$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: liwzE7mw6TJYJJcxagQrsmHrwLjMx2cPVtWA6vp8U4g= Subject key identifier: 5A:E1:6F:72:58:C3:E9:0F:6A:12:D4:6F:C6:3D:61:65:92:EC:75:3D Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 0356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 0346 Signing time: Thu 17 Apr 2025 00:43:35 +0000 Manifest this update: Thu 17 Apr 2025 00:43:34 +0000 Manifest next update: Thu 24 Apr 2025 00:43:34 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: JY6BGFlTAKqHt8Ag/mkPsob+bT6E6JvM0Cmk5L9Vlws=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Apr 17 00:43:34 2025 GMT Not After : Apr 24 00:43:34 2025 GMT Subject: CN=68004eb7-b852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:4a:79:07:15:c3:b2:f5:8e:1d:c5:99:10: ad:41:7e:1d:c4:63:b9:fb:45:b7:93:aa:72:34:f8: f3:73:50:bc:8f:f9:2c:d2:5b:cd:48:7a:d9:c1:14: 34:f7:a8:6a:4a:bd:3f:0f:07:3e:73:c9:20:bb:96: b9:69:bd:3d:6d:1b:a7:01:b5:d2:25:0a:e0:7b:4a: f0:d4:b9:8c:c1:c1:d2:8f:d9:85:00:ad:55:99:42: 45:cc:87:2b:4f:c6:e0:b2:c6:d1:e8:6d:be:e4:a1: ad:90:a5:9f:bb:02:5f:57:37:e2:72:e9:c2:f6:eb: f3:6e:7a:10:b2:53:b6:9d:7b:bb:79:42:b9:cf:5e: a6:c5:b2:cb:33:dd:2c:28:6e:78:0d:fc:17:2b:0d: 4f:9f:13:a3:f3:c3:d1:fb:6a:13:c6:0c:e4:0b:dc: f8:0e:b2:9b:c6:4f:cd:d7:b2:f7:13:72:b8:2c:c2: 28:95:46:42:a1:74:06:3c:61:ae:06:17:47:89:5c: 6d:71:92:f0:4e:a6:48:b0:ed:db:56:31:86:26:73: ad:9d:66:74:5b:ba:f6:41:0e:db:0a:f9:30:e2:85: 5e:af:d1:57:aa:21:a0:9e:9a:16:e1:e5:d6:49:85: d1:69:31:c5:5e:ef:53:b2:e3:d2:6e:ca:99:62:c3: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:6F:72:58:C3:E9:0F:6A:12:D4:6F:C6:3D:61:65:92:EC:75:3D X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:51:e1:be:47:18:63:36:ad:bd:70:9a:aa:97:5a:08:d0:a7: f8:d4:b3:07:6f:4a:ba:3d:6d:32:23:9d:71:91:d8:f6:d5:50: 76:90:64:48:6d:dd:08:7a:8e:bc:41:c8:f9:f3:ec:a5:ad:55: 69:24:9d:39:75:6e:58:b4:88:42:3e:d0:27:43:74:28:3b:82: 3f:c4:ce:7c:d4:a5:5d:6f:cb:95:89:52:47:19:82:97:21:95: d4:0a:e0:04:c2:46:90:50:84:5b:63:74:6b:bf:6c:55:06:05: ef:be:df:e6:cf:28:86:12:e2:91:12:d7:82:11:73:ea:46:8f: f9:72:7e:92:c2:c5:a5:c6:07:8f:c8:e3:89:ef:fa:2b:b2:f7: 6d:3b:f8:42:f8:7b:f4:21:1a:c2:9c:61:66:bf:3e:0a:9c:8f: 14:28:6f:43:36:5b:93:b7:23:b1:22:44:31:56:8d:1b:2e:12: e5:af:90:f9:5b:4f:5f:e8:15:b2:7b:4f:eb:7b:82:65:59:72: b9:c7:a8:04:80:b1:36:ff:85:18:60:c8:bb:34:d9:f6:15:7d: c4:8f:67:6f:ab:fd:57:08:2d:d5:76:99:cc:0c:cd:0e:e0:5b: 46:81:76:34:54:f4:60:95:fa:28:d4:8f:be:e3:c4:6b:72:64: a7:94:42:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwNDE3MDA0MzM0WhcNMjUwNDI0MDA0MzM0WjAYMRYwFAYD VQQDEw02ODAwNGViNy1iODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwpKeQcVw7L1jh3FmRCtQX4dxGO5+0W3k6pyNPjzc1C8j/ks0lvNSHrZwRQ0 96hqSr0/Dwc+c8kgu5a5ab09bRunAbXSJQrge0rw1LmMwcHSj9mFAK1VmUJFzIcr T8bgssbR6G2+5KGtkKWfuwJfVzficunC9uvzbnoQslO2nXu7eUK5z16mxbLLM90s KG54DfwXKw1PnxOj88PR+2oTxgzkC9z4DrKbxk/N17L3E3K4LMIolUZCoXQGPGGu BhdHiVxtcZLwTqZIsO3bVjGGJnOtnWZ0W7r2QQ7bCvkw4oVer9FXqiGgnpoW4eXW SYXRaTHFXu9TsuPSbsqZYsPa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrhb3JY w+kPahLUb8Y9YWWS7HU9MB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYUeG+RxhjNq29cJqql1oI0Kf41LMHb0q6PW0yI51xkdj21VB2kGRI bd0Ieo68Qcj58+ylrVVpJJ05dW5YtIhCPtAnQ3QoO4I/xM581KVdb8uViVJHGYKX IZXUCuAEwkaQUIRbY3Rrv2xVBgXvvt/mzyiGEuKREteCEXPqRo/5cn6SwsWlxgeP yOOJ7/orsvdtO/hC+Hv0IRrCnGFmvz4KnI8UKG9DNluTtyOxIkQxVo0bLhLlr5D5 W09f6BWye0/re4JlWXK5x6gEgLE2/4UYYMi7NNn2FX3Ej2dvq/1XCC3VdpnMDM0O 4FtGgXY0VPRglfoo1I++48RrcmSnlEIx -----END CERTIFICATE-----Generated at Fri Apr 18 06:20:33 2025 by rpki-client