$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: h4IdR+gJIcjsPrWUCjr/GUOB2zlNdpbvYanSB7d4o6o= Subject key identifier: 6D:5A:70:66:13:B1:D6:E8:99:6D:51:BA:5B:F9:BD:54:3F:CE:79:88 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: E9 Signing time: Sat 29 Mar 2025 04:49:52 +0000 Manifest this update: Sat 29 Mar 2025 04:49:51 +0000 Manifest next update: Sat 05 Apr 2025 04:49:51 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: JKADJ1RcjRbAQkzY+GeKurA23H3qV224Gz55vRJtlcg=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: 0bfhohRWkw+mHnMOok0JegQjrp5R3WBkt6xVLjqYhaM=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: 9uv33qCd79bYBodXMfJmbwWFz6eg4sXVPhBBvtjp6jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3 Validity Not Before: Mar 29 04:49:51 2025 GMT Not After : Apr 5 04:49:51 2025 GMT Subject: CN=67e77bef-451f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:29:67:59:69:95:e4:8f:c3:74:37:3c:41: 27:53:70:80:be:9d:a1:3b:94:be:f0:77:c8:6e:be: ba:0f:c2:47:85:c1:eb:3b:9d:3e:39:2c:bc:46:bf: 02:9b:ea:8a:09:85:5c:f2:78:bd:e5:82:f3:5c:01: 09:bc:5f:40:b5:eb:f1:70:ff:6f:22:78:67:a1:d8: f2:d8:10:15:a2:54:95:dc:20:6e:1f:9c:f6:0a:e6: 9a:6b:2e:fc:b1:7c:3d:c5:e2:46:17:8c:d1:38:70: 3f:23:2d:37:ff:c4:ee:7a:a6:7a:87:c1:b8:8c:63: 99:85:3f:76:76:12:89:40:64:11:f3:01:26:8d:9d: b0:b3:fe:82:99:04:e5:96:a2:5d:15:8c:9b:6d:8e: de:10:ff:66:1d:26:3d:36:0b:bb:d8:93:0c:5c:19: c0:81:5c:4e:bd:64:14:77:1d:c8:da:d1:36:41:11: 8a:4d:55:a1:f9:ce:8e:c1:a2:55:74:4f:cc:0a:43: 29:94:a2:ca:d9:ed:d3:b4:88:cc:6e:26:9f:4e:7b: 83:1f:01:20:da:4d:64:3b:14:79:fb:68:e0:44:6a: 68:e2:06:2e:3a:5e:af:3e:38:18:e6:5f:17:65:06: 59:04:7a:12:ad:9a:49:6e:a3:a8:dd:03:89:c6:5d: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:70:66:13:B1:D6:E8:99:6D:51:BA:5B:F9:BD:54:3F:CE:79:88 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:57:72:0f:65:1a:0f:e3:e9:8a:c3:6d:d0:24:d5:d3:de: 2d:d3:ad:5d:a7:c9:76:63:c2:0d:77:ef:d0:6a:93:f4:ae:b3: ea:9e:5c:32:e4:b9:f4:b8:a5:2c:44:12:cd:d0:26:2e:f8:4e: 67:29:0c:a3:48:21:82:5e:15:21:ab:0b:a5:be:60:57:c3:1a: 53:b2:d7:f3:3c:f1:bb:72:9a:d7:2b:ed:79:60:a7:e1:e3:bb: 0e:1f:fc:cf:6c:bc:4c:f0:35:9f:6d:d0:21:91:b2:38:5f:b1: b8:07:dc:77:46:bb:9f:ca:50:71:67:29:27:20:2d:d4:3b:95: c8:ed:b3:69:54:08:22:cf:7f:28:d6:57:db:c5:48:b6:b2:4b: b0:4c:99:5a:6a:e1:33:08:80:93:e2:16:11:b0:8a:17:bc:1a: 53:ff:24:c3:09:7e:3d:32:ff:cd:fa:5c:9d:2f:f1:ea:d4:85: e0:5f:4a:95:e9:0e:e2:db:bd:dd:5e:7d:55:2d:66:c2:4b:4f: f2:9e:91:66:9f:f0:f1:66:01:80:e9:12:00:38:5b:3d:9b:01: 78:ea:11:d4:36:45:03:e7:57:a0:62:96:de:6d:23:4e:81:8b: 47:4f:83:93:cb:8e:19:c5:b1:e6:c1:fb:c3:2a:bf:ee:0b:a3: 41:f8:ec:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjUwMzI5MDQ0OTUxWhcNMjUwNDA1MDQ0OTUxWjAYMRYwFAYD VQQDEw02N2U3N2JlZi00NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntspZ1lpleSPw3Q3PEEnU3CAvp2hO5S+8HfIbr66D8JHhcHrO50+OSy8Rr8C m+qKCYVc8ni95YLzXAEJvF9AtevxcP9vInhnodjy2BAVolSV3CBuH5z2Cuaaay78 sXw9xeJGF4zROHA/Iy03/8TueqZ6h8G4jGOZhT92dhKJQGQR8wEmjZ2ws/6CmQTl lqJdFYybbY7eEP9mHSY9Ngu72JMMXBnAgVxOvWQUdx3I2tE2QRGKTVWh+c6OwaJV dE/MCkMplKLK2e3TtIjMbiafTnuDHwEg2k1kOxR5+2jgRGpo4gYuOl6vPjgY5l8X ZQZZBHoSrZpJbqOo3QOJxl1v7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1acGYT sdbomW1Rulv5vVQ/znmIMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNuldyD2UaD+PpisNt0CTV094t061dp8l2Y8INd+/QapP0rrPqnlwy 5Ln0uKUsRBLN0CYu+E5nKQyjSCGCXhUhqwulvmBXwxpTstfzPPG7cprXK+15YKfh 47sOH/zPbLxM8DWfbdAhkbI4X7G4B9x3RrufylBxZyknIC3UO5XI7bNpVAgiz38o 1lfbxUi2skuwTJlaauEzCICT4hYRsIoXvBpT/yTDCX49Mv/N+lydL/Hq1IXgX0qV 6Q7i273dXn1VLWbCS0/ynpFmn/DxZgGA6RIAOFs9mwF46hHUNkUD51egYpbebSNO gYtHT4OTy44ZxbHmwfvDKr/uC6NB+Oz1 -----END CERTIFICATE-----Generated at Fri Apr 4 23:55:40 2025 by rpki-client