$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: XgrqPJEM3K+6At0EonM1rUiHeNr1YrK+S2NbbZ1TngI= Subject key identifier: 2B:88:69:F4:40:9B:44:D0:6D:02:7A:86:D8:75:57:6D:D2:BE:35:CB Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 042B Signing time: Thu 15 May 2025 00:24:12 +0000 Manifest this update: Thu 15 May 2025 00:24:12 +0000 Manifest next update: Thu 22 May 2025 00:24:12 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: X5/mmX5j3jVJ95LVj27JS83T89Gw9G4MVQyAFFRKcwY=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: May 15 00:24:12 2025 GMT Not After : May 22 00:24:12 2025 GMT Subject: CN=6825342c-32ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:50:7e:b0:c2:26:1d:93:d4:c8:fb:7d:da: c5:6e:2b:e0:fa:99:50:08:c3:6c:fd:cf:6a:b6:04: c0:3a:35:6d:84:2e:92:d4:db:97:a4:16:21:77:07: 1f:e4:69:1b:bc:55:a2:b9:10:e6:f1:35:c9:ff:65: 5e:25:70:9e:6e:0f:31:c9:da:4b:db:01:b3:72:83: cd:45:57:46:fc:8e:04:9e:48:1b:c1:e4:d1:b0:a0: da:14:95:21:b3:0b:b5:e3:e8:9f:ee:6d:76:e5:f7: f9:e8:06:a0:3f:cc:d7:aa:45:eb:ad:88:35:75:92: 40:2e:0a:8f:4f:bf:09:eb:22:df:2f:c5:a5:49:8f: e1:4c:d5:31:72:22:4b:c8:67:b1:ea:19:12:cf:9b: 20:65:0e:68:2f:d2:59:8d:22:ea:cb:06:f5:9a:cd: f7:9a:b9:0d:1c:80:39:c9:a3:2c:0c:38:b9:25:e1: bf:15:ce:ba:75:5a:76:4a:fd:77:61:e3:c3:c7:03: 8d:08:40:97:0e:1e:14:cc:7d:0a:a7:35:dd:b2:47: 51:49:80:b3:62:8c:82:bf:6c:da:a2:2e:56:62:0e: 43:3c:3f:0e:e9:dd:e8:34:ba:15:e1:39:44:41:55: 38:0d:98:e4:a6:60:f7:e2:73:84:08:df:50:82:6c: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:88:69:F4:40:9B:44:D0:6D:02:7A:86:D8:75:57:6D:D2:BE:35:CB X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:90:1e:60:ff:98:4b:69:a1:32:cd:1c:da:05:20:c2:c6:a5: 58:c6:e4:e2:ca:db:4b:7d:87:c9:a3:86:a2:ef:33:f3:f7:a3: 2c:b3:58:6c:d9:6e:fb:82:08:8c:73:6e:22:4c:be:09:0d:71: ed:53:a5:62:a6:c1:5c:12:76:44:cc:dc:7b:88:3e:fc:cd:57: f2:7b:c6:e3:94:45:a4:a1:03:ac:d4:cf:1d:a7:e9:8a:ef:51: c6:0c:06:e4:a8:6b:0d:5c:64:cd:bd:07:27:17:f3:af:19:ac: 51:e8:0b:a2:02:1a:0e:3b:bd:44:c4:f2:4d:37:fc:11:b1:4f: 0f:7c:f1:d9:c2:ee:33:2e:0f:46:73:20:03:55:67:07:73:26: c6:58:ef:61:35:23:4a:bd:a8:f6:33:22:d9:8f:62:3e:49:a2: 45:76:ff:2c:7d:43:57:02:6c:f5:4d:a7:78:cc:ca:80:a0:06: 41:d5:1b:d7:d5:de:e5:24:7a:03:d3:60:32:eb:47:e8:14:a3: 38:d8:a5:e9:a9:3a:6e:8d:a8:12:6d:b0:98:77:d2:ba:34:21: 9b:5e:ad:5b:75:68:78:d7:c5:13:d3:f8:a0:95:bd:61:10:ae: 2b:a0:5f:83:e8:69:47:b2:87:ba:ce:49:d5:53:d3:43:5c:cb: 73:55:70:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwNTE1MDAyNDEyWhcNMjUwNTIyMDAyNDEyWjAYMRYwFAYD VQQDEw02ODI1MzQyYy0zMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPlQfrDCJh2T1Mj7fdrFbivg+plQCMNs/c9qtgTAOjVthC6S1NuXpBYhdwcf 5GkbvFWiuRDm8TXJ/2VeJXCebg8xydpL2wGzcoPNRVdG/I4EnkgbweTRsKDaFJUh swu14+if7m125ff56AagP8zXqkXrrYg1dZJALgqPT78J6yLfL8WlSY/hTNUxciJL yGex6hkSz5sgZQ5oL9JZjSLqywb1ms33mrkNHIA5yaMsDDi5JeG/Fc66dVp2Sv13 YePDxwONCECXDh4UzH0KpzXdskdRSYCzYoyCv2zaoi5WYg5DPD8O6d3oNLoV4TlE QVU4DZjkpmD34nOECN9QgmylcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuIafRA m0TQbQJ6hth1V23SvjXLMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCukB5g/5hLaaEyzRzaBSDCxqVYxuTiyttLfYfJo4ai7zPz96Mss1hs 2W77ggiMc24iTL4JDXHtU6VipsFcEnZEzNx7iD78zVfye8bjlEWkoQOs1M8dp+mK 71HGDAbkqGsNXGTNvQcnF/OvGaxR6AuiAhoOO71ExPJNN/wRsU8PfPHZwu4zLg9G cyADVWcHcybGWO9hNSNKvaj2MyLZj2I+SaJFdv8sfUNXAmz1Tad4zMqAoAZB1RvX 1d7lJHoD02Ay60foFKM42KXpqTpujagSbbCYd9K6NCGbXq1bdWh418UT0/iglb1h EK4roF+D6GlHsoe6zknVU9NDXMtzVXC+ -----END CERTIFICATE-----Generated at Thu May 15 03:28:13 2025 by rpki-client