$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json) Hash identifier: GkZABHFT6MblA9sRnGWPmOzoL8zXZTrKAdJkosUyM+o= Subject key identifier: A0:13:75:1D:9D:DC:C8:7B:D0:57:6B:0F:A3:17:03:90:97:E4:C9:56 Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft Manifest number: 046A Signing time: Sat 31 May 2025 00:19:59 +0000 Manifest this update: Sat 31 May 2025 00:19:59 +0000 Manifest next update: Sat 07 Jun 2025 00:19:59 +0000 Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: s7KmTb+vWUy+AL7LzSGTKuf68KaBE/UTwXweYeqMIfI=) 2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: VtnOs46KlpQVSJ9THDVnSS8EzLS3A9xUSm3n/4RNrWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369 Validity Not Before: May 31 00:19:59 2025 GMT Not After : Jun 7 00:19:59 2025 GMT Subject: CN=683a4b2f-a3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fc:99:54:aa:57:94:de:c6:4e:39:a3:62:13: 10:1b:ce:06:e7:fa:eb:39:63:d9:8b:1f:17:2c:3c: 78:9d:7d:51:0d:72:ac:f7:b7:07:b2:2a:0c:06:0f: 82:b5:b3:42:ef:b3:bc:47:92:98:3a:e2:1e:21:19: 1e:77:d7:83:84:5e:e9:ff:29:6e:62:37:b2:a3:36: 56:59:ba:38:81:ef:3c:5a:7d:27:ac:98:be:f9:dc: f2:dd:16:ce:35:40:a5:93:c8:6c:15:b2:03:86:d1: 4f:e6:b6:42:19:f8:1b:03:0d:c4:02:66:79:17:9f: 53:86:1c:4a:b9:fa:b2:5b:e2:15:fc:2a:1e:f7:93: a6:6c:51:02:20:6d:66:f4:1d:71:91:45:35:f9:0d: f4:a1:a5:c6:f3:9a:14:e8:f8:79:1d:c1:af:38:69: cd:3f:b5:3e:89:ad:d1:d6:92:45:11:e9:4b:d7:f6: 56:bc:8f:3c:e0:6d:dc:fe:92:f7:f2:60:f2:8d:aa: fc:29:cc:96:60:b1:6f:7f:78:69:0c:ba:29:76:83: a3:4d:e2:53:89:6b:b0:92:d7:39:62:d1:5b:ac:61: 1a:76:15:1e:b0:c6:03:0c:9f:45:9f:0e:c8:a5:6c: 9c:db:89:f4:25:4b:ed:77:7b:2b:5a:b9:9f:71:76: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:13:75:1D:9D:DC:C8:7B:D0:57:6B:0F:A3:17:03:90:97:E4:C9:56 X509v3 Authority Key Identifier: keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:32:9e:20:74:cb:8a:aa:bb:87:37:6d:a8:c7:ac:b9:e4: 2e:26:57:4d:59:03:f7:21:bf:7e:db:82:ac:34:fe:d3:12:fd: ad:46:9f:16:aa:8a:f4:94:9e:eb:ad:a1:01:01:9c:95:b3:00: d1:d7:ce:88:e2:5e:c3:72:65:06:4c:6b:2d:15:4e:bb:3d:26: 2a:aa:25:a6:ee:9d:9e:55:f3:62:23:81:95:aa:33:53:cb:bf: 9b:6b:ab:ed:e9:e5:ff:06:00:ce:43:a1:70:dd:9c:32:ae:2a: d5:6e:d8:2f:52:ae:c8:22:90:e4:b9:8b:cb:02:8a:f8:7b:df: bb:d7:72:d0:f5:43:5a:eb:d0:81:0a:91:d8:09:0b:bc:88:f5: f5:2f:6e:1c:dc:9d:f4:6c:34:54:5b:7a:1d:a7:85:93:66:49: ed:78:71:c0:3c:a5:25:02:8c:07:47:69:75:9d:0b:f8:92:51: 2f:7c:b6:a7:d5:a3:ea:56:98:c9:34:39:8e:17:33:8d:08:a6: e4:aa:3f:80:83:9c:02:38:f1:06:65:c2:7e:e9:f2:ff:6c:1a: 0f:b7:f6:5e:b7:ce:ca:11:cf:79:be:94:59:bb:7a:d9:61:99: 74:da:1f:f5:c0:4e:71:98:8a:bb:79:9f:a6:86:1d:3e:9e:4c: 7c:cf:4f:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNDExMTAvBgNVBAUTKDMyRTBGNzAwRTM4NzI0NTFBMUE4MzJDRDdEREU0MTc1 QkZCQTgzNjkwHhcNMjUwNTMxMDAxOTU5WhcNMjUwNjA3MDAxOTU5WjAYMRYwFAYD VQQDEw02ODNhNGIyZi1hM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vyZVKpXlN7GTjmjYhMQG84G5/rrOWPZix8XLDx4nX1RDXKs97cHsioMBg+C tbNC77O8R5KYOuIeIRked9eDhF7p/yluYjeyozZWWbo4ge88Wn0nrJi++dzy3RbO NUClk8hsFbIDhtFP5rZCGfgbAw3EAmZ5F59ThhxKufqyW+IV/Coe95OmbFECIG1m 9B1xkUU1+Q30oaXG85oU6Ph5HcGvOGnNP7U+ia3R1pJFEelL1/ZWvI884G3c/pL3 8mDyjar8KcyWYLFvf3hpDLopdoOjTeJTiWuwktc5YtFbrGEadhUesMYDDJ9Fnw7I pWyc24n0JUvtd3srWrmfcXZD2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKATdR2d 3Mh70FdrD6MXA5CX5MlWMB8GA1UdIwQYMBaAFDLg9wDjhyRRoagyzX3eQXW/uoNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0MS8xNkMwQTcxNjRC NkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpGR2hxRExOZmQ1QmRiLTZn MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL011RDNBT09ISkZHaHFETE5mZDVCZGItNmcyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI0MS8xNkMwQTcxNjRCNkUxMUVDODFERDlCM0FDNEY5QUUwMi9NdUQzQU9PSEpG R2hxRExOZmQ1QmRiLTZnMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKLzKeIHTLiqq7hzdtqMesueQuJldNWQP3Ib9+24KsNP7TEv2tRp8W qor0lJ7rraEBAZyVswDR186I4l7DcmUGTGstFU67PSYqqiWm7p2eVfNiI4GVqjNT y7+ba6vt6eX/BgDOQ6Fw3ZwyrirVbtgvUq7IIpDkuYvLAor4e9+713LQ9UNa69CB CpHYCQu8iPX1L24c3J30bDRUW3odp4WTZknteHHAPKUlAowHR2l1nQv4klEvfLan 1aPqVpjJNDmOFzONCKbkqj+Ag5wCOPEGZcJ+6fL/bBoPt/Zet87KEc95vpRZu3rZ YZl02h/1wE5xmIq7eZ+mhh0+nkx8z09b -----END CERTIFICATE-----Generated at Sat May 31 16:27:00 2025 by rpki-client