$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft File: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json) Hash identifier: dg/Vnd6ZWZPsHryYySf1qrPXT8sBEtWhmkrgxzYMfW8= Subject key identifier: 7C:A5:A7:A0:B6:70:AE:0E:66:47:8E:8E:99:84:5E:46:2B:32:25:B3 Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Certificate serial: 042B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft Manifest number: 041C Signing time: Mon 05 May 2025 00:04:01 +0000 Manifest this update: Mon 05 May 2025 00:04:00 +0000 Manifest next update: Mon 12 May 2025 00:04:00 +0000 Files and hashes: 1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: lEc2+TUtNWCGyN04N6Fwu3K3K5uNA2TpkhFULmdPiKQ=) 2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: qN4SUiNR7v9xxP/o2Fq/7o1FjEvOjysHOQYMeRV70PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Validity Not Before: May 5 00:04:00 2025 GMT Not After : May 12 00:04:00 2025 GMT Subject: CN=68180071-15a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0d:11:10:09:17:73:13:09:ef:cf:e4:da:7e: 6a:54:50:66:e1:98:fd:14:5c:20:07:bb:76:5f:0c: 45:64:1f:67:79:4a:75:2a:6e:31:39:17:3a:be:cc: c0:c5:ea:76:a8:3b:24:29:a2:8a:e6:26:62:83:ff: 8f:54:45:52:01:21:f9:17:b4:05:ba:ba:2f:4f:ab: 1b:72:bd:87:61:29:af:b4:7c:93:3d:30:a7:a5:59: 4e:67:dd:8d:a1:e4:1f:75:d3:78:a2:d7:ee:ec:72: 58:19:8c:48:9d:99:0b:26:4e:e5:80:4d:f9:d9:f4: 9f:ac:93:35:8a:9e:23:46:70:8c:7f:d6:71:3b:26: c5:f6:9c:8d:56:49:fe:fe:f0:7e:08:1a:bc:4c:21: c8:37:d4:37:3c:d8:23:89:b0:9a:16:45:9d:cc:ee: 1e:ac:37:32:ca:4a:a4:30:a0:08:0c:a5:2c:66:f0: bd:2c:6f:54:cd:d2:b9:d9:f8:3e:16:3a:b1:94:cf: 50:93:a0:84:ed:0f:37:3d:02:dd:38:16:ee:0b:81: 99:cc:8a:72:75:68:ee:c9:44:1d:35:c6:d0:4b:9a: 55:5f:fa:30:99:46:aa:ac:96:96:fe:98:e5:18:db: 34:6e:d8:d9:c7:0d:28:c1:20:0a:3a:23:b9:e0:5c: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A5:A7:A0:B6:70:AE:0E:66:47:8E:8E:99:84:5E:46:2B:32:25:B3 X509v3 Authority Key Identifier: keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:54:f6:7d:31:8d:3a:7b:e4:7a:14:87:59:0d:39:78:03:d7: fb:99:c4:3b:b8:6a:81:00:69:45:01:8c:12:ff:b5:5f:38:41: 3f:3d:21:66:0d:42:aa:77:ba:ba:9d:5d:fe:97:a3:52:d3:59: fe:3a:ce:81:24:d4:62:5e:b5:bf:ea:dc:ea:d4:c8:f8:35:31: de:33:4a:f0:45:01:e6:5a:8a:0b:99:93:f4:19:4a:9b:24:16: 2e:95:42:50:23:07:a7:4b:8e:e9:69:da:5b:30:e9:a1:3b:79: d6:96:46:f5:51:a2:55:4a:f5:05:da:1d:cc:cf:61:78:7a:7e: fa:44:5c:30:2a:98:14:fb:f7:9c:10:3a:a1:02:77:46:02:88: 68:d4:b2:3f:05:ce:9a:4e:cf:fc:0d:95:92:dc:a7:70:c7:77: 75:24:99:f5:67:41:01:d5:42:4e:89:2b:54:54:10:45:32:cf: 4c:5f:7b:a6:d0:b6:6d:f9:1b:5e:72:4d:9d:4d:7a:87:13:4d: e4:1a:ab:2e:6d:d4:c6:c9:49:cf:0b:27:14:7d:81:3e:1e:1a: ac:e1:bd:1d:1d:a8:a5:e2:9b:5a:d2:ac:47:08:f6:5c:c8:38: f0:e9:11:05:0f:93:19:49:5f:a9:c2:0e:92:5c:ef:7a:21:7c: 52:8d:5a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0QkUxMTAvBgNVBAUTKENENDhGRUJGMjZGRTI0OUUwNTRCRkQ0NEFFOTRGQzU4 QzBFOEUwQTcwHhcNMjUwNTA1MDAwNDAwWhcNMjUwNTEyMDAwNDAwWjAYMRYwFAYD VQQDEw02ODE4MDA3MS0xNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8g0REAkXcxMJ78/k2n5qVFBm4Zj9FFwgB7t2XwxFZB9neUp1Km4xORc6vszA xep2qDskKaKK5iZig/+PVEVSASH5F7QFurovT6sbcr2HYSmvtHyTPTCnpVlOZ92N oeQfddN4otfu7HJYGYxInZkLJk7lgE352fSfrJM1ip4jRnCMf9ZxOybF9pyNVkn+ /vB+CBq8TCHIN9Q3PNgjibCaFkWdzO4erDcyykqkMKAIDKUsZvC9LG9UzdK52fg+ FjqxlM9Qk6CE7Q83PQLdOBbuC4GZzIpydWjuyUQdNcbQS5pVX/owmUaqrJaW/pjl GNs0btjZxw0owSAKOiO54FxPPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHylp6C2 cK4OZkeOjpmEXkYrMiWzMB8GA1UdIwQYMBaAFM1I/r8m/iSeBUv9RK6U/FjA6OCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDRCRS82QThGNzEzNjZE NEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpKNEZTXzFFcnBUOFdNRG80 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVai12eWItSko0RlNfMUVycFQ4V01EbzRLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDRCRS82QThGNzEzNjZENEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpK NEZTXzFFcnBUOFdNRG80S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYVPZ9MY06e+R6FIdZDTl4A9f7mcQ7uGqBAGlFAYwS/7VfOEE/PSFm DUKqd7q6nV3+l6NS01n+Os6BJNRiXrW/6tzq1Mj4NTHeM0rwRQHmWooLmZP0GUqb JBYulUJQIwenS47padpbMOmhO3nWlkb1UaJVSvUF2h3Mz2F4en76RFwwKpgU+/ec EDqhAndGAoho1LI/Bc6aTs/8DZWS3Kdwx3d1JJn1Z0EB1UJOiStUVBBFMs9MX3um 0LZt+Rteck2dTXqHE03kGqsubdTGyUnPCycUfYE+Hhqs4b0dHail4pta0qxHCPZc yDjw6REFD5MZSV+pwg6SXO96IXxSjVrY -----END CERTIFICATE-----Generated at Tue May 6 09:59:17 2025 by rpki-client