$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft File: uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json) Hash identifier: bb5dntn0MUV7qAsXXHyhHzxPox/cxxw0+DdD6nCZ0Co= Subject key identifier: A8:EB:B1:AE:A1:A1:E2:95:BB:13:01:4F:40:01:0D:90:99:3E:D8:31 Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft Manifest number: 0320 Signing time: Sat 31 May 2025 01:21:13 +0000 Manifest this update: Sat 31 May 2025 01:21:13 +0000 Manifest next update: Sat 07 Jun 2025 01:21:13 +0000 Files and hashes: 1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: /696o5G+Vjv7gm/F74ZyeYtl+Y2nJKIJKUldP1rCGTU=) 2: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180386, serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Validity Not Before: May 31 01:21:13 2025 GMT Not After : Jun 7 01:21:13 2025 GMT Subject: CN=683a5989-0a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:1b:3d:35:4c:69:85:16:ed:41:78:8f:fc: 40:e3:7b:de:6b:36:dc:e9:3a:da:57:fe:da:02:67: 01:8c:f4:1c:fc:b6:08:50:29:dc:62:f4:c2:29:15: a1:57:e5:cd:66:8e:25:f9:24:46:8a:eb:18:da:87: c8:77:5f:21:5f:f5:d1:7e:68:f0:51:6b:d4:a4:2b: 9a:09:d4:51:44:61:88:28:07:92:5a:09:08:64:f5: ff:a8:d2:6a:cc:34:53:66:3b:e4:27:75:5f:90:26: 3e:75:fd:55:90:a8:1f:06:e5:40:bb:6b:57:3f:1c: cf:cc:0c:54:fd:77:1c:70:f7:c8:3c:64:e1:01:15: 74:e3:d5:bf:41:59:98:97:c8:4a:33:d4:29:17:e8: 44:e6:65:de:36:74:d9:2e:57:c5:28:22:e4:52:50: 32:bc:c5:59:df:a5:f7:73:5f:58:c4:48:9d:bb:1a: 38:28:19:90:33:30:04:42:24:16:4e:26:25:2e:a9: f0:df:ae:22:ed:f5:9d:7b:e4:01:c5:4e:0f:c8:24: f6:c3:95:64:38:19:0d:9d:f8:d5:6e:75:9c:62:8b: 5a:02:6b:7b:e4:19:aa:81:d4:73:cd:9d:c0:bd:dd: 35:2a:43:d2:f7:42:ca:7f:3f:82:58:95:25:b3:92: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:B1:AE:A1:A1:E2:95:BB:13:01:4F:40:01:0D:90:99:3E:D8:31 X509v3 Authority Key Identifier: keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:4f:10:8b:31:25:f4:0c:06:5d:88:94:34:91:11:e1:21:8c: 6a:70:4e:24:3c:a1:e6:5b:22:e2:70:94:59:3f:88:03:62:33: e2:3e:bf:76:82:6e:af:51:9a:ec:08:97:2f:a1:6f:c3:af:65: 69:4c:c0:fa:4b:7a:48:b3:23:96:2b:9f:73:24:4b:22:e2:8b: 49:d0:e9:7a:f7:b5:98:e6:5b:2e:f0:28:5a:c6:db:8e:df:57: 3c:47:bf:5a:9b:77:ce:29:c8:77:b7:72:bf:fa:70:96:cd:25: 94:fe:58:9d:45:7a:ce:13:c4:45:8d:23:39:1c:b6:35:21:30: 8f:45:1f:4b:7a:90:8d:46:16:46:d5:49:8b:15:91:cd:65:b9: 11:6e:b0:5a:40:f4:9c:80:51:dc:2c:25:34:e8:8a:e4:68:2b: ed:3f:24:dd:fa:a8:66:e0:85:a7:7f:06:6c:13:2b:89:34:86: 12:74:76:59:df:c8:85:e7:56:84:d3:4b:b8:e9:da:b6:4c:ce: a6:e4:8c:98:64:3c:0a:5f:50:bb:19:4f:0f:86:3d:d5:17:65: ea:95:63:ca:50:d5:e7:b6:3d:e9:46:5e:0e:a9:4d:18:cd:8b: f0:dc:07:46:db:6f:75:95:1f:0f:1c:82:a2:a1:db:67:81:42: 79:3e:9c:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4 MDM1NDBENjMwHhcNMjUwNTMxMDEyMTEzWhcNMjUwNjA3MDEyMTEzWjAYMRYwFAYD VQQDEw02ODNhNTk4OS0wYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzQbPTVMaYUW7UF4j/xA43veazbc6TraV/7aAmcBjPQc/LYIUCncYvTCKRWh V+XNZo4l+SRGiusY2ofId18hX/XRfmjwUWvUpCuaCdRRRGGIKAeSWgkIZPX/qNJq zDRTZjvkJ3VfkCY+df1VkKgfBuVAu2tXPxzPzAxU/XcccPfIPGThARV049W/QVmY l8hKM9QpF+hE5mXeNnTZLlfFKCLkUlAyvMVZ36X3c19YxEiduxo4KBmQMzAEQiQW TiYlLqnw364i7fWde+QBxU4PyCT2w5VkOBkNnfjVbnWcYotaAmt75BmqgdRzzZ3A vd01KkPS90LKfz+CWJUls5IdsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjrsa6h oeKVuxMBT0ABDZCZPtgxMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM4Ni8wNkY4NDA4Q0NDRjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1n WWVqRXZIdm5QcHVBTlVEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRTxCLMSX0DAZdiJQ0kRHhIYxqcE4kPKHmWyLicJRZP4gDYjPiPr92 gm6vUZrsCJcvoW/Dr2VpTMD6S3pIsyOWK59zJEsi4otJ0Ol697WY5lsu8ChaxtuO 31c8R79am3fOKch3t3K/+nCWzSWU/lidRXrOE8RFjSM5HLY1ITCPRR9LepCNRhZG 1UmLFZHNZbkRbrBaQPScgFHcLCU06IrkaCvtPyTd+qhm4IWnfwZsEyuJNIYSdHZZ 38iF51aE00u46dq2TM6m5IyYZDwKX1C7GU8Phj3VF2XqlWPKUNXntj3pRl4OqU0Y zYvw3AdG2291lR8PHIKiodtngUJ5Ppxf -----END CERTIFICATE-----Generated at Sat May 31 17:28:54 2025 by rpki-client