$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft File: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json) Hash identifier: DcVfag4Yywo46GK6upA1aX4j9V5rPSBEKkYX4V8k4/A= Subject key identifier: 0E:26:70:C1:CA:08:0C:CF:7F:80:90:7D:3B:8C:03:DF:E3:04:40:65 Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft Manifest number: 0410 Signing time: Fri 11 Apr 2025 00:26:53 +0000 Manifest this update: Fri 11 Apr 2025 00:26:53 +0000 Manifest next update: Fri 18 Apr 2025 00:26:53 +0000 Files and hashes: 1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: GDgL3qYYLDZODmnfI4clc3itOw4r166Fe4texAJnDek=) 2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: qN4SUiNR7v9xxP/o2Fq/7o1FjEvOjysHOQYMeRV70PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Validity Not Before: Apr 11 00:26:53 2025 GMT Not After : Apr 18 00:26:53 2025 GMT Subject: CN=67f861cd-3fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:87:bb:64:78:d8:00:51:1d:9f:be:7f:12: 00:c5:1e:76:b2:d3:20:d6:1e:e4:1d:49:0f:b2:a1: ba:8f:ff:7c:3d:53:f1:20:36:44:3c:7e:df:b0:b5: 1d:49:09:05:27:8d:f6:b4:0a:13:53:09:f0:b2:cb: 80:8c:48:bf:d0:b2:24:46:96:39:90:76:81:0a:20: c1:33:00:0c:43:32:14:48:f7:30:37:47:dc:db:0e: 5c:f0:b5:3c:75:2b:60:3c:18:ba:ea:7a:0a:bb:08: d7:33:d9:89:27:5c:b3:fa:93:c1:87:cd:0a:67:ec: c9:1f:37:c4:8b:ce:78:6d:3d:6c:e8:52:5e:70:d5: bd:ab:f2:6e:24:e9:71:8e:45:46:22:43:81:c1:e4: 6a:e2:b6:64:b1:78:fd:e5:a4:7c:d5:a2:f9:38:cf: 9b:3d:e2:e8:25:85:11:c0:1c:aa:38:28:c9:6d:ec: fa:cf:5a:8e:8a:2a:a4:56:ea:95:fc:06:df:70:ae: 58:3a:d6:6a:f4:13:12:95:d0:8b:fd:5b:80:39:dc: 7b:e1:e4:bb:6f:ed:ff:a8:14:40:ef:c7:ad:6e:75: 06:ba:b5:b7:6a:f9:92:61:bf:12:53:81:8c:d9:6f: 59:fb:a5:08:4b:e6:1b:48:72:61:02:9d:6c:89:a7: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:26:70:C1:CA:08:0C:CF:7F:80:90:7D:3B:8C:03:DF:E3:04:40:65 X509v3 Authority Key Identifier: keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8c:25:41:4d:cb:39:3a:1e:04:8d:a2:4b:bf:dd:c7:0b:0f: 86:6d:77:41:c7:42:7f:45:e5:ac:40:ae:c0:8c:40:c1:ad:e6: 9d:f5:bb:2f:dc:3e:51:68:5e:85:11:25:13:6f:ce:f0:04:5c: b6:f0:74:68:20:e0:09:99:2e:3a:14:bb:b5:d8:95:1f:c2:37: 65:be:3c:e4:91:08:ca:98:8f:5c:d1:30:1c:8e:5a:20:b9:72: 3d:e4:a7:c2:f9:02:a6:1c:57:b2:35:7d:1f:11:24:83:b3:58: 1f:c2:42:60:94:a8:f2:e4:62:64:e7:bc:66:b2:a4:2d:a8:1f: 65:f2:df:8a:2a:f0:11:ba:e4:8c:f8:dd:ec:0c:dc:74:42:89: 71:da:1b:b0:fb:0f:63:94:3e:44:77:94:60:7d:97:c4:a5:37: 20:07:7a:db:cb:1a:56:bb:97:ac:04:26:df:44:7b:8f:62:3f: 76:27:7a:42:ee:04:c6:cc:ff:15:fa:9b:d7:63:02:59:7c:14: cc:eb:a5:92:05:79:e8:26:0f:0b:15:c7:39:e0:99:2c:cf:fd: 74:bb:8e:a5:ff:42:bd:31:49:21:18:cc:8a:be:ec:1e:e4:33: b2:83:14:e7:2e:8c:e1:c1:9b:ea:66:2d:c6:f4:84:55:78:a9: 06:3f:c7:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0QkUxMTAvBgNVBAUTKENENDhGRUJGMjZGRTI0OUUwNTRCRkQ0NEFFOTRGQzU4 QzBFOEUwQTcwHhcNMjUwNDExMDAyNjUzWhcNMjUwNDE4MDAyNjUzWjAYMRYwFAYD VQQDEw02N2Y4NjFjZC0zZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1mHu2R42ABRHZ++fxIAxR52stMg1h7kHUkPsqG6j/98PVPxIDZEPH7fsLUd SQkFJ432tAoTUwnwssuAjEi/0LIkRpY5kHaBCiDBMwAMQzIUSPcwN0fc2w5c8LU8 dStgPBi66noKuwjXM9mJJ1yz+pPBh80KZ+zJHzfEi854bT1s6FJecNW9q/JuJOlx jkVGIkOBweRq4rZksXj95aR81aL5OM+bPeLoJYURwByqOCjJbez6z1qOiiqkVuqV /AbfcK5YOtZq9BMSldCL/VuAOdx74eS7b+3/qBRA78etbnUGurW3avmSYb8SU4GM 2W9Z+6UIS+YbSHJhAp1siad5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4mcMHK CAzPf4CQfTuMA9/jBEBlMB8GA1UdIwQYMBaAFM1I/r8m/iSeBUv9RK6U/FjA6OCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDRCRS82QThGNzEzNjZE NEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpKNEZTXzFFcnBUOFdNRG80 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVai12eWItSko0RlNfMUVycFQ4V01EbzRLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDRCRS82QThGNzEzNjZENEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpK NEZTXzFFcnBUOFdNRG80S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAejCVBTcs5Oh4EjaJLv93HCw+GbXdBx0J/ReWsQK7AjEDBread9bsv 3D5RaF6FESUTb87wBFy28HRoIOAJmS46FLu12JUfwjdlvjzkkQjKmI9c0TAcjlog uXI95KfC+QKmHFeyNX0fESSDs1gfwkJglKjy5GJk57xmsqQtqB9l8t+KKvARuuSM +N3sDNx0Qolx2huw+w9jlD5Ed5RgfZfEpTcgB3rbyxpWu5esBCbfRHuPYj92J3pC 7gTGzP8V+pvXYwJZfBTM66WSBXnoJg8LFcc54Jksz/10u46l/0K9MUkhGMyKvuwe 5DOygxTnLozhwZvqZi3G9IRVeKkGP8dm -----END CERTIFICATE-----Generated at Sat Apr 12 14:50:35 2025 by rpki-client