$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: cMEp5vWDslnFKW3xh3m8uZEwEzblFHN5mJ8RTLgbE2I= Subject key identifier: 06:E6:DA:ED:F5:14:C1:B1:BC:B1:6B:BA:E4:DA:E7:B7:E3:C6:F0:A4 Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 043E Signing time: Thu 15 May 2025 00:19:02 +0000 Manifest this update: Thu 15 May 2025 00:19:01 +0000 Manifest next update: Thu 22 May 2025 00:19:01 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: M3DyiMhSGcxoEkF4aDdG3TZo1Y+Nuv+QCfw/URK5zVY=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: May 15 00:19:01 2025 GMT Not After : May 22 00:19:01 2025 GMT Subject: CN=682532f5-d87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:34:9c:2c:4e:4e:6c:e2:4c:9e:a9:82:29: 5a:c0:b3:aa:c2:86:f8:a4:1e:9c:75:71:18:ea:43: ef:ba:11:63:7d:65:8b:62:eb:08:bb:0c:98:44:64: f2:77:ba:83:89:e8:f5:15:ae:5b:0b:58:8f:aa:ae: b2:4d:5f:80:e5:51:7d:d2:38:fd:25:e1:02:a5:d3: e6:d5:8c:89:b7:58:05:c4:e9:09:21:51:99:1b:2a: 01:4f:cc:de:97:a8:9e:04:76:48:99:18:1a:25:a3: aa:04:5f:21:07:e7:62:88:93:85:ba:b4:c5:d3:d2: 1a:14:55:bb:3c:01:f9:b9:f4:a4:79:dc:f0:d3:83: 79:58:0e:f3:1e:34:3f:59:50:70:3a:c7:23:92:6f: 15:d9:03:4a:93:1f:92:5a:e7:01:66:5e:5d:a6:32: 71:15:b3:1c:8e:62:93:f4:57:0c:01:27:f7:6f:44: 77:f4:f7:da:93:4d:d3:0b:01:81:41:ad:75:a0:c2: f2:ce:97:f3:4e:7b:65:57:de:60:f3:ce:25:4a:43: 82:34:c6:45:a1:6d:cf:ff:bf:38:8d:17:4f:bc:a1: d9:00:ab:66:e9:a8:95:a9:e8:66:8c:f5:3e:bd:6f: e5:88:2d:30:28:d6:e8:1c:68:4d:76:2b:a0:60:dd: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E6:DA:ED:F5:14:C1:B1:BC:B1:6B:BA:E4:DA:E7:B7:E3:C6:F0:A4 X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:77:3a:0c:89:cc:50:93:a4:66:c6:96:78:10:26:a2:74:81: 7d:ec:c0:e0:4f:af:a3:c8:f0:b4:71:2b:b2:e3:af:31:24:85: d7:8e:0c:93:94:3f:12:aa:9a:13:12:83:5f:90:ed:03:ac:a9: 0a:29:74:c1:39:0d:da:79:f4:0a:93:bb:74:bd:f9:a9:ad:f1: 01:03:7f:95:65:70:61:10:18:c7:44:71:4a:1e:df:5b:a0:09: ee:10:93:91:63:cf:05:84:46:52:a7:81:1b:b7:33:5b:60:f5: 0e:6f:cc:8c:69:92:68:3b:a3:ba:53:87:72:33:fc:48:55:96: 86:7e:35:50:5f:74:af:11:fe:1c:0c:88:11:2b:50:5a:a2:76: 8f:af:80:86:ce:95:c1:e2:76:97:2a:71:08:af:b8:d4:9b:24: 04:89:99:e0:d0:b6:07:de:9a:11:52:29:c7:d5:3c:37:37:c4: 54:f6:c4:a5:6f:f4:2f:e5:63:e0:4e:c8:41:c3:d8:24:fe:ff: d5:d4:89:82:37:26:9a:5f:be:ec:4b:be:34:da:4d:26:df:43: 49:04:90:f5:89:36:54:3c:8c:88:95:3b:43:a9:7b:34:6e:8c: be:fd:c1:f6:9e:41:61:e3:fd:25:53:8d:54:02:d3:2d:37:29: 84:1a:f4:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUwNTE1MDAxOTAxWhcNMjUwNTIyMDAxOTAxWjAYMRYwFAYD VQQDEw02ODI1MzJmNS1kODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiE0nCxOTmziTJ6pgilawLOqwob4pB6cdXEY6kPvuhFjfWWLYusIuwyYRGTy d7qDiej1Fa5bC1iPqq6yTV+A5VF90jj9JeECpdPm1YyJt1gFxOkJIVGZGyoBT8ze l6ieBHZImRgaJaOqBF8hB+diiJOFurTF09IaFFW7PAH5ufSkedzw04N5WA7zHjQ/ WVBwOscjkm8V2QNKkx+SWucBZl5dpjJxFbMcjmKT9FcMASf3b0R39Pfak03TCwGB Qa11oMLyzpfzTntlV95g884lSkOCNMZFoW3P/784jRdPvKHZAKtm6aiVqehmjPU+ vW/liC0wKNboHGhNdiugYN1DewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbm2u31 FMGxvLFruuTa57fjxvCkMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbdzoMicxQk6RmxpZ4ECaidIF97MDgT6+jyPC0cSuy468xJIXXjgyT lD8SqpoTEoNfkO0DrKkKKXTBOQ3aefQKk7t0vfmprfEBA3+VZXBhEBjHRHFKHt9b oAnuEJORY88FhEZSp4EbtzNbYPUOb8yMaZJoO6O6U4dyM/xIVZaGfjVQX3SvEf4c DIgRK1BaonaPr4CGzpXB4naXKnEIr7jUmyQEiZng0LYH3poRUinH1Tw3N8RU9sSl b/Qv5WPgTshBw9gk/v/V1ImCNyaaX77sS7402k0m30NJBJD1iTZUPIyIlTtDqXs0 boy+/cH2nkFh4/0lU41UAtMtNymEGvT2 -----END CERTIFICATE-----Generated at Fri May 16 07:33:39 2025 by rpki-client