$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json) Hash identifier: +9AwjzUindCsq2aCmZ3gNicX/W/rW706xbbeThDmcF4= Subject key identifier: 73:DF:73:24:9B:66:CB:D6:72:0B:FB:AB:F6:1E:72:2C:8F:69:6F:4B Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft Manifest number: 0113 Signing time: Fri 09 May 2025 04:03:36 +0000 Manifest this update: Fri 09 May 2025 04:03:36 +0000 Manifest next update: Fri 16 May 2025 04:03:36 +0000 Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: 9NdMIBPDwtUEfy9Azs+O/8GzPiwX0DbuXIgqn/1WU+Y=) 2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: 6vLkVoo3xeixncmkuul2aavr7vLSk2WGgm6lp66mNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Validity Not Before: May 9 04:03:36 2025 GMT Not After : May 16 04:03:36 2025 GMT Subject: CN=681d7e98-a557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:bb:6b:05:0a:a6:6a:33:db:2c:10:89:74: 2a:14:62:95:19:a3:c5:16:5c:e3:f2:14:cc:5d:a7: c1:41:aa:37:7f:45:06:4a:1b:07:c7:b0:c5:70:19: 64:d3:3d:14:69:4a:8e:b6:c9:46:ab:55:25:09:5c: a7:74:dd:43:5b:93:12:b2:03:62:9b:d6:e7:12:7c: 5a:e6:1e:82:36:b5:e3:23:83:c6:a4:dc:53:02:2e: 2d:08:16:87:14:d3:8d:02:d1:08:67:05:15:6b:94: ff:cd:ca:52:ff:ac:77:03:5b:6e:0c:31:8f:ff:67: ab:99:05:4a:44:b7:f8:0d:1a:1f:b4:1d:d6:95:be: 55:ae:ce:4a:72:d5:58:34:e4:00:48:1c:a3:db:09: ac:fc:c4:c8:55:3c:8d:28:4e:62:4b:2c:2a:c9:f6: 81:bd:1b:26:27:18:b4:81:59:c1:bc:05:a8:d7:fe: ae:01:ca:71:88:36:8d:74:ae:d0:78:d6:8e:83:e2: 42:ca:c0:5a:cd:3d:ae:19:18:54:57:39:9c:4e:68: 13:00:58:e7:6a:f3:8f:2a:83:6b:a3:05:4d:f4:fb: 5c:a4:5d:50:0d:8e:3b:85:9e:6c:ac:b4:e1:cd:ba: f4:2e:9f:c3:b0:f5:65:36:f7:31:d5:b0:cd:0e:49: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:73:24:9B:66:CB:D6:72:0B:FB:AB:F6:1E:72:2C:8F:69:6F:4B X509v3 Authority Key Identifier: keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:95:66:d5:b0:7b:c7:68:20:c0:1d:8c:85:a6:6e:8e:f5:b9: 0f:62:fa:f4:00:83:16:2a:a7:aa:2d:43:4a:3a:95:3e:20:15: c4:b5:7f:c9:f2:d7:ec:6d:7f:d9:1d:dc:a8:a3:22:1d:4d:25: 49:00:71:48:9c:4b:38:13:a1:8b:a7:28:d1:dc:51:d0:c9:ec: db:23:41:51:d0:e9:7c:39:6a:4f:10:d4:d4:b1:93:c3:d6:1b: 3f:84:35:69:be:6c:24:1f:d3:66:83:15:bb:da:84:47:84:c5: 2f:a5:c4:af:07:c7:6a:90:ba:ff:07:fb:00:74:b5:fe:cc:35: 11:5b:71:e0:65:ba:06:17:b7:df:2f:13:51:94:c6:1a:a7:fe: 35:62:51:0b:42:9d:f5:bf:5e:69:93:f9:7b:0b:12:40:0f:20: 66:37:57:34:70:91:ef:9f:fb:27:56:3b:85:46:88:0b:3a:dd: 4d:e0:bf:63:af:54:61:8c:b9:78:cb:55:29:e9:32:b7:f3:78: 43:ad:d1:38:25:61:38:18:59:7b:18:71:54:1c:03:c1:78:69: 77:3f:45:0a:15:ec:3b:dc:65:4d:2d:20:97:9d:f2:26:96:dd: d3:45:01:de:21:24:00:ae:b8:bb:12:6b:89:85:85:b3:4c:f5: 18:f1:cd:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzNTExMTAvBgNVBAUTKEI1NDc2MjgxRjM1OTREMzg2NDlDQ0NGRjUyRjU4QkI0 OUI0NzVGMDkwHhcNMjUwNTA5MDQwMzM2WhcNMjUwNTE2MDQwMzM2WjAYMRYwFAYD VQQDEw02ODFkN2U5OC1hNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28+7awUKpmoz2ywQiXQqFGKVGaPFFlzj8hTMXafBQao3f0UGShsHx7DFcBlk 0z0UaUqOtslGq1UlCVyndN1DW5MSsgNim9bnEnxa5h6CNrXjI4PGpNxTAi4tCBaH FNONAtEIZwUVa5T/zcpS/6x3A1tuDDGP/2ermQVKRLf4DRoftB3Wlb5Vrs5KctVY NOQASByj2wms/MTIVTyNKE5iSywqyfaBvRsmJxi0gVnBvAWo1/6uAcpxiDaNdK7Q eNaOg+JCysBazT2uGRhUVzmcTmgTAFjnavOPKoNrowVN9PtcpF1QDY47hZ5srLTh zbr0Lp/DsPVlNvcx1bDNDknV9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPfcySb ZsvWcgv7q/YeciyPaW9LMB8GA1UdIwQYMBaAFLVHYoHzWU04ZJzM/1L1i7SbR18J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM1MS8zMUEwRDE4Mjk0 MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRUaGtuTXpfVXZXTHRKdEhY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM1MS8zMUEwRDE4Mjk0MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRU aGtuTXpfVXZXTHRKdEhYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMlWbVsHvHaCDAHYyFpm6O9bkPYvr0AIMWKqeqLUNKOpU+IBXEtX/J 8tfsbX/ZHdyooyIdTSVJAHFInEs4E6GLpyjR3FHQyezbI0FR0Ol8OWpPENTUsZPD 1hs/hDVpvmwkH9NmgxW72oRHhMUvpcSvB8dqkLr/B/sAdLX+zDURW3HgZboGF7ff LxNRlMYap/41YlELQp31v15pk/l7CxJADyBmN1c0cJHvn/snVjuFRogLOt1N4L9j r1RhjLl4y1Up6TK383hDrdE4JWE4GFl7GHFUHAPBeGl3P0UKFew73GVNLSCXnfIm lt3TRQHeISQArri7EmuJhYWzTPUY8c1q -----END CERTIFICATE-----Generated at Sun May 11 03:50:56 2025 by rpki-client