$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json) Hash identifier: eIMFSIH5UrWM2+XXYvwJvtWXdOmeczYqlLd5w2efauQ= Subject key identifier: A2:61:90:8E:50:6A:54:B9:7F:89:43:2E:4F:AE:79:1D:A6:31:9C:5B Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft Manifest number: E0 Signing time: Sat 19 Apr 2025 04:43:39 +0000 Manifest this update: Sat 19 Apr 2025 04:43:38 +0000 Manifest next update: Sat 26 Apr 2025 04:43:38 +0000 Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: GbTgia9RlHs4xIZhLJWJ0lR07L8ugVQFn7zXWo7GMBo=) 2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Validity Not Before: Apr 19 04:43:38 2025 GMT Not After : Apr 26 04:43:38 2025 GMT Subject: CN=680329fa-d50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:9e:d9:26:35:9b:24:29:83:9a:7e:66:0f: d8:45:0b:d4:3a:63:4d:c0:fb:0f:3d:cb:48:a4:b1: 71:2e:25:8e:9d:9c:91:01:4f:f8:ce:65:42:28:47: fa:42:91:82:63:aa:97:ff:63:7c:5b:57:b7:0f:bd: 88:38:e7:b5:e3:82:96:3c:07:bc:41:e3:71:9b:89: a5:df:40:a9:99:36:fc:13:c3:73:32:a6:09:25:2c: 9d:b0:34:ef:ef:53:5b:36:e8:85:6c:d9:43:4c:44: 1f:32:1f:7b:1d:87:cc:66:b4:72:f5:4f:fb:6b:07: c9:aa:7b:73:dd:89:8b:4b:e2:84:1d:f3:c1:17:cd: 15:72:57:86:18:48:cf:ad:93:8b:29:b6:01:9f:96: d3:e6:66:6f:78:54:fb:c7:bd:eb:23:b6:79:88:6d: f3:2f:e3:d8:6e:05:63:58:0d:eb:e1:15:41:54:19: 5b:ad:14:8e:92:9c:cb:0d:e6:e4:16:7e:5e:f0:ad: 65:b3:57:19:eb:31:9f:6d:2a:a1:2a:12:f9:be:f6: a7:c2:46:40:d0:66:8a:a8:ba:56:eb:87:4e:af:a2: 63:89:ce:49:fd:31:ec:63:6f:72:7c:94:c1:94:23: 72:f1:16:03:7a:1f:ee:e8:08:6a:63:64:58:be:e5: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:90:8E:50:6A:54:B9:7F:89:43:2E:4F:AE:79:1D:A6:31:9C:5B X509v3 Authority Key Identifier: keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:88:06:0e:0b:c0:2e:b1:5f:fb:1f:4c:7c:5b:30:3d:17:cf: d0:c7:02:8d:b3:4f:f0:bc:9b:d5:b4:89:51:9b:24:05:8d:9a: 6c:33:6e:12:ba:8a:be:9b:d7:6e:0c:42:60:48:03:34:90:22: f8:b7:74:68:a9:dd:a5:0c:a2:f8:a7:2c:e7:85:1f:6f:a7:5e: c6:9e:b2:d5:5e:f1:57:75:ee:43:8f:c2:0f:8e:3c:c5:27:b8: 98:68:b2:6d:66:35:15:21:b3:53:29:ab:9c:96:d2:dc:0b:11: 0f:b5:bf:fd:f4:d3:81:a6:14:82:ed:42:3e:e5:1d:37:40:de: 5b:74:fd:e1:20:e7:10:dd:98:ba:de:79:1c:b0:66:e6:1f:8d: 5d:2f:61:18:df:9c:05:e1:1f:9e:f2:87:b6:b5:53:f1:a4:0b: 58:1c:2f:20:81:58:02:f7:d0:4e:11:82:5f:50:4d:97:b7:2b: cc:94:a7:79:33:54:1a:ef:37:63:1a:2b:6f:50:07:53:12:32: 36:39:da:9c:14:1a:1d:90:51:ea:66:0e:02:ca:b0:53:40:02: 25:b6:2b:c3:e9:6f:f6:bb:5c:44:6d:4c:c3:9a:88:40:52:60: 54:75:22:30:e1:66:43:61:9b:80:c3:b2:5d:de:fd:59:e1:40: d2:51:21:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1REMzNDEyRTEy MkZBODcxNEMwHhcNMjUwNDE5MDQ0MzM4WhcNMjUwNDI2MDQ0MzM4WjAYMRYwFAYD VQQDEw02ODAzMjlmYS1kNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtWe2SY1myQpg5p+Zg/YRQvUOmNNwPsPPctIpLFxLiWOnZyRAU/4zmVCKEf6 QpGCY6qX/2N8W1e3D72IOOe144KWPAe8QeNxm4ml30CpmTb8E8NzMqYJJSydsDTv 71NbNuiFbNlDTEQfMh97HYfMZrRy9U/7awfJqntz3YmLS+KEHfPBF80VcleGGEjP rZOLKbYBn5bT5mZveFT7x73rI7Z5iG3zL+PYbgVjWA3r4RVBVBlbrRSOkpzLDebk Fn5e8K1ls1cZ6zGfbSqhKhL5vvanwkZA0GaKqLpW64dOr6Jjic5J/THsY29yfJTB lCNy8RYDeh/u6AhqY2RYvuU43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJhkI5Q alS5f4lDLk+ueR2mMZxbMB8GA1UdIwQYMBaAFNdHQBFMuvT1map+XcNBLhIvqHFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9DREYzREExNkQy MkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQV1pxbjVkdzBFdUVpLW9j VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQ V1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgiAYOC8AusV/7H0x8WzA9F8/QxwKNs0/wvJvVtIlRmyQFjZpsM24S uoq+m9duDEJgSAM0kCL4t3Roqd2lDKL4pyznhR9vp17GnrLVXvFXde5Dj8IPjjzF J7iYaLJtZjUVIbNTKaucltLcCxEPtb/99NOBphSC7UI+5R03QN5bdP3hIOcQ3Zi6 3nkcsGbmH41dL2EY35wF4R+e8oe2tVPxpAtYHC8ggVgC99BOEYJfUE2XtyvMlKd5 M1Qa7zdjGitvUAdTEjI2OdqcFBodkFHqZg4CyrBTQAIltivD6W/2u1xEbUzDmohA UmBUdSIw4WZDYZuAw7Jd3v1Z4UDSUSFt -----END CERTIFICATE-----Generated at Sat Apr 19 08:23:04 2025 by rpki-client