$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json) Hash identifier: v4a0RWf4f0UZ1ywlfh93J3jIwEY/kS4B+DOM6sP8wTg= Subject key identifier: 0A:AD:72:A5:F1:49:89:A9:DA:AB:F7:9B:DE:AA:2A:55:E9:64:C2:4A Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Certificate serial: 0F52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft Manifest number: 0F3F Signing time: Sat 12 Apr 2025 17:31:32 +0000 Manifest this update: Sat 12 Apr 2025 17:31:32 +0000 Manifest next update: Sat 19 Apr 2025 17:31:32 +0000 Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: GoFP0wAwq0g1z0C+He3mMstcIB3RJgnnpIWnRWH4Xjo=) 2: 12E476745E1A11EFB61C6844C4F9AE02.roa (hash: 3IAJ+9W9KeEq7QTVszcmLK1ObY/QRBXZfU+eVRZCpyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3922 (0xf52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Validity Not Before: Apr 12 17:31:32 2025 GMT Not After : Apr 19 17:31:32 2025 GMT Subject: CN=67faa374-9ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b8:5b:97:c6:87:bb:29:ce:8f:ce:cb:12:f0: 5a:39:bc:bd:b1:ad:54:c1:89:19:a8:d1:6c:dc:dc: 90:1d:1e:f0:7d:0b:09:64:3a:e2:42:c0:8b:8d:4c: 64:bb:e0:7f:0e:15:1c:0b:94:b7:6a:2e:d8:fe:b3: dc:3e:a3:10:37:42:69:50:b3:41:a5:d1:3f:52:8c: f1:0c:0e:ec:c4:84:91:b5:ad:0b:01:47:fc:cf:b2: 27:2d:ff:58:38:78:4e:f2:67:27:a2:f5:95:11:d7: 64:9d:5a:bf:1d:f6:90:ed:c5:f7:cd:51:6a:e8:fe: 6c:21:06:4b:db:c4:db:6f:53:99:01:02:89:c1:71: 1a:54:52:09:e4:48:70:6b:6e:39:e2:e0:f6:8b:f6: fa:6a:85:da:45:1c:84:42:75:53:9e:5a:29:a5:11: e5:be:78:15:cb:7f:ff:6e:69:44:bf:a0:cd:e1:61: e1:9e:f8:00:60:79:14:84:7c:9c:8a:9a:ee:44:f4: 07:e2:1b:1f:08:cc:5b:01:56:9e:5f:03:d6:44:e3: 16:28:ec:6f:4b:3c:a0:ec:34:53:4f:ae:89:94:35: eb:0f:eb:e0:1b:c7:17:cf:5b:f4:9f:97:0b:8b:fb: cb:27:b6:63:7f:0d:2f:92:1c:a8:42:2f:17:70:78: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AD:72:A5:F1:49:89:A9:DA:AB:F7:9B:DE:AA:2A:55:E9:64:C2:4A X509v3 Authority Key Identifier: keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1b:69:11:96:b3:64:d0:c0:40:1d:89:9e:49:db:49:7f:74: f5:f2:c7:72:5b:23:6c:c3:b9:a9:b1:6f:f4:9d:45:e6:48:ae: 50:be:ce:5c:c0:18:5e:86:39:9b:a5:11:ec:08:98:e0:74:f6: ec:6d:37:89:a2:71:88:db:fc:2b:6a:45:c3:e8:9d:4d:11:be: b3:ea:9a:f2:3b:5d:56:55:b1:09:61:10:92:a1:f0:71:0a:fc: 42:9b:98:d9:82:13:0e:ec:79:91:aa:fe:97:6f:ca:75:75:79: 12:60:5a:9a:22:44:9f:88:fb:9e:52:32:51:41:b4:52:a8:03: bf:d1:a3:46:db:bb:58:68:08:1e:60:55:fc:56:6c:68:d0:61: 23:ca:f7:2d:a5:2f:0d:f6:3d:1b:f0:cc:d1:89:29:1b:45:aa: a8:88:43:84:ee:80:bd:05:87:4e:11:5a:ba:a8:c4:cf:18:bc: bb:fe:88:b9:c6:30:2d:3d:69:bb:a1:72:59:76:df:1f:cf:db: 46:3c:02:b2:f2:46:17:47:4b:3c:fd:3e:b6:63:04:f1:76:0b: a3:7d:76:97:c8:f0:54:bf:05:d6:8d:3b:31:d4:eb:59:ec:00: a6:42:e9:24:13:a2:ce:0a:3f:53:a2:02:b4:83:bf:b3:c5:8c: 0d:9f:e2:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB RkNERUMzRTIwHhcNMjUwNDEyMTczMTMyWhcNMjUwNDE5MTczMTMyWjAYMRYwFAYD VQQDEw02N2ZhYTM3NC05Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87hbl8aHuynOj87LEvBaOby9sa1UwYkZqNFs3NyQHR7wfQsJZDriQsCLjUxk u+B/DhUcC5S3ai7Y/rPcPqMQN0JpULNBpdE/UozxDA7sxISRta0LAUf8z7InLf9Y OHhO8mcnovWVEddknVq/HfaQ7cX3zVFq6P5sIQZL28Tbb1OZAQKJwXEaVFIJ5Ehw a2454uD2i/b6aoXaRRyEQnVTnloppRHlvngVy3//bmlEv6DN4WHhnvgAYHkUhHyc ipruRPQH4hsfCMxbAVaeXwPWROMWKOxvSzyg7DRTT66JlDXrD+vgG8cXz1v0n5cL i/vLJ7Zjfw0vkhyoQi8XcHgKIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqtcqXx SYmp2qv3m96qKlXpZMJKMB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy cTNOckpWTllaMW12emV3LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcG2kRlrNk0MBAHYmeSdtJf3T18sdyWyNsw7mpsW/0nUXmSK5Qvs5c wBhehjmbpRHsCJjgdPbsbTeJonGI2/wrakXD6J1NEb6z6pryO11WVbEJYRCSofBx CvxCm5jZghMO7HmRqv6Xb8p1dXkSYFqaIkSfiPueUjJRQbRSqAO/0aNG27tYaAge YFX8Vmxo0GEjyvctpS8N9j0b8MzRiSkbRaqoiEOE7oC9BYdOEVq6qMTPGLy7/oi5 xjAtPWm7oXJZdt8fz9tGPAKy8kYXR0s8/T62YwTxdgujfXaXyPBUvwXWjTsx1OtZ 7ACmQukkE6LOCj9TogK0g7+zxYwNn+Ky -----END CERTIFICATE-----Generated at Sun Apr 13 04:40:49 2025 by rpki-client