$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft File: RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json) Hash identifier: dEjo85LaiKa5b0JcmxR5Qj4OyV5S1PZdNav5ty7gMeM= Subject key identifier: B8:94:B0:A7:75:35:FF:88:88:F6:D4:5F:38:C0:A1:53:15:DC:F5:BC Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86 Certificate issuer: /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft Manifest number: 01A0 Signing time: Thu 03 Apr 2025 02:40:37 +0000 Manifest this update: Thu 03 Apr 2025 02:40:36 +0000 Manifest next update: Thu 10 Apr 2025 02:40:36 +0000 Files and hashes: 1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: IUfTSGll23jZGmfXlBOjcQ/tpDxzvObUkh+ER19eoMg=) 2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: Lgy8vm2n/ceKz+w+M1ZDWnunc26MQi1fRDcUPx4mLN8=) 3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: acIP9bNBSWQVEKBII6hnoV+cuy/+F66JRfGEFST3yH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194590 Validity Not Before: Apr 3 02:40:36 2025 GMT Not After : Apr 10 02:40:36 2025 GMT Subject: CN=67edf525-3733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:ab:85:5d:55:c2:5c:cb:57:c5:46:53:b8: 95:39:53:2b:2c:b2:fc:3f:b4:8a:5f:84:a0:f6:ab: 66:c3:48:61:b2:5f:93:bb:3f:cc:0e:a9:21:e0:86: 32:95:86:57:3b:bb:fc:e9:b4:31:c2:39:1b:c1:6e: d9:68:2d:ff:9a:ea:e3:13:a1:a3:9c:1a:cf:21:0f: 34:44:37:26:34:f7:e0:d8:3c:09:21:77:1e:b5:f8: f6:bd:10:3c:08:43:93:51:85:da:a8:e2:52:6f:a8: e3:8a:0e:68:62:d6:e3:f6:c9:8e:ea:d9:60:3c:10: ee:54:c0:35:e7:f4:8f:b5:a6:64:b4:45:aa:90:84: 06:54:d2:fa:74:41:13:97:1f:2c:ff:89:a1:be:0d: 74:86:f2:75:0e:d9:16:84:d5:9b:4b:22:d9:f2:a3: f2:49:95:57:fb:90:08:bd:68:44:ad:8a:04:7d:fd: b8:ed:c9:8e:ab:fb:f0:c4:63:82:72:79:3c:79:82: 01:d2:54:1b:48:26:4b:b6:77:bc:f1:99:ab:a5:15: a9:13:31:32:da:17:da:d2:df:df:08:eb:5c:d9:41: 1b:01:8f:c7:7d:ae:d7:a5:7e:14:40:59:c5:fa:92: 49:42:c5:76:e8:c4:30:c2:ab:a7:61:49:2a:d4:1a: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:B0:A7:75:35:FF:88:88:F6:D4:5F:38:C0:A1:53:15:DC:F5:BC X509v3 Authority Key Identifier: keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:87:bf:b6:4d:ff:0c:a5:75:f9:68:b4:8e:19:49:af:c6:8d: 8a:b7:83:b1:fd:65:f6:73:8b:c0:f3:26:81:a6:7e:4e:19:32: b0:66:91:6d:9a:2e:13:67:48:1c:14:a1:17:5a:30:61:b1:8d: d4:3a:46:b1:16:c3:f4:2e:ec:da:df:d4:c1:cd:c7:77:33:39: b3:f7:06:94:67:38:6e:2a:54:68:dc:f7:a9:5a:69:e8:8e:26: d8:89:9d:9b:d2:c3:ef:e0:6b:56:6f:be:81:19:d7:e7:5d:5b: 01:04:79:0f:c6:a6:c8:72:40:f5:95:5a:f1:b2:a0:2a:98:5d: 8e:ee:b8:09:57:9f:3a:f9:26:91:4a:d2:ae:7a:50:7f:a6:e9: a8:87:77:3d:f9:2d:18:68:16:4f:3e:11:e6:29:b8:c5:6e:7c: 5a:ac:95:ea:8f:0e:f1:53:37:4a:4a:74:01:2f:a7:7f:cb:5c: f8:7f:fe:39:7d:fe:51:18:99:42:7c:59:cc:0c:d3:d4:71:73: 95:7a:d2:44:e3:c4:c8:8c:ee:15:1c:a8:19:d5:16:dc:0f:e5: d9:ba:7f:17:13:e9:a7:b2:0d:25:30:9e:83:6f:a6:1a:e2:fd: 84:18:7f:ce:e9:60:34:b2:c7:88:01:0c:32:ae:92:e6:a3:88: 37:d5:b6:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ1OTAxMTAvBgNVBAUTKDQ0OEE2RDgyOTc2QTU1REM1NzBCQTU4MDM3NzBBQzZB RERCQkQ4ODYwHhcNMjUwNDAzMDI0MDM2WhcNMjUwNDEwMDI0MDM2WjAYMRYwFAYD VQQDEw02N2VkZjUyNS0zNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCCrhV1VwlzLV8VGU7iVOVMrLLL8P7SKX4Sg9qtmw0hhsl+Tuz/MDqkh4IYy lYZXO7v86bQxwjkbwW7ZaC3/murjE6GjnBrPIQ80RDcmNPfg2DwJIXcetfj2vRA8 CEOTUYXaqOJSb6jjig5oYtbj9smO6tlgPBDuVMA15/SPtaZktEWqkIQGVNL6dEET lx8s/4mhvg10hvJ1DtkWhNWbSyLZ8qPySZVX+5AIvWhErYoEff247cmOq/vwxGOC cnk8eYIB0lQbSCZLtne88ZmrpRWpEzEy2hfa0t/fCOtc2UEbAY/Hfa7XpX4UQFnF +pJJQsV26MQwwqunYUkq1BpBxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiUsKd1 Nf+IiPbUXzjAoVMV3PW8MB8GA1UdIwQYMBaAFESKbYKXalXcVwulgDdwrGrdu9iG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU5MC8zNjM1NTk1Mjkx OUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZkeFhDNldBTjNDc2F0Mjcy SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJcHRncGRxVmR4WEM2V0FOM0NzYXQyNzJJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDU5MC8zNjM1NTk1MjkxOUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZk eFhDNldBTjNDc2F0MjcySVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFh7+2Tf8MpXX5aLSOGUmvxo2Kt4Ox/WX2c4vA8yaBpn5OGTKwZpFt mi4TZ0gcFKEXWjBhsY3UOkaxFsP0Luza39TBzcd3Mzmz9waUZzhuKlRo3PepWmno jibYiZ2b0sPv4GtWb76BGdfnXVsBBHkPxqbIckD1lVrxsqAqmF2O7rgJV586+SaR StKuelB/pumoh3c9+S0YaBZPPhHmKbjFbnxarJXqjw7xUzdKSnQBL6d/y1z4f/45 ff5RGJlCfFnMDNPUcXOVetJE48TIjO4VHKgZ1RbcD+XZun8XE+mnsg0lMJ6Db6Ya 4v2EGH/O6WA0sseIAQwyrpLmo4g31bZI -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:56 2025 by rpki-client