk77GkEszLVoxc1cc/Q4h6uR57Fi dFZt+KqoUpsBCIC9K7/iwsMK83gQg7QCvnK/m6yW9+phpIL7qVyoKMLA+4TYkogn PisRUb2CT20HnYLsDeD4yCCtaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObo591Y GWBEjefhrc7SuiJOBJ9dMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdMUg+al/rtRRiIM7rHsnkrJrQ4HWaVvMGlk9xuUwd8jKICie5/HZ7 n0rWbfzjzMEtz8lGrBD8fzzPUe8ze3YgUz4/jL6SdwfdopFi6v7rT81/uUsidXuR eNo0VK3sbgxukcpsddj3YhcsjwjdMSOrYJXDg1zkVdiFjp0agGQYpDatr51x8HfF uychvIPP1Xwq5NeWQrADwNN56deCiEW5ai93+EdpJFTqXu3y4/4P8f3UAlMTXn4r XxoJl5FvhLtoQ3chmYVktNRPeccH53F1ZBq8YhZj9nJ4GME0oO0eks8CPC6oBjOH Zo/wL++X6BiZlvYVMnBPk8q8n6mqjyO2 -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:01 2025 by rpki-client