$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json) Hash identifier: BcFbngTmvQgHYAsnBi+Lst8yefpmUbIaVj/8h7s0aDM= Subject key identifier: BF:EA:C1:18:A1:F1:5B:97:5F:AF:9D:86:A1:EA:BD:D3:3B:7F:13:6F Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft Manifest number: 69 Signing time: Sat 29 Mar 2025 06:17:26 +0000 Manifest this update: Sat 29 Mar 2025 06:17:26 +0000 Manifest next update: Sat 05 Apr 2025 06:17:26 +0000 Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: oloFN57C8vbbnSJyhwXNLM9w+ADldNHb8hARn2gpsfE=) 2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: KLVK6zfk1sI4e7G8hRism5bZ4U3Yqq/t49H1ShoVhoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391 Validity Not Before: Mar 29 06:17:26 2025 GMT Not After : Apr 5 06:17:26 2025 GMT Subject: CN=67e79076-0cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:4c:1d:4e:2b:1c:5e:33:bf:84:ff:64:30: f0:14:6d:a5:1f:0b:d6:b7:13:48:ec:81:d7:6a:a4: 0a:c4:e9:42:15:ea:40:09:93:ef:9c:03:ef:42:36: 09:ba:75:3d:89:b6:95:1a:81:2d:3b:fd:a9:1c:bb: 19:8f:07:6d:d7:d6:ca:33:a5:63:1e:e6:2d:5c:7d: 12:c5:ab:bc:4c:45:8a:4a:ee:fc:e1:e8:b6:0c:72: 03:01:5f:90:5f:33:18:11:36:f3:47:77:f0:49:9e: 17:8f:d2:aa:79:65:82:ba:20:22:a3:7f:05:d3:1b: 44:d1:32:c1:95:0a:16:93:d0:63:f9:6c:49:64:71: 07:6c:05:ef:61:5b:5d:78:c2:1a:0b:eb:c7:58:d7: 12:30:a5:8c:33:fc:e3:a2:4c:c8:78:a8:2f:a3:5c: a0:7d:50:d4:71:96:3c:c9:dc:71:9f:44:7b:30:3a: a5:b5:50:46:16:b3:b8:16:25:cf:e0:28:e7:a9:0e: 60:92:a0:39:47:b2:6d:11:4d:11:4a:82:2f:7a:7f: ca:18:d3:6f:0a:8a:66:68:01:e8:06:6c:27:ce:ae: e9:1c:d0:fa:93:f5:97:2f:74:05:28:2d:31:e9:b0: 0f:59:69:0d:a9:3e:ff:1b:85:5b:47:4e:90:67:e7: 28:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EA:C1:18:A1:F1:5B:97:5F:AF:9D:86:A1:EA:BD:D3:3B:7F:13:6F X509v3 Authority Key Identifier: keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:de:e4:04:ab:c7:34:44:53:e2:3c:e6:5e:94:7b:62:5c:01: a8:f6:c7:f2:72:98:7a:12:7f:a3:5a:9f:f3:b2:ce:d2:89:ca: 44:0f:c8:a6:7a:1d:a2:cc:b3:5c:c7:67:47:72:5b:f2:15:47: 2c:44:69:f0:f3:24:41:63:d6:14:12:47:f2:b3:2e:ff:ae:9c: 03:a0:c1:22:39:f0:3d:18:96:a0:b2:3d:19:d1:de:bb:22:65: 59:ab:5b:8f:5b:98:82:e4:3c:f1:34:7e:04:ca:dd:7c:b7:36: 5c:b6:0f:91:fa:92:e9:2f:19:8c:70:96:c1:eb:e0:de:be:45: cc:1e:0b:ea:36:74:b5:7a:94:56:f8:97:db:d5:b2:b6:f8:f1: 87:c3:e2:d3:5a:9d:7e:4b:48:34:e9:a6:23:a7:29:8a:1c:a4: 47:fd:65:59:30:69:bb:79:fd:a4:72:7b:7e:00:a9:bf:e3:a8: 8f:f4:35:f7:b4:a2:d0:28:59:9b:29:e9:06:1f:e3:e4:e7:77: 08:87:80:f4:fd:82:a5:d6:db:17:73:f1:54:6a:dd:56:4d:fa: ce:a6:60:fc:c4:12:f3:aa:b3:b8:6e:b3:8d:1e:18:e9:db:50: 90:7a:00:57:b8:a8:0b:ba:71:88:d9:ec:e8:46:ec:d0:d1:19: 3a:7b:1c:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDM5MTExMC8GA1UEBRMoNTNFN0NFOTQzNTMzRjhEM0MwNTY0OUYyOTQ2ODJBMjZG ODE0RjE1RjAeFw0yNTAzMjkwNjE3MjZaFw0yNTA0MDUwNjE3MjZaMBgxFjAUBgNV BAMTDTY3ZTc5MDc2LTBjZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlqEwdTiscXjO/hP9kMPAUbaUfC9a3E0jsgddqpArE6UIV6kAJk++cA+9CNgm6 dT2JtpUagS07/akcuxmPB23X1sozpWMe5i1cfRLFq7xMRYpK7vzh6LYMcgMBX5Bf MxgRNvNHd/BJnheP0qp5ZYK6ICKjfwXTG0TRMsGVChaT0GP5bElkcQdsBe9hW114 whoL68dY1xIwpYwz/OOiTMh4qC+jXKB9UNRxljzJ3HGfRHswOqW1UEYWs7gWJc/g KOepDmCSoDlHsm0RTRFKgi96f8oY028KimZoAegGbCfOrukc0PqT9ZcvdAUoLTHp sA9ZaQ2pPv8bhVtHTpBn5yjZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv+rBGKHx W5dfr52Goeq90zt/E28wHwYDVR0jBBgwFoAUU+fOlDUz+NPAVknylGgqJvgU8V8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MzkxLzAxOUZGMTRFNzBB RTExRUZBODQ4QjA2OEM0RjlBRTAyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS1mT2xEVXotTlBBVmtueWxHZ3FKdmdVOFY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MzkxLzAxOUZGMTRFNzBBRTExRUZBODQ4QjA2OEM0RjlBRTAyL1UtZk9sRFV6LU5Q QVZrbnlsR2dxSnZnVThWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADfe5ASrxzREU+I85l6Ue2JcAaj2x/JymHoSf6Nan/OyztKJykQPyKZ6 HaLMs1zHZ0dyW/IVRyxEafDzJEFj1hQSR/KzLv+unAOgwSI58D0YlqCyPRnR3rsi ZVmrW49bmILkPPE0fgTK3Xy3Nly2D5H6kukvGYxwlsHr4N6+RcweC+o2dLV6lFb4 l9vVsrb48YfD4tNanX5LSDTppiOnKYocpEf9ZVkwabt5/aRye34Aqb/jqI/0Nfe0 otAoWZsp6QYf4+TndwiHgPT9gqXW2xdz8VRq3VZN+s6mYPzEEvOqs7hus40eGOnb UJB6AFe4qAu6cYjZ7OhG7NDRGTp7HCw= -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:29 2025 by rpki-client