$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft (raw, json) Hash identifier: NE4EWcaZJHn3UN4A+XOePBcJXpf/x4zlqQmhnR0kPtw= Subject key identifier: 87:E4:29:3A:1A:0A:73:26:80:11:D7:8F:E0:37:6E:FA:FB:FF:24:EC Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft Manifest number: 21 Signing time: Thu 03 Apr 2025 07:07:43 +0000 Manifest this update: Thu 03 Apr 2025 07:07:43 +0000 Manifest next update: Thu 10 Apr 2025 07:07:43 +0000 Files and hashes: 1: U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl (hash: oY9O0Bezm+JZ/5XLPxkhv/HDOWlUqIxBw80HkUszMs4=) 2: 30CC092AE53011EFA140503EC4F9AE02.roa (hash: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=) 3: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (hash: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180838 Validity Not Before: Apr 3 07:07:43 2025 GMT Not After : Apr 10 07:07:43 2025 GMT Subject: CN=67ee33bf-d6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:5b:51:81:5c:b6:a9:06:2d:ae:f9:35:b1: 2f:d4:18:84:9b:12:41:73:d5:b6:ff:63:3e:68:63: d5:55:9e:1a:30:ac:73:51:e3:df:90:50:a4:09:1f: 50:f0:51:b8:64:8e:69:bb:01:60:7b:c0:30:09:35: a6:4c:c3:a6:91:9c:6f:89:f8:67:58:34:12:7b:86: 53:77:f1:1d:5a:7a:75:c8:1f:8d:39:e3:2e:29:09: 1a:ef:7c:a6:69:a2:d0:8e:1a:1a:56:51:2c:02:e5: de:30:7d:7d:34:57:23:c2:bb:13:65:ce:52:14:43: 36:f6:0c:cb:99:20:36:76:e7:10:d7:27:28:8b:01: 38:39:9c:c7:b4:68:71:17:c2:47:bd:37:29:c1:bb: 7e:a6:99:37:08:fb:ca:20:16:ff:67:e0:51:81:f3: e8:7f:ed:cd:07:a0:4a:40:bd:93:62:8b:ae:32:43: ee:7b:e2:a6:ac:e0:db:4b:e4:05:4d:de:7a:61:c0: 7a:a6:4d:84:e3:9e:6e:ab:72:db:32:62:8d:63:df: 56:fa:ee:d5:d8:61:bd:33:90:c3:40:6b:16:17:ac: 9a:f2:43:9b:cd:88:1d:79:7c:0a:66:92:45:78:b5: d2:1b:cf:0c:63:ee:90:9a:78:a5:ff:5c:80:12:7e: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E4:29:3A:1A:0A:73:26:80:11:D7:8F:E0:37:6E:FA:FB:FF:24:EC X509v3 Authority Key Identifier: keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9e:80:71:24:b5:2a:97:14:3a:4e:af:35:dd:6f:dd:9e:82: a8:dc:3a:8a:7a:4e:22:27:17:c0:96:be:08:8e:ea:12:cc:b5: 66:a3:3e:91:07:ad:a2:31:75:19:7d:10:d5:fb:db:03:85:f7: 6b:2f:69:83:6b:fe:2d:63:56:f4:a1:5b:69:eb:aa:7a:bb:f0: 3c:e6:31:9b:cd:82:c4:08:d3:81:c2:b2:5f:89:0e:e2:1b:99: 35:77:ec:34:7b:b3:1b:98:4e:3c:9e:58:09:49:9f:57:9a:12: c3:04:21:8a:e4:63:ae:0c:13:81:2b:fc:96:11:eb:3f:76:e1: cf:61:46:0b:86:31:aa:0d:19:fc:c9:9c:4f:d0:e3:69:06:f4: 2e:1e:09:6d:60:10:1f:7d:95:8c:89:86:a3:1c:a1:cd:6a:13: d0:25:ab:d2:76:25:da:b7:83:98:d3:bc:dc:da:21:8a:5a:0b: ef:ee:7f:63:6a:38:8d:f5:20:e2:8c:ca:b5:f8:ce:5e:01:e2: 3c:fe:8c:60:85:72:21:98:b6:85:55:db:13:57:00:f0:f1:d8: ee:7c:63:5d:0c:c6:d8:d7:1e:23:f6:fe:47:8f:30:bc:68:b1: e1:79:78:fc:e1:75:94:de:08:be:3c:e7:da:21:6f:35:83:1b: 2b:e0:eb:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDgzODExMC8GA1UEBRMoNTNFQzhGNEYxMEE5NDA2NDQ2MjgyM0FBMjk5QkIyODY2 MDBFREYwOTAeFw0yNTA0MDMwNzA3NDNaFw0yNTA0MTAwNzA3NDNaMBgxFjAUBgNV BAMTDTY3ZWUzM2JmLWQ2ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoXVtRgVy2qQYtrvk1sS/UGISbEkFz1bb/Yz5oY9VVnhowrHNR49+QUKQJH1Dw Ubhkjmm7AWB7wDAJNaZMw6aRnG+J+GdYNBJ7hlN38R1aenXIH4054y4pCRrvfKZp otCOGhpWUSwC5d4wfX00VyPCuxNlzlIUQzb2DMuZIDZ25xDXJyiLATg5nMe0aHEX wke9NynBu36mmTcI+8ogFv9n4FGB8+h/7c0HoEpAvZNii64yQ+574qas4NtL5AVN 3nphwHqmTYTjnm6rctsyYo1j31b67tXYYb0zkMNAaxYXrJryQ5vNiB15fApmkkV4 tdIbzwxj7pCaeKX/XIASflpDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh+QpOhoK cyaAEdeP4Ddu+vv/JOwwHwYDVR0jBBgwFoAUU+yPTxCpQGRGKCOqKZuyhmAO3wkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwODM4LzBEMTk5NTdBRTUy QTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdSR0tDT3FLWnV5aG1BTzN3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS15UFR4Q3BRR1JHS0NPcUtadXlobUFPM3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw ODM4LzBEMTk5NTdBRTUyQTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdS R0tDT3FLWnV5aG1BTzN3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiegHEktSqXFDpOrzXdb92egqjcOop6TiInF8CWvgiO6hLMtWajPpEH raIxdRl9ENX72wOF92svaYNr/i1jVvShW2nrqnq78DzmMZvNgsQI04HCsl+JDuIb mTV37DR7sxuYTjyeWAlJn1eaEsMEIYrkY64ME4Er/JYR6z924c9hRguGMaoNGfzJ nE/Q42kG9C4eCW1gEB99lYyJhqMcoc1qE9Alq9J2Jdq3g5jTvNzaIYpaC+/uf2Nq OI31IOKMyrX4zl4B4jz+jGCFciGYtoVV2xNXAPDx2O58Y10MxtjXHiP2/kePMLxo seF5ePzhdZTeCL4859ohbzWDGyvg6/s= -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:39 2025 by rpki-client