$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: k30oSP+bu4MxXvzwAgV3SFjN6DpWJJAoxP4nr72bJzo= Subject key identifier: 6A:12:9D:59:D2:86:C4:46:2F:D5:08:2C:A6:57:BE:7A:FE:34:A9:0D Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 3488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 347E Signing time: Sat 10 May 2025 15:07:43 +0000 Manifest this update: Sat 10 May 2025 15:07:43 +0000 Manifest next update: Sat 17 May 2025 15:07:43 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: c22QnthcBuuZc51qJvCttXAqKxfnRGYw9+5wwI/qfoo=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: Hux71er2Qs5CKXElMxsIIOBK+KutGucMBDid93LFsCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13448 (0x3488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: May 10 15:07:43 2025 GMT Not After : May 17 15:07:43 2025 GMT Subject: CN=681f6bbf-b8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:99:35:59:69:4f:f3:0a:cd:12:1b:a9:ef: 21:2a:73:04:e5:28:aa:4f:24:f5:da:7e:50:ea:d4: 1a:9e:85:4a:2c:6b:69:d2:94:c3:d5:74:43:17:cf: 03:a8:ec:10:b8:12:4d:f7:3d:0e:83:89:68:58:8a: 87:4d:de:81:6e:46:e7:07:93:4d:35:b2:72:75:df: 0a:57:2a:ff:18:96:ce:8b:1e:35:3d:56:7a:92:52: 80:cd:4f:8c:d2:6b:ca:56:3c:34:65:92:d2:74:1f: 87:6e:47:60:ec:fc:4a:aa:0b:f1:cf:41:2f:a3:66: 46:02:c1:90:63:20:dc:6f:3a:39:50:fd:51:3d:92: 06:4a:a8:82:e6:bb:ed:bf:fe:d8:9d:34:ce:ce:6c: 06:af:9e:d7:0d:2b:18:1b:89:5c:6d:e1:a7:c8:ec: 86:f5:fe:2f:4d:b8:fa:39:88:25:b2:a4:84:e6:68: 7b:96:f8:63:e5:b4:3d:37:0c:99:b7:6a:ff:ff:91: fe:5c:6c:ab:7f:b1:b0:86:50:f8:89:12:cd:76:09: 4f:9f:b4:4e:f2:5c:e7:36:27:d4:d9:2d:6e:36:19: fe:45:d2:16:09:2e:2f:98:e2:ad:5c:be:c5:7a:7c: cd:09:90:f9:e0:50:35:5f:79:8a:53:dd:9c:3b:ed: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:12:9D:59:D2:86:C4:46:2F:D5:08:2C:A6:57:BE:7A:FE:34:A9:0D X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:08:46:f6:64:ae:2b:3b:a8:d6:f9:79:0e:63:c1:b0:a1:d1: 3f:b3:44:5b:f6:11:ec:e4:27:9b:01:2a:b2:fb:35:cc:5f:7a: f7:52:42:51:f4:62:00:cc:31:64:d4:92:4b:70:62:49:15:07: 6c:fb:28:6d:b7:a1:c7:60:d4:65:1c:52:9b:6d:ac:5a:63:30: 9f:01:e6:ec:b1:02:4b:1e:77:30:ff:04:f3:38:f4:c8:af:3b: 21:c8:45:16:f3:65:0c:8d:97:16:13:74:35:9f:58:21:70:c3: 52:b0:27:0d:6b:e4:25:9e:77:43:32:b8:b2:99:49:1c:33:4f: d4:49:be:23:88:f1:af:e5:e9:63:c9:2c:49:88:18:06:e4:03: 56:57:af:a3:77:f5:1a:ef:d8:b4:b6:f6:ea:b7:8c:80:63:87: d1:ab:f8:ef:6c:c0:11:66:9e:25:63:85:bd:c9:00:93:e4:44: 7c:02:f7:a8:9b:37:b2:18:ac:6a:fb:b4:64:15:17:0d:af:26: d4:26:61:1b:81:cd:4e:c0:9d:94:f9:1c:e9:5d:81:e1:9b:fe: 3e:5e:05:8e:d1:14:8d:12:27:f4:7f:87:84:2d:dc:a3:39:1e: b8:5d:7c:26:ef:17:13:d6:e9:0e:37:7d:f6:df:10:07:5a:41: f0:1a:e2:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUwNTEwMTUwNzQzWhcNMjUwNTE3MTUwNzQzWjAYMRYwFAYD VQQDEw02ODFmNmJiZi1iOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFGZNVlpT/MKzRIbqe8hKnME5SiqTyT12n5Q6tQanoVKLGtp0pTD1XRDF88D qOwQuBJN9z0Og4loWIqHTd6BbkbnB5NNNbJydd8KVyr/GJbOix41PVZ6klKAzU+M 0mvKVjw0ZZLSdB+Hbkdg7PxKqgvxz0Evo2ZGAsGQYyDcbzo5UP1RPZIGSqiC5rvt v/7YnTTOzmwGr57XDSsYG4lcbeGnyOyG9f4vTbj6OYglsqSE5mh7lvhj5bQ9NwyZ t2r//5H+XGyrf7GwhlD4iRLNdglPn7RO8lznNifU2S1uNhn+RdIWCS4vmOKtXL7F enzNCZD54FA1X3mKU92cO+2c5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoSnVnS hsRGL9UILKZXvnr+NKkNMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0CEb2ZK4rO6jW+XkOY8GwodE/s0Rb9hHs5CebASqy+zXMX3r3UkJR 9GIAzDFk1JJLcGJJFQds+yhtt6HHYNRlHFKbbaxaYzCfAebssQJLHncw/wTzOPTI rzshyEUW82UMjZcWE3Q1n1ghcMNSsCcNa+QlnndDMriymUkcM0/USb4jiPGv5elj ySxJiBgG5ANWV6+jd/Ua79i0tvbqt4yAY4fRq/jvbMARZp4lY4W9yQCT5ER8Aveo mzeyGKxq+7RkFRcNrybUJmEbgc1OwJ2U+RzpXYHhm/4+XgWO0RSNEif0f4eELdyj OR64XXwm7xcT1ukON3323xAHWkHwGuJv -----END CERTIFICATE-----Generated at Mon May 12 16:53:51 2025 by rpki-client