$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json) Hash identifier: aykytD12iAhmL+GdGHDH+rRLlMeD0IFK+meD3KEcfLQ= Subject key identifier: A2:AE:01:91:22:93:3A:42:30:0F:5D:9B:35:03:3A:9B:9A:48:8F:9F Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft Manifest number: EB Signing time: Sun 11 May 2025 04:17:25 +0000 Manifest this update: Sun 11 May 2025 04:17:25 +0000 Manifest next update: Sun 18 May 2025 04:17:25 +0000 Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: 0M/i4cpswFqy76v3gONHReDzAXLUwDCGrI+m1reB5wY=) 2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Validity Not Before: May 11 04:17:25 2025 GMT Not After : May 18 04:17:25 2025 GMT Subject: CN=682024d5-2331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:2b:54:d1:28:e1:04:14:3c:8b:4f:b8:f6: db:00:b5:c4:66:33:41:17:98:1c:03:16:dd:6b:8a: 2f:ec:75:f6:9a:ae:0c:9d:53:53:16:7d:dd:03:67: df:91:93:46:ed:de:a7:6b:db:c0:d8:06:eb:ce:a5: 71:07:ff:ed:5b:af:9c:a7:a4:cf:d5:c4:a3:d1:67: cf:b0:fa:e3:9b:e1:40:b5:a0:12:ee:df:d5:7d:3b: 58:f1:ba:71:1a:c7:f6:67:79:11:8d:91:e0:57:55: d5:6b:23:e0:53:34:98:86:86:79:fc:d8:ab:63:5d: 04:6d:04:1e:ad:2f:4c:74:c7:b2:96:05:2d:75:4c: d0:ca:9f:32:d6:6f:fa:e4:b6:0d:35:b1:b6:a3:2c: 7b:9c:27:0e:e5:ff:de:84:83:b2:8d:bf:19:8d:71: a1:4e:36:02:11:48:01:bf:86:a7:a0:02:9f:14:93: 99:54:84:f2:60:3a:40:6c:de:73:9c:13:b0:3a:4b: f1:25:74:07:17:ba:92:f8:11:dc:e8:7e:c1:36:cf: 73:38:bd:a6:58:4a:f8:be:76:6f:ae:50:53:bb:e4: 94:0d:e8:3a:86:6d:34:4d:43:fe:4f:79:88:b3:12: e9:30:fa:32:73:89:55:2f:e7:ec:e7:5e:ca:3a:ab: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:01:91:22:93:3A:42:30:0F:5D:9B:35:03:3A:9B:9A:48:8F:9F X509v3 Authority Key Identifier: keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:fa:c4:a1:eb:4b:de:3f:00:73:af:f5:74:6c:a6:d2:8c:b9: 51:87:99:41:c9:ab:1e:75:e8:a6:e9:7a:ff:c8:92:20:d3:03: d8:46:f9:cc:2c:68:f9:51:59:ad:dd:68:e8:86:64:cc:c2:de: 33:08:91:fa:56:4c:1e:32:b1:fe:8f:dd:3b:d4:9b:bc:48:06: 95:ce:0b:73:d0:d7:af:ae:c0:f5:3d:62:0d:a3:b8:99:7c:91: d7:b1:9e:5f:ab:91:16:ff:01:4c:c9:e1:c7:0c:5c:2a:57:ee: fc:22:ba:22:11:34:c9:38:27:4d:4f:ca:07:4e:33:68:a4:74: 72:e0:35:13:ec:c0:a6:0a:2e:c8:c5:12:34:d3:cf:ad:30:89: c4:05:85:b0:90:2e:81:86:7f:33:bb:2f:0f:fa:47:1e:ef:be: 46:59:a6:73:ac:c0:1f:bb:e3:26:c3:4b:11:38:40:25:46:80: 24:38:04:a4:c6:59:93:71:a1:45:42:ec:cd:99:8d:d6:28:0b: 79:e3:df:97:1f:01:b1:47:58:cd:4f:d6:e2:de:68:37:7f:b8: ef:3d:4e:c1:f5:ea:e8:92:e8:65:85:f2:2d:75:c8:2f:09:f2: cf:9c:e0:34:51:42:8b:db:c8:a0:ff:8c:c1:84:43:84:49:1c: 40:98:9f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1REMzNDEyRTEy MkZBODcxNEMwHhcNMjUwNTExMDQxNzI1WhcNMjUwNTE4MDQxNzI1WjAYMRYwFAYD VQQDEw02ODIwMjRkNS0yMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7grVNEo4QQUPItPuPbbALXEZjNBF5gcAxbda4ov7HX2mq4MnVNTFn3dA2ff kZNG7d6na9vA2AbrzqVxB//tW6+cp6TP1cSj0WfPsPrjm+FAtaAS7t/VfTtY8bpx Gsf2Z3kRjZHgV1XVayPgUzSYhoZ5/NirY10EbQQerS9MdMeylgUtdUzQyp8y1m/6 5LYNNbG2oyx7nCcO5f/ehIOyjb8ZjXGhTjYCEUgBv4anoAKfFJOZVITyYDpAbN5z nBOwOkvxJXQHF7qS+BHc6H7BNs9zOL2mWEr4vnZvrlBTu+SUDeg6hm00TUP+T3mI sxLpMPoyc4lVL+fs517KOqsO4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKuAZEi kzpCMA9dmzUDOpuaSI+fMB8GA1UdIwQYMBaAFNdHQBFMuvT1map+XcNBLhIvqHFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9DREYzREExNkQy MkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQV1pxbjVkdzBFdUVpLW9j VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQ V1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE+sSh60vePwBzr/V0bKbSjLlRh5lByasedeim6Xr/yJIg0wPYRvnM LGj5UVmt3WjohmTMwt4zCJH6VkweMrH+j9071Ju8SAaVzgtz0NevrsD1PWINo7iZ fJHXsZ5fq5EW/wFMyeHHDFwqV+78IroiETTJOCdNT8oHTjNopHRy4DUT7MCmCi7I xRI008+tMInEBYWwkC6Bhn8zuy8P+kce775GWaZzrMAfu+Mmw0sROEAlRoAkOASk xlmTcaFFQuzNmY3WKAt549+XHwGxR1jNT9bi3mg3f7jvPU7B9erokuhlhfItdcgv CfLPnOA0UUKL28ig/4zBhEOESRxAmJ8k -----END CERTIFICATE-----Generated at Sun May 11 20:09:33 2025 by rpki-client