$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: NMDOqKSLp9gHmoIM9yr0o4J+T0HF9ybd1wkx1zQTqbA= Subject key identifier: DD:18:44:61:C3:00:20:C5:C1:16:5E:BD:B2:AE:42:46:CB:84:93:25 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 0170 Signing time: Wed 09 Apr 2025 02:50:40 +0000 Manifest this update: Wed 09 Apr 2025 02:50:40 +0000 Manifest next update: Wed 16 Apr 2025 02:50:40 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: kBFwcUOkLWyIrv2jKDwy0nerxYyVxiMpUCDDajLjDtQ=) 2: 305A9890EAEF11EDBBFC2B0BC4F9AE02.roa (hash: ePVRm39tIyAswyhwrdMeKFH+yRFfrkV0msYN8ZorCeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3 Validity Not Before: Apr 9 02:50:40 2025 GMT Not After : Apr 16 02:50:40 2025 GMT Subject: CN=67f5e080-e0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:cd:76:56:e1:df:cb:58:94:08:09:4a:97: 4e:d3:c5:f7:3f:39:2e:78:e1:2c:05:f1:31:a8:8c: cf:92:86:54:bd:73:e7:11:36:4d:d9:fb:68:58:d2: 00:fa:65:d2:58:03:16:4d:18:6d:98:6f:79:da:ed: 82:35:0a:08:c6:e4:86:ac:1e:2b:7a:9a:7f:61:82: 7b:5c:cb:f5:06:9f:ab:81:0f:7b:52:b6:80:6f:a0: ad:af:d5:a9:9b:1e:2e:1e:b1:8b:3b:b8:24:b3:fb: af:81:99:87:52:7d:91:7b:a1:11:97:5c:ea:e9:54: fd:11:f8:57:84:e2:9d:fb:fe:9c:07:9a:13:ac:bf: c4:33:dc:c0:a5:95:3d:7e:87:36:cd:2d:c2:ba:70: 4e:f5:10:6d:1d:58:a6:bb:57:64:91:42:21:b7:97: 0e:61:06:b3:40:67:7c:70:3a:99:44:b4:11:5e:76: b5:e8:b6:f2:9f:74:95:48:11:21:41:58:09:bd:8c: 1f:83:e2:74:73:42:94:e5:3b:81:55:3b:08:20:62: a6:5a:ff:8e:fb:33:50:f1:e2:22:77:27:c6:cc:ad: ca:39:df:bd:0c:a2:e7:aa:54:78:ae:3d:f8:2e:cf: 81:50:58:c9:d3:6d:63:0f:c8:c9:ec:d3:7c:24:a9: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:18:44:61:C3:00:20:C5:C1:16:5E:BD:B2:AE:42:46:CB:84:93:25 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7e:bd:5f:91:3e:09:24:64:7e:5e:a2:47:79:38:d4:0b:be: 0f:da:86:a3:4a:71:16:60:fa:00:8d:55:33:6f:29:e2:15:dd: bc:77:fb:39:ee:87:25:ca:59:f2:2d:6e:4e:0a:df:28:8d:69: 70:78:6a:77:82:34:22:eb:03:e2:bb:f4:8e:8f:d6:7b:1b:69: 5b:9d:94:f4:5f:f3:c6:fc:a4:0f:f8:42:1e:a2:21:c6:81:3a: 47:7e:18:7e:6d:11:11:08:c5:c7:ef:5e:7d:16:a7:d3:29:1c: 73:59:cd:ef:da:33:03:98:d3:e1:f8:ab:21:2a:87:9e:65:76: 48:0b:9e:e3:57:ce:bb:f4:dc:b0:ee:7c:23:9c:91:d3:68:83: 32:ce:03:8f:f8:7e:c6:0e:9b:52:24:08:9b:03:4b:7b:fe:3e: 03:15:76:56:bd:c8:2c:d4:4f:73:6d:df:3e:dd:e6:11:41:8a: 27:93:c2:7f:85:a7:c7:a2:d6:18:dd:14:8a:66:67:17:ce:27: d1:4d:e8:9d:db:a5:d5:2c:f7:12:57:43:92:3f:c6:08:30:31: 7b:12:ee:c2:af:7d:5a:1e:90:79:33:17:1a:59:02:cc:1c:50: c0:2a:77:4b:1f:19:23:1e:71:4b:15:e2:cc:0d:97:f0:27:d4: f1:cc:14:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUwNDA5MDI1MDQwWhcNMjUwNDE2MDI1MDQwWjAYMRYwFAYD VQQDEw02N2Y1ZTA4MC1lMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOvNdlbh38tYlAgJSpdO08X3PzkueOEsBfExqIzPkoZUvXPnETZN2ftoWNIA +mXSWAMWTRhtmG952u2CNQoIxuSGrB4repp/YYJ7XMv1Bp+rgQ97UraAb6Ctr9Wp mx4uHrGLO7gks/uvgZmHUn2Re6ERl1zq6VT9EfhXhOKd+/6cB5oTrL/EM9zApZU9 foc2zS3CunBO9RBtHVimu1dkkUIht5cOYQazQGd8cDqZRLQRXna16Lbyn3SVSBEh QVgJvYwfg+J0c0KU5TuBVTsIIGKmWv+O+zNQ8eIidyfGzK3KOd+9DKLnqlR4rj34 Ls+BUFjJ021jD8jJ7NN8JKmqSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0YRGHD ACDFwRZevbKuQkbLhJMlMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1fr1fkT4JJGR+XqJHeTjUC74P2oajSnEWYPoAjVUzbyniFd28d/s5 7oclylnyLW5OCt8ojWlweGp3gjQi6wPiu/SOj9Z7G2lbnZT0X/PG/KQP+EIeoiHG gTpHfhh+bRERCMXH7159FqfTKRxzWc3v2jMDmNPh+KshKoeeZXZIC57jV8679Nyw 7nwjnJHTaIMyzgOP+H7GDptSJAibA0t7/j4DFXZWvcgs1E9zbd8+3eYRQYonk8J/ hafHotYY3RSKZmcXzifRTeid26XVLPcSV0OSP8YIMDF7Eu7Cr31aHpB5MxcaWQLM HFDAKndLHxkjHnFLFeLMDZfwJ9TxzBR8 -----END CERTIFICATE-----Generated at Fri Apr 11 11:34:43 2025 by rpki-client