$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json) Hash identifier: eqjweRKNXrLCHPHIz5PjB9uAndaeZ8KKR3D8XxZkeww= Subject key identifier: EB:86:E3:E3:CC:C3:D3:17:8D:05:BB:45:3C:19:AC:23:36:BF:43:A7 Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 Certificate issuer: /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft Manifest number: 0668 Signing time: Fri 04 Apr 2025 22:28:42 +0000 Manifest this update: Fri 04 Apr 2025 22:28:41 +0000 Manifest next update: Fri 11 Apr 2025 22:28:41 +0000 Files and hashes: 1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: Oeim8s1lGXqvgq+bv2JrmzzO0Rw/U8inaIXj5wv/JaQ=) 2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: d5GYDhOIlD2Y6V3aPBFRagLvqFIYFYSveCQyFaynEfU=) 3: 625827FC74D811EB99569279C4F9AE02.roa (hash: nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EBC Validity Not Before: Apr 4 22:28:41 2025 GMT Not After : Apr 11 22:28:41 2025 GMT Subject: CN=67f05d1a-0baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:2b:87:3a:36:fc:38:b8:70:61:14:c3:22: bc:b7:91:a4:e3:4e:18:29:06:69:47:d3:c2:2d:24: ea:d4:6c:de:1f:42:c1:6b:28:71:cb:1a:db:c8:62: 87:e8:33:97:75:4e:42:4f:04:34:8f:49:6e:5c:00: d5:8a:2b:81:45:37:4a:94:b7:f1:a2:1f:5c:98:00: 4a:26:1d:ec:f1:0d:0a:d2:3a:2e:6d:f4:ce:37:71: e9:19:36:8b:83:45:1a:0a:69:cc:ba:25:bb:89:07: 82:d7:68:12:68:b2:9a:66:86:e3:c6:ad:44:a2:c3: 0c:63:e9:d3:b1:15:f2:1b:b0:b8:2d:16:7b:c3:61: 87:72:ea:b3:de:9a:19:e3:4c:6f:97:31:be:29:ab: 93:8d:5a:e5:4c:01:9c:0f:36:63:9d:b7:56:19:50: 15:05:e2:05:5f:c8:e0:83:c9:15:ee:d8:aa:78:e8: a7:a3:bc:57:fd:0b:2f:a9:04:ef:4b:87:cc:ab:dd: b1:76:c4:8a:b0:f7:80:fe:2e:f9:19:4c:79:73:8e: 37:7e:b2:7b:36:97:ba:13:af:25:d1:2d:05:15:21: a3:a6:c4:21:90:80:45:56:e5:52:f8:2f:6e:54:37: 2e:82:cd:89:7a:e9:fd:97:8c:32:38:b7:2c:3b:dc: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:86:E3:E3:CC:C3:D3:17:8D:05:BB:45:3C:19:AC:23:36:BF:43:A7 X509v3 Authority Key Identifier: keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d6:d5:5d:4d:cc:24:59:91:12:ca:d8:e8:9d:77:b8:8d:e8: b0:7e:b2:7d:c5:bb:d9:ee:85:85:64:0a:43:f2:af:35:81:44: a5:4f:50:de:54:07:4c:50:37:af:a0:84:d5:c9:96:73:7c:ff: 9b:41:02:79:5a:8c:89:d2:27:4f:d3:32:18:48:ce:c7:9e:20: 31:99:a9:3f:37:c1:62:82:1c:f7:f2:1f:22:fa:c0:ca:c9:bf: 25:26:f2:07:ce:13:18:4d:73:89:7b:8a:76:1a:07:27:c6:1a: a5:f2:46:5c:3e:91:0c:55:67:18:06:31:5c:b3:f5:27:8d:bc: 5c:4c:ed:01:36:5a:10:ae:07:a0:b2:a7:ab:7c:08:75:89:d2: 17:72:ed:77:2e:61:14:32:86:8c:98:01:71:d4:08:34:e5:ca: 16:ca:fa:f9:ef:bc:27:6f:a8:5f:32:a2:df:3c:13:0c:73:ef: bc:96:81:3d:e5:ce:77:8b:5d:94:c1:8c:5d:5a:a3:0b:64:c7: 31:38:fb:7e:87:3f:8f:7e:8e:5f:7e:b1:0b:33:7b:64:de:98: b7:0f:e1:10:e1:1b:50:71:de:a4:c4:2a:9b:1f:b7:4d:df:2e: a1:72:5e:a4:6f:3a:64:b6:bc:ec:6e:4c:b4:5f:5b:05:9b:af: 78:da:d8:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz NEExNzIzMTIwHhcNMjUwNDA0MjIyODQxWhcNMjUwNDExMjIyODQxWjAYMRYwFAYD VQQDEw02N2YwNWQxYS0wYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Iorhzo2/Di4cGEUwyK8t5Gk404YKQZpR9PCLSTq1GzeH0LBayhxyxrbyGKH 6DOXdU5CTwQ0j0luXADViiuBRTdKlLfxoh9cmABKJh3s8Q0K0joubfTON3HpGTaL g0UaCmnMuiW7iQeC12gSaLKaZobjxq1EosMMY+nTsRXyG7C4LRZ7w2GHcuqz3poZ 40xvlzG+KauTjVrlTAGcDzZjnbdWGVAVBeIFX8jgg8kV7tiqeOino7xX/QsvqQTv S4fMq92xdsSKsPeA/i75GUx5c443frJ7Npe6E68l0S0FFSGjpsQhkIBFVuVS+C9u VDcugs2Jeun9l4wyOLcsO9yn2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuG4+PM w9MXjQW7RTwZrCM2v0OnMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0 RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVCQy8zODgzNDE0ODc0RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExw TzRpYzgtT0dtc0Ewb1hJeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM1tVdTcwkWZESytjonXe4jeiwfrJ9xbvZ7oWFZApD8q81gUSlT1De VAdMUDevoITVyZZzfP+bQQJ5WoyJ0idP0zIYSM7HniAxmak/N8Fighz38h8i+sDK yb8lJvIHzhMYTXOJe4p2Ggcnxhql8kZcPpEMVWcYBjFcs/UnjbxcTO0BNloQrgeg sqerfAh1idIXcu13LmEUMoaMmAFx1Ag05coWyvr577wnb6hfMqLfPBMMc++8loE9 5c53i12UwYxdWqMLZMcxOPt+hz+Pfo5ffrELM3tk3pi3D+EQ4RtQcd6kxCqbH7dN 3y6hcl6kbzpktrzsbky0X1sFm6942th/ -----END CERTIFICATE-----Generated at Sun Apr 6 22:03:56 2025 by rpki-client