$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: F9XWXw5vWfNSqfS8cD0TrZ+vgEyiiuJVkOaGLCTSR3I= Subject key identifier: D5:E4:49:7B:16:82:E5:E2:6F:9F:16:24:E5:31:72:67:4A:6C:42:89 Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 0161 Signing time: Thu 15 May 2025 03:28:33 +0000 Manifest this update: Thu 15 May 2025 03:28:32 +0000 Manifest next update: Thu 22 May 2025 03:28:32 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: JMbC0zBPZthF0nmu+iblSzxDmFFIiNbtredUZymzUJg=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: kUXrIsCImr57H9iIsS2NOqb5zBoEdoozllgsXyGeV7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: May 15 03:28:32 2025 GMT Not After : May 22 03:28:32 2025 GMT Subject: CN=68255f60-9de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:42:1d:bb:c0:6e:af:8c:50:49:a3:91:9b:29: e7:67:00:9c:12:de:60:86:58:74:74:34:82:92:ab: fb:50:ed:af:4d:fc:6c:fb:54:48:68:de:af:8e:37: 6d:c4:d7:af:db:7e:03:04:b9:f2:48:9f:2d:cb:d7: eb:ba:ee:8c:52:58:72:86:2c:f2:74:dc:22:e8:e9: 78:56:82:b3:0a:c6:04:46:72:74:03:0a:6c:c1:ea: 99:7c:13:7c:b3:b7:d4:4e:59:9c:54:7c:67:d1:40: 0f:0f:7a:cf:a9:00:1a:56:45:c5:4a:30:cb:08:93: 87:5a:9e:01:73:25:57:78:e4:0f:60:bd:cb:76:8c: df:f0:ac:0a:a5:67:3c:49:a2:4e:b8:e4:4c:75:a1: df:99:15:5c:a3:ba:ee:19:1b:46:9c:4d:bc:ab:c7: 71:78:c6:f7:71:e6:ee:97:50:9c:c9:89:ab:e8:ef: c9:04:ae:2d:6f:2a:34:b5:4c:94:3c:04:ae:15:7b: c7:86:56:c3:17:94:e8:e2:72:d8:c1:16:3f:65:87: d4:27:25:7b:9e:80:03:0e:18:29:91:0d:04:f1:af: 77:63:5e:81:e8:a9:3b:df:12:6f:11:11:e5:fc:71: 4c:ed:2a:a3:fd:8a:0e:1c:07:0f:dc:9b:97:7a:b5: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:49:7B:16:82:E5:E2:6F:9F:16:24:E5:31:72:67:4A:6C:42:89 X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:48:f3:ae:64:c9:76:56:75:80:8c:ca:f8:e6:8d:64:45:31: b3:d6:0d:f8:e9:54:0b:3d:96:ed:23:7e:e1:00:60:a9:47:42: 7b:df:63:75:3a:d7:8c:e0:05:c4:52:04:85:c3:85:39:8d:17: c1:e5:5c:4e:10:ae:69:93:c9:24:3d:3a:60:6f:d1:2b:79:18: d3:7a:45:bf:c4:78:1a:95:b6:8a:26:2f:bc:ea:73:e5:36:8d: 08:ef:4e:2f:ac:ff:4a:c3:d3:12:ca:a9:69:f3:b3:83:b9:bb: a5:dc:23:72:77:94:d7:4e:90:c8:b4:09:22:15:57:3c:7a:de: 40:cc:10:4a:d9:8b:76:c9:c4:37:33:92:be:64:cf:3f:70:7c: 00:14:04:77:56:fa:d4:c6:3e:7a:df:b9:e9:8c:2b:c4:72:81: 81:c1:75:41:05:8b:51:05:22:8a:b4:f3:7f:01:ff:aa:70:6f: 98:0d:8f:ab:58:0b:51:39:cd:5c:2e:07:0e:2e:a4:c9:8e:6d: b9:c6:bb:c0:59:93:e2:1e:e7:be:80:ef:e9:94:bc:c9:e7:d8: f1:74:10:8b:5c:ea:d7:77:e4:52:ff:9d:59:de:22:34:c1:aa: e1:4f:cf:24:e2:72:28:a2:3e:e6:14:c8:61:5d:ef:e7:b7:52: 33:52:01:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjUwNTE1MDMyODMyWhcNMjUwNTIyMDMyODMyWjAYMRYwFAYD VQQDEw02ODI1NWY2MC05ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kIdu8Bur4xQSaORmynnZwCcEt5ghlh0dDSCkqv7UO2vTfxs+1RIaN6vjjdt xNev234DBLnySJ8ty9fruu6MUlhyhizydNwi6Ol4VoKzCsYERnJ0AwpsweqZfBN8 s7fUTlmcVHxn0UAPD3rPqQAaVkXFSjDLCJOHWp4BcyVXeOQPYL3Ldozf8KwKpWc8 SaJOuORMdaHfmRVco7ruGRtGnE28q8dxeMb3cebul1CcyYmr6O/JBK4tbyo0tUyU PASuFXvHhlbDF5To4nLYwRY/ZYfUJyV7noADDhgpkQ0E8a93Y16B6Kk73xJvERHl /HFM7Sqj/YoOHAcP3JuXerXpFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXkSXsW guXib58WJOUxcmdKbEKJMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2SPOuZMl2VnWAjMr45o1kRTGz1g346VQLPZbtI37hAGCpR0J732N1 OteM4AXEUgSFw4U5jRfB5VxOEK5pk8kkPTpgb9EreRjTekW/xHgalbaKJi+86nPl No0I704vrP9Kw9MSyqlp87ODubul3CNyd5TXTpDItAkiFVc8et5AzBBK2Yt2ycQ3 M5K+ZM8/cHwAFAR3VvrUxj5637npjCvEcoGBwXVBBYtRBSKKtPN/Af+qcG+YDY+r WAtROc1cLgcOLqTJjm25xrvAWZPiHue+gO/plLzJ59jxdBCLXOrXd+RS/51Z3iI0 warhT88k4nIooj7mFMhhXe/nt1IzUgEd -----END CERTIFICATE-----Generated at Sat May 17 02:49:40 2025 by rpki-client