$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: iewTh/jen4Xpj+eGvnsbdGer4QhHP+ot9AM6aTfTJFw= Subject key identifier: 76:0E:4A:77:58:07:85:ED:FD:8B:CF:BD:AC:08:B3:E7:BF:0F:3D:F4 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 015A Signing time: Sat 17 May 2025 03:41:26 +0000 Manifest this update: Sat 17 May 2025 03:41:25 +0000 Manifest next update: Sat 24 May 2025 03:41:25 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: rr3t7V3d6gy4F1wWt3q5tTwcNHR/H6fnaVbPTwaOEAU=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: k+tzt38gMzmau0c2rmQWNYzVDcpA9LwBPBlXy9g9UUQ=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: GPm7lgmcPBXG9N85GnRJZzvPZx2wbvxxB75DoAT8PYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: May 17 03:41:25 2025 GMT Not After : May 24 03:41:25 2025 GMT Subject: CN=68280565-9b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:f0:11:57:10:5f:36:73:46:cf:4e:cb:9d: 76:2a:e9:b0:03:fc:b8:bc:2f:65:94:e3:80:02:3e: f0:fb:6e:10:e6:71:38:99:cd:75:31:fa:0c:ee:f5: ee:97:f9:69:b8:e0:23:3b:a1:69:87:8f:8c:71:5c: 35:36:b4:13:8a:94:4b:07:72:09:93:f6:99:41:21: da:38:97:68:65:5e:cc:3e:c8:57:6a:0f:1f:74:fe: 10:40:d0:5d:52:af:fa:ad:bb:a1:5c:1d:f6:3c:a8: f0:07:03:be:d0:af:9a:a6:2e:39:e3:c2:50:b9:34: f4:02:c3:85:d0:fa:af:4e:a5:84:32:a7:5d:c7:b4: 32:b4:fa:cf:24:44:ea:07:35:14:58:58:ce:26:cc: 32:f9:f7:cb:e4:40:ff:41:5f:51:80:92:62:57:9f: 4f:5c:62:8e:d7:3a:cd:8f:53:b7:5f:75:33:4d:9d: 16:f8:98:4d:96:de:8a:06:71:77:85:d4:da:34:99: 10:7b:48:a8:64:12:94:b2:9a:2d:38:f7:72:28:5f: 54:98:00:71:50:d3:a6:42:db:d3:52:c4:d8:73:3e: 70:9a:c8:ad:ae:14:8d:86:89:d7:cc:52:42:2f:bc: 26:23:d6:e5:94:a8:55:14:1d:24:39:5d:1d:9d:e2: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0E:4A:77:58:07:85:ED:FD:8B:CF:BD:AC:08:B3:E7:BF:0F:3D:F4 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b2:64:55:a9:22:bf:e9:d8:89:43:d5:6e:f8:2a:91:a4:77: 67:7c:ba:ab:f4:91:db:b7:3b:e2:1e:9b:33:02:da:9f:55:0e: 9c:00:53:a9:f7:37:f3:df:c0:77:bf:04:e2:a0:09:42:d5:f5: f7:29:b0:a8:76:3a:86:b2:fe:40:16:8d:11:ba:7b:bf:9d:81: 9e:01:3b:ec:da:3b:8d:5d:e2:bf:fe:ff:c7:ec:d4:dd:50:ac: 62:53:45:61:70:6d:d4:6f:93:4b:6d:8c:13:a1:4d:c2:2d:28: 0d:bf:3e:fd:34:e5:01:98:29:64:e5:bf:cb:29:dd:e6:19:f2: 40:25:dd:ae:c9:6d:29:f9:83:8a:ec:a8:26:d6:d3:18:16:71: 7c:35:ea:b3:b7:39:a5:36:7e:5c:46:07:83:c4:cb:51:45:6d: 97:f9:f2:54:4c:86:a7:8d:38:f5:0d:33:46:e1:e6:ad:fd:00: 22:e3:cb:94:a8:ce:9f:73:1b:ee:4e:b9:3d:e2:c8:7f:9c:34: c8:c7:cd:78:83:80:e6:ab:8e:f1:ad:9e:92:3c:2d:22:ac:3b: 25:31:e1:3f:b3:07:c9:84:8e:e9:cf:a0:ec:5b:c2:6b:89:b1: 5c:93:fd:5c:5e:c6:ba:11:61:1e:d2:7d:46:a1:6d:29:13:2a: 63:3a:b8:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUwNTE3MDM0MTI1WhcNMjUwNTI0MDM0MTI1WjAYMRYwFAYD VQQDEw02ODI4MDU2NS05YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/LwEVcQXzZzRs9Oy512KumwA/y4vC9llOOAAj7w+24Q5nE4mc11MfoM7vXu l/lpuOAjO6Fph4+McVw1NrQTipRLB3IJk/aZQSHaOJdoZV7MPshXag8fdP4QQNBd Uq/6rbuhXB32PKjwBwO+0K+api4548JQuTT0AsOF0PqvTqWEMqddx7QytPrPJETq BzUUWFjOJswy+ffL5ED/QV9RgJJiV59PXGKO1zrNj1O3X3UzTZ0W+JhNlt6KBnF3 hdTaNJkQe0ioZBKUspotOPdyKF9UmABxUNOmQtvTUsTYcz5wmsitrhSNhonXzFJC L7wmI9bllKhVFB0kOV0dneL0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYOSndY B4Xt/YvPvawIs+e/Dz30MB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgsmRVqSK/6diJQ9Vu+CqRpHdnfLqr9JHbtzviHpszAtqfVQ6cAFOp 9zfz38B3vwTioAlC1fX3KbCodjqGsv5AFo0Runu/nYGeATvs2juNXeK//v/H7NTd UKxiU0VhcG3Ub5NLbYwToU3CLSgNvz79NOUBmClk5b/LKd3mGfJAJd2uyW0p+YOK 7Kgm1tMYFnF8NeqztzmlNn5cRgeDxMtRRW2X+fJUTIanjTj1DTNG4eat/QAi48uU qM6fcxvuTrk94sh/nDTIx814g4Dmq47xrZ6SPC0irDslMeE/swfJhI7pz6DsW8Jr ibFck/1cXsa6EWEe0n1GoW0pEypjOrgr -----END CERTIFICATE-----Generated at Sat May 17 14:14:08 2025 by rpki-client