$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: 17QIqlaU7Opxm0pSQO0AiQc6Avebib47NIKHuoY/M9Q= Subject key identifier: 45:31:DA:B5:F3:40:A3:54:F1:69:E6:3F:43:92:45:27:1C:5C:7F:F2 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: CA Signing time: Thu 13 Mar 2025 03:53:52 +0000 Manifest this update: Thu 13 Mar 2025 03:53:52 +0000 Manifest next update: Thu 20 Mar 2025 03:53:52 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: OWcmuwBB65hqQTT3M2mX8QqJEWvjuzVdcd5Y4T/VLQ0=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: YjW6NRyoT2Yd6bOqBMqlNLXFCINZXzceER+JobJKz/s=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: yJ7MqVkk1tgytYWvBl1+oFmFkyxkl54djaWZOByH5xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82 Validity Not Before: Mar 13 03:53:52 2025 GMT Not After : Mar 20 03:53:52 2025 GMT Subject: CN=67d256d0-fcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:78:e5:87:2e:20:d2:ba:82:81:59:27:f4: e3:12:0d:92:bb:47:03:00:20:25:9d:bf:89:ab:4b: d2:2d:a8:7e:c9:b4:f8:a8:35:c3:cf:fb:ee:f5:ef: 16:d6:f9:85:d9:70:81:4d:59:6f:36:73:79:5b:ee: ae:95:53:cf:74:8a:ef:1c:47:ca:47:62:b0:ca:51: d1:74:a6:01:e9:cc:69:64:24:18:b4:b0:8e:2b:e7: a7:7d:56:03:37:30:4a:89:72:12:3a:24:c5:b2:74: cd:aa:fd:0d:43:28:f2:05:0f:d9:ad:89:32:64:8f: 67:a2:35:f8:b8:ae:6b:71:0e:7c:0c:9b:df:e0:f2: 9d:a7:b9:b2:bf:14:8e:5d:c4:1b:58:1f:29:89:2e: 46:46:fa:2e:09:74:d1:07:20:cf:cd:87:ad:94:1b: 7a:22:d6:8d:e2:6f:7d:8b:5c:22:aa:ab:ed:32:17: d0:6e:b3:37:40:03:a8:86:a1:31:6c:16:b1:35:75: 45:97:c7:6f:d3:c8:9b:0f:1f:9c:63:7b:94:fd:66: 1c:91:12:05:bb:86:94:5c:f5:46:43:af:5c:8c:21: 6c:95:3f:f5:4a:91:36:87:4b:df:95:b2:87:98:46: 67:14:63:8a:23:13:8a:db:89:77:38:d1:e7:47:48: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:DA:B5:F3:40:A3:54:F1:69:E6:3F:43:92:45:27:1C:5C:7F:F2 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:59:bd:74:04:23:8f:56:a2:51:d3:20:6c:89:f8:33:ce:20: 7b:da:00:28:78:56:38:24:e7:17:ff:a8:3f:85:29:fa:bc:9f: 2f:f5:ee:b0:87:38:c8:54:0b:5d:40:e8:f2:12:65:6d:13:0e: c6:d0:28:9f:5e:75:6c:95:f3:03:a3:9b:d7:67:30:cd:af:a6: cc:0b:ab:33:03:fa:b2:cf:97:62:8b:4f:6b:3b:a8:20:46:2f: 30:1a:85:34:62:ba:69:00:cd:59:ae:83:61:b1:a9:29:fc:c1: c7:a1:a2:89:67:0b:8c:f6:09:d0:41:61:b8:a0:57:1e:aa:94: eb:fc:f3:a9:15:87:2c:ca:4d:4a:58:ed:bf:95:e3:2e:97:db: 14:18:de:7c:36:84:c2:2d:8b:c2:03:36:c1:d9:23:8b:1e:4d: fa:dd:52:b8:df:8a:20:86:10:5a:b8:69:8f:84:b1:b2:11:3b: 4b:5d:dd:bf:ab:e1:22:72:0d:ad:df:54:2f:4d:6b:a0:9f:9c: f2:da:a9:d7:b2:a8:61:c5:1f:3a:59:73:5c:b2:2a:84:a5:7b: 97:dc:a5:dc:42:cb:d8:9b:5c:99:23:58:77:41:a5:fd:d1:9d: 17:6e:95:6f:53:20:51:7d:99:10:99:eb:85:b4:df:69:bb:c7: 08:d5:57:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwMzEzMDM1MzUyWhcNMjUwMzIwMDM1MzUyWjAYMRYwFAYD VQQDEw02N2QyNTZkMC1mY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qJ45YcuINK6goFZJ/TjEg2Su0cDACAlnb+Jq0vSLah+ybT4qDXDz/vu9e8W 1vmF2XCBTVlvNnN5W+6ulVPPdIrvHEfKR2KwylHRdKYB6cxpZCQYtLCOK+enfVYD NzBKiXISOiTFsnTNqv0NQyjyBQ/ZrYkyZI9nojX4uK5rcQ58DJvf4PKdp7myvxSO XcQbWB8piS5GRvouCXTRByDPzYetlBt6ItaN4m99i1wiqqvtMhfQbrM3QAOohqEx bBaxNXVFl8dv08ibDx+cY3uU/WYckRIFu4aUXPVGQ69cjCFslT/1SpE2h0vflbKH mEZnFGOKIxOK24l3ONHnR0j+SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUx2rXz QKNU8WnmP0OSRSccXH/yMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmWb10BCOPVqJR0yBsifgzziB72gAoeFY4JOcX/6g/hSn6vJ8v9e6w hzjIVAtdQOjyEmVtEw7G0CifXnVslfMDo5vXZzDNr6bMC6szA/qyz5dii09rO6gg Ri8wGoU0YrppAM1ZroNhsakp/MHHoaKJZwuM9gnQQWG4oFceqpTr/POpFYcsyk1K WO2/leMul9sUGN58NoTCLYvCAzbB2SOLHk363VK434oghhBauGmPhLGyETtLXd2/ q+Eicg2t31QvTWugn5zy2qnXsqhhxR86WXNcsiqEpXuX3KXcQsvYm1yZI1h3QaX9 0Z0XbpVvUyBRfZkQmeuFtN9pu8cI1VfF -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:54 2025 by rpki-client