$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json) Hash identifier: 7x5MYAlpld5GsgSxFpCOdEvgh+qbFOx0Q4yqeELoXKU= Subject key identifier: 6F:88:E6:AE:F1:09:1C:31:2B:A6:60:F1:8D:BC:53:F4:F6:31:C5:65 Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 Certificate issuer: /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft Manifest number: 4B Signing time: Thu 17 Apr 2025 06:08:37 +0000 Manifest this update: Thu 17 Apr 2025 06:08:37 +0000 Manifest next update: Thu 24 Apr 2025 06:08:37 +0000 Files and hashes: 1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: ZOAbnJ+tFTQFtN6uxEfaBH+V45jOc6GDXpM69xs4blY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Validity Not Before: Apr 17 06:08:37 2025 GMT Not After : Apr 24 06:08:37 2025 GMT Subject: CN=68009ae5-9dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:a9:e6:d0:90:38:4b:6b:40:0a:d8:15:c8: 06:8f:90:1b:f1:66:68:d9:ce:cb:14:f2:95:21:64: ae:3d:bd:85:42:d9:8d:03:39:f2:ec:7a:d0:1d:d9: 07:6f:f9:b0:58:c8:92:cf:5d:b2:a6:c4:6a:f5:12: 05:e5:f7:0b:c8:5c:d0:20:77:67:34:ef:7a:55:4d: 41:fd:69:7f:bc:1a:b7:61:a9:55:9d:25:cf:d3:47: 5f:32:69:c9:79:bb:e3:28:ef:ef:1e:fc:ea:93:da: bd:2d:bc:3b:cd:5e:48:7c:a5:27:68:73:02:5b:7c: 78:47:f1:17:63:2b:1d:62:65:a6:16:0d:dd:57:9c: 49:4d:b1:e9:f8:5a:82:3b:6e:8b:43:85:bc:31:75: 6e:17:e0:e4:04:85:2e:15:1e:7f:1f:4e:ff:97:8c: ef:46:fd:e1:f8:b0:d2:91:f2:82:ba:d8:29:b2:70: a1:2f:e2:c4:13:11:10:9b:1d:11:68:f0:41:12:53: f6:c0:dc:49:e5:26:2a:c5:af:d8:09:f2:84:40:f4: 17:f8:a7:01:bf:64:6f:8b:ce:04:45:ed:02:a2:23: 9f:d8:db:be:93:cd:b0:e0:3a:16:34:9a:f7:ae:a1: e5:ef:14:67:17:ed:70:7b:4d:38:e7:67:33:29:69: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:E6:AE:F1:09:1C:31:2B:A6:60:F1:8D:BC:53:F4:F6:31:C5:65 X509v3 Authority Key Identifier: keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:98:4a:39:72:03:68:fa:0b:93:04:6d:a9:b9:36:0f:09:95: 20:cd:7c:64:bc:a0:91:52:ab:b8:89:04:e1:fe:56:d6:09:81: 3a:f0:27:58:ed:4f:de:15:f5:92:5c:1a:ba:30:e9:f4:53:a3: e8:42:a3:41:eb:68:a5:23:8d:d2:73:4b:c2:e9:6b:eb:f1:7f: ff:a1:c2:df:2f:29:a4:11:40:0b:40:53:d9:77:15:07:71:58: 03:ff:23:2e:d0:18:09:fa:92:87:90:92:33:1d:a9:4b:44:72: 86:29:5b:19:85:14:a9:e5:6b:11:75:cd:31:75:1b:e2:ac:17: a2:50:35:d1:d2:fe:37:fd:c7:1a:cd:fc:55:3f:80:01:b5:ea: 99:28:89:05:e7:c2:94:a1:f1:03:34:97:a5:56:e8:e4:f2:8b: 89:dc:d5:fe:a4:95:68:60:46:b1:e7:21:df:73:ff:5c:26:ee: 74:2b:e2:b1:bc:52:ca:0d:2a:8d:20:5c:a0:1d:f4:73:64:42: 83:42:07:38:34:1f:03:dd:bf:71:e4:ec:ce:a9:6e:a2:c2:32: 90:81:30:49:3c:ba:e0:3b:4a:0c:b4:d8:d7:5d:be:54:11:64: 60:ac:73:68:38:b5:f3:74:82:0e:84:27:43:19:52:d8:f4:a5: 48:f5:d6:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzMyNTExMC8GA1UEBRMoNTNDMDhCREEwNEJDMDUzMjIxRUIyNzNBQTIxNUNDRDk1 QzAwQzM5MjAeFw0yNTA0MTcwNjA4MzdaFw0yNTA0MjQwNjA4MzdaMBgxFjAUBgNV BAMTDTY4MDA5YWU1LTlkZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRUKnm0JA4S2tACtgVyAaPkBvxZmjZzssU8pUhZK49vYVC2Y0DOfLsetAd2Qdv +bBYyJLPXbKmxGr1EgXl9wvIXNAgd2c073pVTUH9aX+8GrdhqVWdJc/TR18yacl5 u+Mo7+8e/OqT2r0tvDvNXkh8pSdocwJbfHhH8RdjKx1iZaYWDd1XnElNsen4WoI7 botDhbwxdW4X4OQEhS4VHn8fTv+XjO9G/eH4sNKR8oK62CmycKEv4sQTERCbHRFo 8EESU/bA3EnlJirFr9gJ8oRA9Bf4pwG/ZG+LzgRF7QKiI5/Y276TzbDgOhY0mveu oeXvFGcX7XB7TTjnZzMpaWVXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb4jmrvEJ HDErpmDxjbxT9PYxxWUwHwYDVR0jBBgwFoAUU8CL2gS8BTIh6yc6ohXM2VwAw5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzI1LzgzMzhDNEQ2QUFF OTExRUZCNzIxQzI1REM0RjlBRTAyL1U4Q0wyZ1M4QlRJaDZ5YzZvaFhNMlZ3QXc1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVThDTDJnUzhCVEloNnljNm9oWE0yVndBdzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzI1LzgzMzhDNEQ2QUFFOTExRUZCNzIxQzI1REM0RjlBRTAyL1U4Q0wyZ1M4QlRJ aDZ5YzZvaFhNMlZ3QXc1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKYSjlyA2j6C5MEbam5Ng8JlSDNfGS8oJFSq7iJBOH+VtYJgTrwJ1jt T94V9ZJcGrow6fRTo+hCo0HraKUjjdJzS8Lpa+vxf/+hwt8vKaQRQAtAU9l3FQdx WAP/Iy7QGAn6koeQkjMdqUtEcoYpWxmFFKnlaxF1zTF1G+KsF6JQNdHS/jf9xxrN /FU/gAG16pkoiQXnwpSh8QM0l6VW6OTyi4nc1f6klWhgRrHnId9z/1wm7nQr4rG8 UsoNKo0gXKAd9HNkQoNCBzg0HwPdv3Hk7M6pbqLCMpCBMEk8uuA7Sgy02NddvlQR ZGCsc2g4tfN0gg6EJ0MZUtj0pUj11tM= -----END CERTIFICATE-----Generated at Fri Apr 18 20:41:31 2025 by rpki-client