$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json) Hash identifier: 6OkxW7ijFkgaAUEHATlg2s7NZ2UtetOgDZ/OIrSOpvs= Subject key identifier: 0D:A2:CE:A1:38:82:E0:67:E3:14:82:32:BB:EC:56:A4:3E:8D:42:26 Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft Manifest number: 018C Signing time: Thu 15 May 2025 02:59:55 +0000 Manifest this update: Thu 15 May 2025 02:59:55 +0000 Manifest next update: Thu 22 May 2025 02:59:55 +0000 Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: uOw358k5713OzaQJQ7PzuhQzODkdy6MTFN73FrK9q7E=) 2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: 95TYzLOqwMphVUCVsji8mDMvFKrsCaokY8ysHX5ZUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98 Validity Not Before: May 15 02:59:55 2025 GMT Not After : May 22 02:59:55 2025 GMT Subject: CN=682558ab-84f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:05:57:1d:54:f0:46:97:c5:62:b8:64:29: 86:7b:11:e7:7b:ef:0b:e0:77:dc:df:28:12:76:00: 4b:44:a7:19:92:53:4c:93:86:2c:28:a0:a4:6e:ac: 35:d1:a0:6e:7c:39:07:5e:68:4c:9e:ad:f9:9c:d2: 95:25:19:4b:fc:6d:79:ba:67:39:af:bb:ee:98:20: db:30:34:f0:f2:e2:87:f7:f7:c7:f7:fc:0e:99:b2: 0e:c2:7f:36:c1:bd:6e:9e:74:a2:4d:ac:2e:ed:b7: 08:1c:78:cf:38:ea:b3:d7:8d:27:f5:74:3e:1c:f0: 95:3b:56:9e:90:1e:b6:5b:57:00:da:49:54:11:5f: 82:a4:af:d8:85:e9:da:97:2a:31:3b:05:e8:b1:2b: b5:6f:56:1a:75:93:44:c9:dc:6f:86:ca:7f:fa:a8: e8:2e:cb:ef:bd:ea:26:eb:65:e5:4d:b0:b6:ca:8c: 3b:39:5a:4a:7c:06:20:05:34:d8:f1:9e:c7:70:22: de:03:8a:2d:a5:af:89:b8:3b:5e:1f:1b:c1:3d:bb: f9:d4:67:51:05:b4:27:e6:b3:b8:34:48:31:45:c9: 72:7f:2e:99:7e:ae:45:cf:a7:5f:1e:78:2c:21:36: d4:bd:16:00:ab:f5:38:06:d4:62:32:9d:b7:32:65: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A2:CE:A1:38:82:E0:67:E3:14:82:32:BB:EC:56:A4:3E:8D:42:26 X509v3 Authority Key Identifier: keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:fe:e4:42:4b:aa:a0:bb:82:3b:9e:0f:25:14:4e:bf:af:ef: 37:3c:d7:bf:96:97:42:37:f3:55:20:ea:e9:51:2f:68:11:14: df:71:10:12:df:3e:d2:c5:1d:5c:1a:2b:d9:0f:f3:19:1b:a3: 55:d7:3b:38:1b:7c:a6:43:27:44:9e:c1:eb:8b:4d:49:ef:e8: 44:66:72:af:47:34:fe:19:ef:53:9f:76:d3:45:e6:05:16:8b: cf:f9:f5:17:dd:ce:a4:a8:07:ba:4a:41:35:19:06:a4:6e:33: 7f:bc:6d:0c:a5:8c:82:35:de:57:ed:82:0e:ce:54:cd:02:45: 8b:0c:6e:69:ab:e7:b9:4f:98:f9:99:df:4d:e6:83:6c:3e:0a: e4:d7:b1:e1:c3:06:bd:12:3e:b6:67:f4:1c:ca:33:c3:44:01: 08:96:d9:9c:ef:e5:dd:76:f4:3c:2e:8c:8e:ee:6e:ee:5d:fa: 49:6b:d7:37:38:1d:cc:56:f1:3c:ac:bb:43:48:f9:b0:3c:a4: 84:c2:2a:91:6f:aa:71:7b:f8:42:63:df:e6:67:58:f1:ec:70: 68:53:c9:13:1c:73:d7:ee:48:1b:e7:27:5e:0c:47:5b:40:cf: 2a:cc:86:ce:28:9f:33:f9:13:5a:fc:33:c9:01:69:12:9f:8f: ff:f1:f0:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD MTkyNUFDOTgwHhcNMjUwNTE1MDI1OTU1WhcNMjUwNTIyMDI1OTU1WjAYMRYwFAYD VQQDEw02ODI1NThhYi04NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc4FVx1U8EaXxWK4ZCmGexHne+8L4Hfc3ygSdgBLRKcZklNMk4YsKKCkbqw1 0aBufDkHXmhMnq35nNKVJRlL/G15umc5r7vumCDbMDTw8uKH9/fH9/wOmbIOwn82 wb1unnSiTawu7bcIHHjPOOqz140n9XQ+HPCVO1aekB62W1cA2klUEV+CpK/Yhena lyoxOwXosSu1b1YadZNEydxvhsp/+qjoLsvvveom62XlTbC2yow7OVpKfAYgBTTY 8Z7HcCLeA4otpa+JuDteHxvBPbv51GdRBbQn5rO4NEgxRclyfy6Zfq5Fz6dfHngs ITbUvRYAq/U4BtRiMp23MmVqWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2izqE4 guBn4xSCMrvsVqQ+jUImMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0 NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4 d3oxeHFhTGNnYkRCa2xySmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT/uRCS6qgu4I7ng8lFE6/r+83PNe/lpdCN/NVIOrpUS9oERTfcRAS 3z7SxR1cGivZD/MZG6NV1zs4G3ymQydEnsHri01J7+hEZnKvRzT+Ge9Tn3bTReYF FovP+fUX3c6kqAe6SkE1GQakbjN/vG0MpYyCNd5X7YIOzlTNAkWLDG5pq+e5T5j5 md9N5oNsPgrk17Hhwwa9Ej62Z/QcyjPDRAEIltmc7+XddvQ8LoyO7m7uXfpJa9c3 OB3MVvE8rLtDSPmwPKSEwiqRb6pxe/hCY9/mZ1jx7HBoU8kTHHPX7kgb5ydeDEdb QM8qzIbOKJ8z+RNa/DPJAWkSn4//8fD8 -----END CERTIFICATE-----Generated at Fri May 16 08:35:07 2025 by rpki-client