$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: YBG8jnWVP1BAxBc0XAhsD0cU0qzpCrmZoUTa5A8yHHU= Subject key identifier: 87:7B:40:CA:07:A4:71:7F:E6:F6:09:33:6A:BA:3A:D0:B2:24:CA:A4 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 070B Signing time: Wed 14 May 2025 22:01:04 +0000 Manifest this update: Wed 14 May 2025 22:01:03 +0000 Manifest next update: Wed 21 May 2025 22:01:03 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: QFHFat/0tOs34EktzunD/oxuqYGtYyoNqA5u4cSxMT4=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: H0CS/wDvj/j+OGq6CMvz4MaVZLlE1z8NE8iE80Ojvas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: May 14 22:01:03 2025 GMT Not After : May 21 22:01:03 2025 GMT Subject: CN=682512a0-f878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:e0:20:e6:be:0c:28:ac:26:e2:41:55:d4: 15:20:7b:ee:19:f6:bb:11:1f:98:a0:1d:2b:1e:46: f5:3a:8c:43:6a:96:cd:91:39:7e:7b:a1:73:00:41: 01:14:af:d8:d3:26:f1:2b:86:68:69:98:cc:79:8c: 04:6f:49:31:66:e0:7b:97:98:6a:e8:eb:0f:3a:4f: 66:7e:6d:4a:cd:d3:89:eb:e1:d2:15:12:f9:e6:18: 85:e0:d3:98:71:09:4f:d5:67:54:25:3c:97:4e:9b: a7:07:4b:8a:01:07:2a:14:3c:90:f3:2d:ec:05:8e: 7e:b1:0a:73:6f:11:c5:6f:84:5a:a0:1f:95:d9:c6: 40:bb:1e:75:95:54:6b:6f:f7:e1:fc:8f:17:73:91: 16:aa:5f:40:ce:1e:88:e8:e6:32:ef:16:66:ee:5e: f7:2f:e8:3a:36:aa:d5:43:b8:9e:3f:63:5c:f1:e3: f3:c1:85:f3:1d:c3:f9:12:87:08:b2:3a:c0:6f:68: f2:ff:36:fc:be:ba:16:e0:b4:26:62:e3:69:7c:a5: 6a:7b:48:bc:c1:5e:23:5d:b2:43:4c:a0:d3:8a:1d: bb:c1:99:9b:c0:17:91:2f:77:9f:09:93:57:b3:56: 21:35:1b:d6:d4:cc:d5:1b:e9:7e:ef:d5:a0:f6:a3: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:40:CA:07:A4:71:7F:E6:F6:09:33:6A:BA:3A:D0:B2:24:CA:A4 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2b:8f:28:a2:5f:f8:4f:ca:b5:c0:69:81:65:fe:04:b8:a3: d1:fb:32:98:0e:89:eb:a2:b0:33:fd:68:68:64:13:d9:b9:3f: 55:aa:c0:aa:83:ce:e9:5b:14:59:81:16:8d:fb:06:4f:a3:3b: c1:e5:b5:af:38:85:24:7b:6c:7c:56:9d:5d:7b:83:75:6f:b5: 2e:7f:1a:73:d7:fa:54:1d:f3:b7:a1:5b:fd:92:d8:a4:9b:46: 05:91:2b:89:6e:c4:ef:1e:1e:bb:24:65:98:47:9a:b6:f7:5b: 04:21:df:7b:15:6b:8f:35:71:11:ba:fa:5a:ef:1b:cb:16:c0: f5:6b:b2:76:49:fe:e8:81:a1:5a:c9:d0:23:3e:ef:6d:bf:d5: 3f:7d:32:31:7f:35:55:8f:d9:80:53:4e:c0:9a:74:6f:fa:5e: 2c:09:3d:15:55:38:43:83:f7:6b:5b:74:4b:71:3a:d2:33:50: f2:02:ae:24:d8:dc:ed:7c:4b:d3:21:36:3f:d9:7f:29:b8:a5: fe:5c:12:fe:8b:3a:53:52:97:c0:57:1c:61:30:2f:2b:bf:88: f8:1c:de:f5:0d:ca:f9:83:42:41:63:a3:10:f9:b1:a8:52:4d: 02:14:b1:f5:92:2e:90:9c:bc:38:9d:b2:62:09:97:f0:a8:9f: 03:4c:11:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjUwNTE0MjIwMTAzWhcNMjUwNTIxMjIwMTAzWjAYMRYwFAYD VQQDEw02ODI1MTJhMC1mODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IjgIOa+DCisJuJBVdQVIHvuGfa7ER+YoB0rHkb1OoxDapbNkTl+e6FzAEEB FK/Y0ybxK4ZoaZjMeYwEb0kxZuB7l5hq6OsPOk9mfm1KzdOJ6+HSFRL55hiF4NOY cQlP1WdUJTyXTpunB0uKAQcqFDyQ8y3sBY5+sQpzbxHFb4RaoB+V2cZAux51lVRr b/fh/I8Xc5EWql9Azh6I6OYy7xZm7l73L+g6NqrVQ7ieP2Nc8ePzwYXzHcP5EocI sjrAb2jy/zb8vroW4LQmYuNpfKVqe0i8wV4jXbJDTKDTih27wZmbwBeRL3efCZNX s1YhNRvW1MzVG+l+79Wg9qP36wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId7QMoH pHF/5vYJM2q6OtCyJMqkMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOK48ool/4T8q1wGmBZf4EuKPR+zKYDonrorAz/WhoZBPZuT9VqsCq g87pWxRZgRaN+wZPozvB5bWvOIUke2x8Vp1de4N1b7Uufxpz1/pUHfO3oVv9ktik m0YFkSuJbsTvHh67JGWYR5q291sEId97FWuPNXERuvpa7xvLFsD1a7J2Sf7ogaFa ydAjPu9tv9U/fTIxfzVVj9mAU07AmnRv+l4sCT0VVThDg/drW3RLcTrSM1DyAq4k 2NztfEvTITY/2X8puKX+XBL+izpTUpfAVxxhMC8rv4j4HN71Dcr5g0JBY6MQ+bGo Uk0CFLH1ki6QnLw4nbJiCZfwqJ8DTBEf -----END CERTIFICATE-----Generated at Fri May 16 08:18:17 2025 by rpki-client