$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: 3L2IWTo6GpWP2z6ge+OcsD5kWO4iWA7KpPCwPMZgHHE= Subject key identifier: 54:0A:4F:E2:71:86:68:56:33:CE:A2:DC:AC:23:CD:C6:01:8F:33:80 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 0880 Signing time: Wed 16 Apr 2025 20:24:31 +0000 Manifest this update: Wed 16 Apr 2025 20:24:30 +0000 Manifest next update: Wed 23 Apr 2025 20:24:30 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: n9SlHZ6GTbIre4NYy0HY1hq5yXPJXhqIx3I8fALTkxA=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Apr 16 20:24:30 2025 GMT Not After : Apr 23 20:24:30 2025 GMT Subject: CN=680011fe-e753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:f7:74:8b:a3:9f:55:27:d7:6f:06:1a:18: 90:2a:76:39:e1:a3:d4:cb:f9:53:5a:76:b9:c1:97: 5e:21:b6:fd:70:9e:f6:f9:ce:3b:7d:97:96:65:ee: fa:ce:0a:cc:86:49:a9:56:bc:64:2f:4e:2a:62:86: 3f:89:c7:0b:1b:24:30:4c:a6:e0:1b:ae:1a:ac:9a: bb:31:ef:0a:ec:19:10:68:b6:11:57:76:a0:8d:4b: 20:e7:fa:ba:7a:33:e9:b9:18:5a:69:0c:df:80:dc: 9d:24:70:50:a6:cd:5a:f9:b9:6f:dc:5c:d5:17:44: 7c:53:bb:54:d6:09:11:f1:a0:6e:f2:f5:5d:24:49: 30:85:0c:ac:2b:49:c2:9a:d1:89:0c:2c:84:a2:e8: 17:0c:e7:2c:da:0a:ed:80:a2:80:46:d1:8a:63:15: 61:16:fd:e0:1b:74:6c:52:13:1d:e4:b5:c1:3b:df: 2d:50:f4:62:11:70:e1:18:d7:4d:88:b6:50:68:00: d4:12:a7:40:fd:8a:c5:98:25:54:61:97:ac:2d:78: 42:c5:c4:29:74:b7:09:10:21:aa:97:a1:ac:ff:cd: 8c:31:bb:2b:bb:af:7d:e0:40:d9:9c:7a:92:08:b3: 2a:6f:10:2a:57:91:a4:28:68:ca:c6:39:51:0f:1f: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0A:4F:E2:71:86:68:56:33:CE:A2:DC:AC:23:CD:C6:01:8F:33:80 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:66:05:fb:f3:ef:4b:32:85:1e:be:13:49:f4:b2:d1:6c:72: 52:94:ad:d4:76:dd:84:05:52:67:33:19:a7:45:62:80:a5:b5: 9a:2a:41:e0:8e:7f:4f:a8:12:f5:6f:83:80:62:94:26:3f:22: 31:ab:27:a8:96:73:9b:3c:24:81:4b:f6:b2:0a:b2:96:99:0b: 29:a8:68:fd:df:16:af:c3:36:50:50:6d:a4:af:e1:97:8c:72: 61:59:33:df:67:05:e8:7c:d3:49:86:19:54:6c:c0:63:bd:dd: 3b:1d:dd:9b:5e:74:9e:69:22:1c:11:b6:33:04:00:38:84:76: ae:47:38:a5:a4:a4:ab:8f:32:dc:d4:f1:df:93:74:d7:a5:5b: 58:12:40:d8:27:4c:60:67:06:35:ef:3a:66:58:e1:19:8a:34: 9e:4a:90:4e:14:fb:1f:46:4b:fc:ef:74:06:28:7f:b2:90:cd: 4d:74:07:7d:77:16:72:0d:39:4f:b2:33:34:d5:cd:85:a5:a4: 32:eb:d9:78:76:f4:b5:b8:d6:14:15:81:9f:00:64:4e:68:77: eb:ad:dc:99:49:50:4a:d3:8f:e8:58:7e:ce:31:b8:8d:31:dc: 8c:ce:fa:5c:be:2e:f9:81:27:e9:d9:03:82:58:b9:9a:e9:07: db:68:76:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUwNDE2MjAyNDMwWhcNMjUwNDIzMjAyNDMwWjAYMRYwFAYD VQQDEw02ODAwMTFmZS1lNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqL3dIujn1Un128GGhiQKnY54aPUy/lTWna5wZdeIbb9cJ72+c47fZeWZe76 zgrMhkmpVrxkL04qYoY/iccLGyQwTKbgG64arJq7Me8K7BkQaLYRV3agjUsg5/q6 ejPpuRhaaQzfgNydJHBQps1a+blv3FzVF0R8U7tU1gkR8aBu8vVdJEkwhQysK0nC mtGJDCyEougXDOcs2grtgKKARtGKYxVhFv3gG3RsUhMd5LXBO98tUPRiEXDhGNdN iLZQaADUEqdA/YrFmCVUYZesLXhCxcQpdLcJECGql6Gs/82MMbsru6994EDZnHqS CLMqbxAqV5GkKGjKxjlRDx90NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQKT+Jx hmhWM86i3KwjzcYBjzOAMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBZgX78+9LMoUevhNJ9LLRbHJSlK3Udt2EBVJnMxmnRWKApbWaKkHg jn9PqBL1b4OAYpQmPyIxqyeolnObPCSBS/ayCrKWmQspqGj93xavwzZQUG2kr+GX jHJhWTPfZwXofNNJhhlUbMBjvd07Hd2bXnSeaSIcEbYzBAA4hHauRzilpKSrjzLc 1PHfk3TXpVtYEkDYJ0xgZwY17zpmWOEZijSeSpBOFPsfRkv873QGKH+ykM1NdAd9 dxZyDTlPsjM01c2FpaQy69l4dvS1uNYUFYGfAGROaHfrrdyZSVBK04/oWH7OMbiN MdyMzvpcvi75gSfp2QOCWLma6QfbaHa6 -----END CERTIFICATE-----Generated at Thu Apr 17 20:00:20 2025 by rpki-client