$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: YyewhS+Rwwd+1TyVH6AFUXJmBjf+Ddv/5MwmwIJNCMo= Subject key identifier: 07:DC:9A:46:DF:C8:CF:B1:D7:23:BD:A3:B9:A0:04:77:B7:4B:75:00 Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 0362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 0352 Signing time: Sun 11 May 2025 00:36:24 +0000 Manifest this update: Sun 11 May 2025 00:36:24 +0000 Manifest next update: Sun 18 May 2025 00:36:24 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: /RfD5JfSr9ZUPDVPIaE6wXf/lgdoUBPNmLQm+uyEAt8=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: May 11 00:36:24 2025 GMT Not After : May 18 00:36:24 2025 GMT Subject: CN=681ff108-373b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:f4:fe:0d:18:c6:8b:25:c4:62:ff:81:fa: 58:5f:33:e7:35:23:a7:5f:a0:95:4a:93:95:93:3f: 08:87:ff:81:cc:9e:d5:4c:26:3a:b2:a1:75:27:d6: 83:bf:e4:c8:fa:0b:8d:2d:dd:62:e6:38:3a:50:27: e2:64:98:90:92:9b:ee:b1:e8:64:ac:43:c3:3e:d1: e7:b6:84:a7:fb:bf:b0:a2:43:e4:25:04:01:a1:fb: a5:d8:f7:2b:74:1c:91:ce:b4:77:68:e7:13:8b:95: d5:89:07:ac:13:3f:78:80:26:d9:1c:6c:19:0a:d4: d4:56:91:06:4c:34:36:4d:f7:e4:88:e2:39:c4:88: 42:65:00:41:b5:f6:32:c9:89:81:11:83:65:5d:9e: 48:bd:7e:60:18:91:80:dd:db:9c:dd:ea:98:11:50: cf:39:ef:d3:f5:12:be:be:d8:53:80:50:62:04:b2: 7c:13:64:24:be:34:a8:4f:1d:9d:27:a9:9c:6e:a8: b6:4c:81:60:ba:cd:0e:9b:7d:90:e9:6d:5c:da:43: 53:58:89:2a:ec:4d:1e:5d:0d:55:c2:21:76:d1:af: 75:02:e0:fb:35:da:8f:17:c2:06:da:b6:28:00:05: 35:81:c1:a4:2f:30:03:18:ae:b9:8e:94:d9:b4:e1: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DC:9A:46:DF:C8:CF:B1:D7:23:BD:A3:B9:A0:04:77:B7:4B:75:00 X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:04:19:48:ec:98:8e:9a:07:f6:bd:65:41:29:d6:62:a0:2d: 87:bc:14:2f:b8:a3:c9:e3:ee:1f:08:44:ef:bf:f5:50:3f:fa: 6e:8d:06:90:62:02:81:18:3c:bb:31:aa:fc:cf:0f:b8:d9:a5: a7:5d:9d:4e:4d:05:92:40:44:28:3d:4e:47:ed:d6:8a:b4:67: 98:f9:f0:28:34:b1:60:b9:c5:0d:64:09:67:e3:09:54:ca:ab: ad:55:dd:69:a3:3a:d1:3e:2e:42:2b:aa:ab:c0:18:b2:c2:d4: 3c:a5:6f:15:f9:a8:ab:9e:45:07:14:eb:72:0e:c8:cc:ae:46: a1:06:eb:1b:bc:90:f4:b6:de:c0:83:26:15:c3:18:38:ec:e2: ac:a1:dd:09:57:4e:6d:5f:07:63:49:56:1a:a5:55:0b:4f:ef: f7:6f:e4:23:94:61:47:2b:63:28:7d:80:17:bf:12:57:59:88: 2f:ba:42:2a:21:5f:64:a2:09:16:65:87:fe:b0:36:7a:13:2b: 67:55:39:fd:d3:1c:45:d5:14:be:8f:1c:40:a4:67:6a:08:42: cc:49:fd:5d:61:88:fd:ed:55:16:20:dd:47:6c:11:80:5a:8e: 03:de:aa:04:98:89:5c:b4:7e:97:ca:10:01:fd:ed:25:71:0a: 37:c6:07:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwNTExMDAzNjI0WhcNMjUwNTE4MDAzNjI0WjAYMRYwFAYD VQQDEw02ODFmZjEwOC0zNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzr0/g0YxoslxGL/gfpYXzPnNSOnX6CVSpOVkz8Ih/+BzJ7VTCY6sqF1J9aD v+TI+guNLd1i5jg6UCfiZJiQkpvusehkrEPDPtHntoSn+7+wokPkJQQBoful2Pcr dByRzrR3aOcTi5XViQesEz94gCbZHGwZCtTUVpEGTDQ2TffkiOI5xIhCZQBBtfYy yYmBEYNlXZ5IvX5gGJGA3duc3eqYEVDPOe/T9RK+vthTgFBiBLJ8E2QkvjSoTx2d J6mcbqi2TIFgus0Om32Q6W1c2kNTWIkq7E0eXQ1VwiF20a91AuD7NdqPF8IG2rYo AAU1gcGkLzADGK65jpTZtOFnywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfcmkbf yM+x1yO9o7mgBHe3S3UAMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFBBlI7JiOmgf2vWVBKdZioC2HvBQvuKPJ4+4fCETvv/VQP/pujQaQ YgKBGDy7Mar8zw+42aWnXZ1OTQWSQEQoPU5H7daKtGeY+fAoNLFgucUNZAln4wlU yqutVd1pozrRPi5CK6qrwBiywtQ8pW8V+airnkUHFOtyDsjMrkahBusbvJD0tt7A gyYVwxg47OKsod0JV05tXwdjSVYapVULT+/3b+QjlGFHK2MofYAXvxJXWYgvukIq IV9kogkWZYf+sDZ6EytnVTn90xxF1RS+jxxApGdqCELMSf1dYYj97VUWIN1HbBGA Wo4D3qoEmIlctH6XyhAB/e0lcQo3xgeV -----END CERTIFICATE-----Generated at Mon May 12 23:13:17 2025 by rpki-client