$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft File: plApCrx0GfQg5AG7s6RNCBPR8Wk.mft (raw, json) Hash identifier: 2A8iD76eGl/nc4nLqUmNUYU8u/Rdav5s+2AOk69sfJ8= Subject key identifier: 43:EB:D3:1C:9E:EC:1D:EC:36:8A:A9:D4:D9:97:15:A4:BF:97:6B:F9 Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 Certificate issuer: /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft Manifest number: 0436 Signing time: Wed 16 Apr 2025 23:55:09 +0000 Manifest this update: Wed 16 Apr 2025 23:55:08 +0000 Manifest next update: Wed 23 Apr 2025 23:55:08 +0000 Files and hashes: 1: plApCrx0GfQg5AG7s6RNCBPR8Wk.crl (hash: ZL3xs0dWz8xH1qIN3uzFjL1eRuE1O7A3RleA63aYXFc=) 2: C361870855FD11EC938D1744C4F9AE02.roa (hash: SB4h4zGEtxyFJYfc5GO7YkKy69kkEfQKoUL9+jluR6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180EB5, serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169 Validity Not Before: Apr 16 23:55:08 2025 GMT Not After : Apr 23 23:55:08 2025 GMT Subject: CN=6800435c-ed45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:da:15:bd:fb:29:c0:19:9c:de:b0:ff:64: 4d:65:ba:ee:f7:89:ec:8f:e0:28:02:bf:c2:e4:af: 30:ab:d9:8a:8d:c3:eb:01:75:df:ce:f8:a8:ee:f3: 66:ec:38:cd:3e:2e:fd:4b:77:e0:bf:3c:0c:19:58: 41:72:9a:98:37:0f:aa:7c:51:00:46:01:71:06:39: 48:6a:0a:bf:35:76:a7:f9:5c:2e:cd:4b:bb:94:db: bc:ea:2c:fb:a2:4b:5f:d7:b8:6c:6c:d2:e9:42:c4: 00:3a:0e:77:82:55:fe:60:4d:14:94:7f:ec:b0:0a: 42:2a:d5:12:1d:0e:71:0a:0a:04:bc:8e:f8:6e:36: 5c:1f:b6:ef:78:d8:67:ea:b4:d9:aa:8b:ae:03:d6: 3f:f8:f2:1d:89:cb:36:a3:1d:3d:e9:e2:66:48:dc: f6:19:93:31:8d:7a:1a:e5:b7:5a:53:79:12:45:0a: 81:75:a0:bd:7d:f1:60:22:1c:86:2c:8f:43:e5:42: b0:84:31:c2:df:06:b1:6f:96:5f:01:59:b1:5b:b2: bd:af:33:1b:d3:da:2b:6d:80:34:2f:45:94:68:52: 10:e6:3c:f7:58:d3:a9:d7:38:c9:9d:2f:0e:63:26: 98:de:05:02:90:6c:b7:e7:db:74:ed:1f:66:a1:66: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EB:D3:1C:9E:EC:1D:EC:36:8A:A9:D4:D9:97:15:A4:BF:97:6B:F9 X509v3 Authority Key Identifier: keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c7:a4:37:79:35:5b:e9:29:ab:a0:05:e5:95:da:0c:dd:10: 7a:b2:47:7e:8e:82:88:74:27:4c:47:82:66:ad:26:21:f6:b7: f3:a9:44:b1:59:c1:34:cd:26:d2:53:a1:e1:81:69:bb:a7:10: 3c:34:af:8f:19:8d:3e:65:3a:67:0e:d7:a4:60:fd:31:d0:c9: b3:f2:0a:ec:0b:0b:86:f2:8c:61:2c:9b:55:be:55:60:3d:58: ba:7b:14:2c:92:47:c1:d8:3d:fb:a0:00:87:81:32:55:47:b9: 28:7a:80:40:58:76:d1:7c:1a:59:6c:e1:11:9b:82:cd:2a:14: 51:4a:b5:68:c2:90:dc:57:f1:d1:84:d0:70:78:9e:36:52:fe: 20:b8:bc:42:56:ec:26:55:bc:1d:1d:34:b5:af:24:d4:7f:9d: 65:b3:ed:55:28:ff:b5:59:00:e0:00:f4:8c:9a:1f:76:d3:9b: 49:e4:1b:f8:e5:49:5d:0b:86:eb:f3:ed:63:bb:ea:69:2d:b3: 82:3a:e3:93:b4:44:25:aa:cc:71:c2:62:0d:1d:80:7f:ea:f4: 30:13:f3:83:23:7d:ee:4b:f8:8f:6c:d2:20:c6:67:9b:42:75: 4d:5c:d9:cb:ea:39:3f:d7:69:11:59:8c:87:e9:49:c3:31:87: 51:9c:90:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBFQjUxMTAvBgNVBAUTKEE2NTAyOTBBQkM3NDE5RjQyMEU0MDFCQkIzQTQ0RDA4 MTNEMUYxNjkwHhcNMjUwNDE2MjM1NTA4WhcNMjUwNDIzMjM1NTA4WjAYMRYwFAYD VQQDEw02ODAwNDM1Yy1lZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNbaFb37KcAZnN6w/2RNZbru94nsj+AoAr/C5K8wq9mKjcPrAXXfzvio7vNm 7DjNPi79S3fgvzwMGVhBcpqYNw+qfFEARgFxBjlIagq/NXan+VwuzUu7lNu86iz7 oktf17hsbNLpQsQAOg53glX+YE0UlH/ssApCKtUSHQ5xCgoEvI74bjZcH7bveNhn 6rTZqouuA9Y/+PIdics2ox096eJmSNz2GZMxjXoa5bdaU3kSRQqBdaC9ffFgIhyG LI9D5UKwhDHC3waxb5ZfAVmxW7K9rzMb09orbYA0L0WUaFIQ5jz3WNOp1zjJnS8O YyaY3gUCkGy359t07R9moWYVZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPr0xye 7B3sNoqp1NmXFaS/l2v5MB8GA1UdIwQYMBaAFKZQKQq8dBn0IOQBu7OkTQgT0fFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEVCNS9FNEVFOTJDRTU1 RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdmUWc1QUc3czZSTkNCUFI4 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsQXBDcngwR2ZRZzVBRzdzNlJOQ0JQUjhXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MEVCNS9FNEVFOTJDRTU1RkExMUVDQUFFODBFNDFDNEY5QUUwMi9wbEFwQ3J4MEdm UWc1QUc3czZSTkNCUFI4V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbx6Q3eTVb6SmroAXlldoM3RB6skd+joKIdCdMR4JmrSYh9rfzqUSx WcE0zSbSU6HhgWm7pxA8NK+PGY0+ZTpnDtekYP0x0Mmz8grsCwuG8oxhLJtVvlVg PVi6exQskkfB2D37oACHgTJVR7koeoBAWHbRfBpZbOERm4LNKhRRSrVowpDcV/HR hNBweJ42Uv4guLxCVuwmVbwdHTS1ryTUf51ls+1VKP+1WQDgAPSMmh9205tJ5Bv4 5UldC4br8+1ju+ppLbOCOuOTtEQlqsxxwmINHYB/6vQwE/ODI33uS/iPbNIgxmeb QnVNXNnL6jk/12kRWYyH6UnDMYdRnJAS -----END CERTIFICATE-----Generated at Fri Apr 18 05:45:11 2025 by rpki-client