$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: ZAE+wF/1ZAgca1Xf7icrnTXjnVhCklyoAbN+sVbpT2s= Subject key identifier: CE:6F:14:2B:9B:3F:A4:5E:47:5D:D8:82:81:C2:1B:F7:61:48:8A:D0 Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 020E Signing time: Sun 11 May 2025 01:33:29 +0000 Manifest this update: Sun 11 May 2025 01:33:29 +0000 Manifest next update: Sun 18 May 2025 01:33:29 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: i/0ISttetqoBkdmcsUqsJZmFHlQuKDjzd1G5JQa3m14=) 2: 3366A64616EE11F092BB8D27C4F9AE02.roa (hash: BqVy/ukdl/6/b56EtxQ8tAIR6Cjii/d5BEoVe0J+mjI=) 3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 1g2p3b2YKG05onOBUGFQwxLWWfgUtvMtLCVSZMC3Z1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: May 11 01:33:29 2025 GMT Not After : May 18 01:33:29 2025 GMT Subject: CN=681ffe69-256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:c1:2c:45:2d:43:3d:c1:57:f2:14:55:a3: e2:05:6a:9f:56:12:ca:26:c7:c2:09:c2:0b:c4:07: a0:38:5c:ae:c4:86:72:ab:72:67:de:43:ec:ec:70: 56:9f:2c:ef:ae:ac:6a:1f:1d:c3:2d:38:89:4e:3e: 1b:ec:39:b0:94:97:9a:f1:0b:c9:6d:f4:f6:91:71: e1:9d:d2:f3:32:32:2c:1a:5c:02:6b:2a:92:a1:72: 89:6e:58:48:ce:6d:e9:b7:9b:be:3a:1e:87:92:90: 1b:f9:02:69:9d:91:cb:c2:ed:27:cf:ed:50:dd:09: 9b:94:7c:44:ee:20:5f:ba:b5:85:f2:fd:0d:1a:d6: 60:86:d3:4d:52:23:58:13:5b:c9:fe:29:d4:74:a8: 05:a0:47:5f:40:ac:21:af:74:16:4d:db:9e:b8:29: ee:18:78:34:07:e3:12:cd:f2:21:a6:1d:1b:74:19: ca:85:61:a4:a6:41:16:0e:07:c9:13:6a:23:79:35: a8:27:e1:5a:41:b7:c8:d3:94:24:73:0b:f3:1e:36: ee:07:a1:e5:01:06:6c:21:f3:15:9f:19:2a:4a:b7: 24:d0:16:4f:27:e8:4b:23:a5:59:2e:f2:f8:10:50: 8e:0c:e3:99:6e:33:07:86:fe:db:02:91:4d:21:68: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:14:2B:9B:3F:A4:5E:47:5D:D8:82:81:C2:1B:F7:61:48:8A:D0 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:08:fe:1a:16:b7:c6:13:73:8b:39:4a:00:a9:a4:46:ba:89: 83:97:0e:22:5f:e3:f1:51:1e:5f:82:97:db:47:d0:32:a4:4f: f0:ac:6f:ed:5f:eb:e5:2d:bb:15:6c:e5:90:b1:17:48:60:4f: 33:60:92:23:c1:64:8e:55:02:23:cf:a4:8f:07:ee:91:e9:d0: 01:f6:87:c9:4f:e1:e9:72:99:bd:91:ed:a0:70:32:b7:db:b2: 7c:40:0f:90:93:1c:d4:18:11:73:56:f1:f7:a8:6d:6b:b9:8f: 8a:21:75:ef:e8:04:a3:fc:2c:53:f2:b1:1c:27:08:e3:bc:12: 70:da:6e:ab:4b:77:b3:e7:fe:12:c0:01:11:e5:bd:27:45:13: d4:f8:43:28:1f:ed:be:1d:53:ba:f4:47:c5:92:f8:83:07:8b: 68:af:60:1d:5c:ce:df:84:4e:35:06:a8:7f:bd:bf:ab:40:86: 39:da:5f:00:4a:3e:eb:e9:b3:7d:cc:31:68:c2:5f:9f:b2:b1: 84:fd:4e:12:c2:58:a6:80:35:e1:20:8a:50:74:ba:10:fe:19: bb:c7:60:6b:84:eb:89:71:08:6d:b5:09:f2:62:ec:84:ea:79: 67:3f:af:cb:f7:46:39:16:82:60:cb:d6:e5:04:5b:40:89:5e: d3:2c:73:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjUwNTExMDEzMzI5WhcNMjUwNTE4MDEzMzI5WjAYMRYwFAYD VQQDEw02ODFmZmU2OS0yNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy67BLEUtQz3BV/IUVaPiBWqfVhLKJsfCCcILxAegOFyuxIZyq3Jn3kPs7HBW nyzvrqxqHx3DLTiJTj4b7DmwlJea8QvJbfT2kXHhndLzMjIsGlwCayqSoXKJblhI zm3pt5u+Oh6HkpAb+QJpnZHLwu0nz+1Q3QmblHxE7iBfurWF8v0NGtZghtNNUiNY E1vJ/inUdKgFoEdfQKwhr3QWTdueuCnuGHg0B+MSzfIhph0bdBnKhWGkpkEWDgfJ E2ojeTWoJ+FaQbfI05QkcwvzHjbuB6HlAQZsIfMVnxkqSrck0BZPJ+hLI6VZLvL4 EFCODOOZbjMHhv7bApFNIWjSUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5vFCub P6ReR13YgoHCG/dhSIrQMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfCP4aFrfGE3OLOUoAqaRGuomDlw4iX+PxUR5fgpfbR9AypE/wrG/t X+vlLbsVbOWQsRdIYE8zYJIjwWSOVQIjz6SPB+6R6dAB9ofJT+Hpcpm9ke2gcDK3 27J8QA+QkxzUGBFzVvH3qG1ruY+KIXXv6ASj/CxT8rEcJwjjvBJw2m6rS3ez5/4S wAER5b0nRRPU+EMoH+2+HVO69EfFkviDB4tor2AdXM7fhE41Bqh/vb+rQIY52l8A Sj7r6bN9zDFowl+fsrGE/U4SwlimgDXhIIpQdLoQ/hm7x2BrhOuJcQhttQnyYuyE 6nlnP6/L90Y5FoJgy9blBFtAiV7TLHNJ -----END CERTIFICATE-----Generated at Sun May 11 12:44:30 2025 by rpki-client