$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: FbwFFLCBDl+TeAS85tl2TPyM+PuOZuZY8k5Uo5ZJ6Ms= Subject key identifier: 87:F0:D6:53:BF:C0:46:95:73:18:E4:43:D5:01:BF:EC:E3:60:22:8E Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 02CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 02C9 Signing time: Tue 13 May 2025 01:11:14 +0000 Manifest this update: Tue 13 May 2025 01:11:14 +0000 Manifest next update: Tue 20 May 2025 01:11:14 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: Wj1pFUBrw2K/vUSj7ZlONkoUd9KtVSudqu6g+O7LzAM=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: WvT7aspKo+sHWby0nr7AYPsexTa44Dr6ROlq3v6GSX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 717 (0x2cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: May 13 01:11:14 2025 GMT Not After : May 20 01:11:14 2025 GMT Subject: CN=68229c32-80b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:7a:57:37:1c:52:30:2c:a9:d9:2f:9c:ac: e0:b1:61:60:ff:55:35:01:da:74:4b:d7:44:1e:1f: d2:11:ec:e5:56:c6:d4:88:82:61:17:a3:9d:6b:f8: dd:79:69:77:f1:19:56:8e:a0:f3:e0:86:3c:b1:9b: e5:2d:da:43:e5:db:c4:c4:06:4f:a6:27:f5:70:95: 01:c2:de:70:e9:9a:15:1f:02:b4:4f:85:d4:73:bd: fb:de:a1:13:ff:f0:e8:ff:19:d3:ac:3b:55:ff:13: 17:68:0c:0a:91:51:ea:20:85:a6:e1:8c:f4:ff:50: 0f:bc:78:d1:3f:19:ae:d8:29:63:65:39:32:8e:6f: cf:49:c2:a8:20:6f:45:0c:13:eb:39:17:c4:d7:83: 79:4c:b9:19:f8:d1:44:20:27:44:56:ca:b5:d8:88: d6:b8:12:36:44:60:aa:6a:ec:f3:61:3f:65:04:87: 63:31:cb:73:97:08:9f:bb:29:10:b9:23:51:fe:f9: 18:92:77:5a:83:43:67:cb:2a:28:f7:b9:14:1f:38: a5:76:57:70:3d:55:e2:5a:66:9a:92:07:be:99:2b: c9:69:8c:6f:8d:f3:0e:e9:d9:a6:57:cf:89:be:65: 60:6d:44:ab:72:a3:b5:e2:bc:84:a3:8b:66:7f:0e: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F0:D6:53:BF:C0:46:95:73:18:E4:43:D5:01:BF:EC:E3:60:22:8E X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:56:ef:4a:46:6a:c7:9f:96:df:43:36:2c:ae:85:44:c1:2d: e5:9d:0c:cb:92:7d:13:a0:82:c5:42:a7:6c:68:6d:b1:d6:9d: 0b:50:e1:b6:52:c8:aa:d2:c3:e8:68:33:43:9a:fd:89:0a:56: 93:94:4e:67:9c:61:a3:15:32:61:b8:2f:cb:0d:97:30:b6:ee: 32:40:75:b1:dc:f3:c0:d2:ba:d1:4a:11:63:3e:f9:6c:ef:0d: d7:e9:9e:e3:81:a6:e6:7f:85:1c:50:7a:bb:ff:49:49:b4:42: cc:3c:91:b8:a4:c6:94:af:ed:f2:3e:db:0b:30:06:28:b7:60: ef:08:32:86:60:41:cc:ad:37:b5:4b:1c:c1:fd:4d:e8:ca:28: 9b:02:b4:67:24:07:58:0c:0f:86:d8:96:4e:5d:7d:4d:07:3d: fc:e8:3f:3b:53:6a:20:e8:7b:7c:36:c0:4c:80:55:69:ee:73: 73:3b:c1:c7:f1:ea:6e:82:31:46:68:9c:6c:ad:c0:f9:44:61: b3:c1:72:fa:40:d8:90:33:b3:3f:49:dd:16:57:ba:50:ce:ff: 8e:f8:93:9c:b6:c5:5e:1d:07:e2:dc:eb:2c:2d:89:f7:e5:ae: cd:1b:fe:60:51:07:3d:60:e8:d4:32:db:25:d0:e2:90:10:16: c1:06:72:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwNTEzMDExMTE0WhcNMjUwNTIwMDExMTE0WjAYMRYwFAYD VQQDEw02ODIyOWMzMi04MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNl6VzccUjAsqdkvnKzgsWFg/1U1Adp0S9dEHh/SEezlVsbUiIJhF6Oda/jd eWl38RlWjqDz4IY8sZvlLdpD5dvExAZPpif1cJUBwt5w6ZoVHwK0T4XUc7373qET //Do/xnTrDtV/xMXaAwKkVHqIIWm4Yz0/1APvHjRPxmu2CljZTkyjm/PScKoIG9F DBPrORfE14N5TLkZ+NFEICdEVsq12IjWuBI2RGCqauzzYT9lBIdjMctzlwifuykQ uSNR/vkYkndag0Nnyyoo97kUHzildldwPVXiWmaakge+mSvJaYxvjfMO6dmmV8+J vmVgbUSrcqO14ryEo4tmfw6XnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfw1lO/ wEaVcxjkQ9UBv+zjYCKOMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqVu9KRmrHn5bfQzYsroVEwS3lnQzLkn0ToILFQqdsaG2x1p0LUOG2 Usiq0sPoaDNDmv2JClaTlE5nnGGjFTJhuC/LDZcwtu4yQHWx3PPA0rrRShFjPvls 7w3X6Z7jgabmf4UcUHq7/0lJtELMPJG4pMaUr+3yPtsLMAYot2DvCDKGYEHMrTe1 SxzB/U3oyiibArRnJAdYDA+G2JZOXX1NBz386D87U2og6Ht8NsBMgFVp7nNzO8HH 8epugjFGaJxsrcD5RGGzwXL6QNiQM7M/Sd0WV7pQzv+O+JOctsVeHQfi3OssLYn3 5a7NG/5gUQc9YOjUMtsl0OKQEBbBBnLf -----END CERTIFICATE-----Generated at Tue May 13 19:06:38 2025 by rpki-client