$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: X/OGTo/N55tDZUh5+PJp3KccnH4oPGWHrYg5rL7JJd0= Subject key identifier: 8B:90:72:78:1F:F5:39:6E:9C:32:1B:51:29:0D:CC:61:70:C4:0A:E9 Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 1911 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 1911 Signing time: Wed 16 Apr 2025 16:26:16 +0000 Manifest this update: Wed 16 Apr 2025 16:26:16 +0000 Manifest next update: Wed 23 Apr 2025 16:26:16 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: x8H0tZmAlr++LnfFyjLLrslSFe3bgG4IrTHLrlEqWVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 16:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6417 (0x1911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Apr 16 16:26:16 2025 GMT Not After : Apr 23 16:26:16 2025 GMT Subject: CN=67ffda28-bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:e9:5c:15:e0:2f:94:b2:f8:cc:34:59:b6: 25:48:1b:d5:75:bb:3b:ef:7a:21:15:1e:b2:a5:0e: 59:8e:87:6f:7e:26:64:0a:e7:7b:74:c4:a0:7c:9a: c3:4f:e0:73:7b:b8:ad:ba:6f:46:dd:93:05:5a:00: af:4e:ad:a4:d1:23:15:a9:ae:93:8d:68:b7:80:da: 11:29:a3:4a:17:2f:d5:6d:7b:32:cb:07:5f:1c:d3: 75:6d:be:5d:7a:4f:7a:3b:ae:14:f2:37:d8:2e:c5: 1a:d2:74:8b:b2:d7:76:72:b7:94:0e:72:99:f3:3a: 4b:4a:74:9c:35:35:fa:7f:cf:23:4d:e4:40:c5:d4: 69:38:84:c2:84:11:97:31:a6:68:4d:35:74:84:24: a0:01:cb:18:0c:09:ea:b5:e0:73:57:74:06:59:94: 79:ef:fa:e2:ec:f5:7a:a7:a9:e4:dd:46:52:56:90: 09:fd:18:79:ee:3e:f5:d0:07:e6:4f:00:34:7d:36: cf:07:08:b4:0f:7b:49:b1:0e:d8:96:30:a5:63:fe: ab:ef:75:a9:47:cb:06:49:74:71:7e:17:c4:e8:07: e4:d0:fe:12:6a:3f:2c:f3:5e:28:3f:1b:20:1c:b0: 29:2a:85:fe:2d:fe:42:bb:ab:a8:fc:06:1f:7a:36: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:90:72:78:1F:F5:39:6E:9C:32:1B:51:29:0D:CC:61:70:C4:0A:E9 X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:7a:3a:88:f0:42:50:8e:f4:33:dd:8f:30:48:04:4e:6f:52: f7:8e:df:8d:4b:32:e6:d0:64:dc:54:22:10:c9:c2:ba:d3:d0: c9:6d:fa:7c:bc:74:db:9e:c9:9c:c6:45:3e:21:88:9f:7f:72: 82:70:db:83:f3:4c:b0:5a:50:67:8e:14:ca:ad:01:a2:d6:18: 33:97:dd:49:1a:a0:1c:0f:a1:b9:7a:b8:e4:70:a4:a5:19:b0: 3d:9e:48:95:6b:99:47:9f:ab:82:ff:76:4d:55:c5:39:c7:32: 65:fb:d1:e3:7b:f8:f3:03:0a:8a:f0:57:04:c8:c6:ae:6c:18: 6e:67:c3:80:b9:19:36:fe:c9:6d:67:09:a6:46:3d:c2:bb:6b: 79:28:1f:0e:e8:60:34:ba:40:a9:00:1d:7e:5c:a2:8a:ca:dd: 1f:ac:ca:8c:62:42:3b:06:93:a6:56:8c:ed:1d:ae:dc:94:7d: 8c:c2:d0:bd:80:2f:fe:58:02:92:ac:83:3c:51:88:47:0f:68: 1c:cd:6d:9a:ca:4b:31:db:13:04:a1:2d:8c:cf:ad:b1:71:c3: aa:fd:16:9c:c1:dc:e4:93:bc:67:c3:26:07:31:36:8a:52:45: 22:0c:39:1a:0c:d4:0b:81:86:b6:08:f7:0d:a9:4c:85:98:ba: fb:6f:93:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUwNDE2MTYyNjE2WhcNMjUwNDIzMTYyNjE2WjAYMRYwFAYD VQQDEw02N2ZmZGEyOC1iZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxrpXBXgL5Sy+Mw0WbYlSBvVdbs773ohFR6ypQ5ZjodvfiZkCud7dMSgfJrD T+Bze7itum9G3ZMFWgCvTq2k0SMVqa6TjWi3gNoRKaNKFy/VbXsyywdfHNN1bb5d ek96O64U8jfYLsUa0nSLstd2creUDnKZ8zpLSnScNTX6f88jTeRAxdRpOITChBGX MaZoTTV0hCSgAcsYDAnqteBzV3QGWZR57/ri7PV6p6nk3UZSVpAJ/Rh57j710Afm TwA0fTbPBwi0D3tJsQ7YljClY/6r73WpR8sGSXRxfhfE6Afk0P4Saj8s814oPxsg HLApKoX+Lf5Cu6uo/AYfejYndQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuQcngf 9TlunDIbUSkNzGFwxArpMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABejqI8EJQjvQz3Y8wSAROb1L3jt+NSzLm0GTcVCIQycK609DJbfp8 vHTbnsmcxkU+IYiff3KCcNuD80ywWlBnjhTKrQGi1hgzl91JGqAcD6G5erjkcKSl GbA9nkiVa5lHn6uC/3ZNVcU5xzJl+9Hje/jzAwqK8FcEyMaubBhuZ8OAuRk2/slt ZwmmRj3Cu2t5KB8O6GA0ukCpAB1+XKKKyt0frMqMYkI7BpOmVoztHa7clH2MwtC9 gC/+WAKSrIM8UYhHD2gczW2ayksx2xMEoS2Mz62xccOq/Racwdzkk7xnwyYHMTaK UkUiDDkaDNQLgYa2CPcNqUyFmLr7b5MI -----END CERTIFICATE-----Generated at Fri Apr 18 11:01:27 2025 by rpki-client