$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft File: U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft (raw, json) Hash identifier: VPBgjGr2VpiGSKeBSRINXSREbM1UbrXuWtFUNUo3cLs= Subject key identifier: 6C:D5:38:0F:27:6B:D1:33:21:55:D5:28:90:E5:CB:51:8E:4B:CA:61 Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 Certificate issuer: /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft Manifest number: 36 Signing time: Thu 15 May 2025 06:54:50 +0000 Manifest this update: Thu 15 May 2025 06:54:49 +0000 Manifest next update: Thu 22 May 2025 06:54:49 +0000 Files and hashes: 1: U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl (hash: nQM2vUb6fqsuE0wwkYTBr4notvl76htzAXra3P+1Gxg=) 2: 30CC092AE53011EFA140503EC4F9AE02.roa (hash: +368O4g5op3NFEyPxMy/g2aKCfQYvcEtTWG1Z/mxGSQ=) 3: DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (hash: zY2HFqsbJ8/jLQBMjPpHRfGu9g3E8mXkzh/HPX8tacQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09 Validity Not Before: May 15 06:54:49 2025 GMT Not After : May 22 06:54:49 2025 GMT Subject: CN=68258fba-497b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:2a:ac:78:27:ee:d8:bc:f5:42:60:22:a1: 57:30:2d:8c:97:8a:1b:38:43:0c:f0:af:5d:5e:97: 49:0e:0d:09:ef:99:27:7e:8a:a1:67:8c:2b:08:f0: f6:74:b1:7d:a0:43:e5:40:69:27:6d:ce:96:67:65: 40:e7:fb:45:91:af:82:4b:7a:74:21:67:23:c7:66: f7:1c:d2:9a:8d:2c:5d:ff:8f:4c:38:ca:f1:0d:6f: 30:1d:74:37:e1:f6:55:88:1f:37:fb:80:99:2f:2c: 4e:8e:5f:67:6b:ec:1f:3d:e6:d7:e2:97:89:fd:3f: ca:8e:b4:f4:1d:7e:2e:c7:ce:a3:fd:2f:a1:dd:a5: 28:7f:92:29:27:70:a9:43:15:c4:e0:58:5f:b1:4d: 88:74:1a:45:4b:7a:da:ca:47:57:2b:c2:79:6e:e6: 55:9c:d9:59:9b:65:f3:3c:04:09:51:aa:84:96:da: 9d:f2:94:18:64:43:22:98:00:b8:4d:a5:cf:15:d1: 5f:5c:56:d6:00:03:28:42:35:1f:fa:ec:de:13:95: a6:fd:45:3f:2e:fb:b0:28:64:10:b8:ac:97:62:8b: bd:b6:48:67:4d:4d:9b:69:5d:16:61:d1:9b:90:00: c4:e2:03:f9:cd:fc:01:8d:64:5c:52:d7:dd:18:27: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D5:38:0F:27:6B:D1:33:21:55:D5:28:90:E5:CB:51:8E:4B:CA:61 X509v3 Authority Key Identifier: keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:54:5a:c3:61:d3:6a:20:f1:7c:ae:40:6e:66:c0:50:6b:43: 67:12:67:1a:67:31:9d:8a:70:71:92:b6:9d:d3:25:8f:69:0a: 8a:44:72:c7:3b:49:cf:01:98:57:9b:6b:ca:74:8f:24:7c:e0: 2d:fd:bb:d0:6e:1e:4f:9b:52:c3:33:d6:23:f8:b6:de:a1:7e: d9:17:60:f8:f1:d5:d3:e4:cf:c2:6e:72:74:64:2f:f5:f8:fe: be:c7:22:71:63:cd:fb:0f:a5:66:f9:a4:60:b7:8c:2c:70:ca: 36:8e:89:ba:a7:64:fd:c0:c9:94:5e:b0:08:78:d1:f6:1a:d0: f8:81:2e:96:86:08:ab:29:6b:3a:52:22:aa:03:8d:c2:f8:d8: 9f:b7:bb:d9:bf:fa:8e:9c:bc:ee:51:aa:9e:27:7f:67:94:d3: ec:c8:74:18:c7:51:30:b4:1f:51:00:e2:2a:b2:d1:99:69:c7: ff:36:b1:e1:94:aa:66:3f:c2:a3:fb:11:a4:59:f3:1b:ed:a7: 1f:54:26:53:fa:f5:3a:49:de:ff:49:de:e8:c2:14:78:2a:8a: d6:33:c0:a4:8b:6b:01:f6:bf:52:cd:b9:38:65:20:1a:75:9b: 6b:7c:39:94:da:8c:f3:39:b7:b2:64:f9:d9:25:22:40:81:0b: 4d:b1:1f:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDgzODExMC8GA1UEBRMoNTNFQzhGNEYxMEE5NDA2NDQ2MjgyM0FBMjk5QkIyODY2 MDBFREYwOTAeFw0yNTA1MTUwNjU0NDlaFw0yNTA1MjIwNjU0NDlaMBgxFjAUBgNV BAMTDTY4MjU4ZmJhLTQ5N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1viqseCfu2Lz1QmAioVcwLYyXihs4Qwzwr11el0kODQnvmSd+iqFnjCsI8PZ0 sX2gQ+VAaSdtzpZnZUDn+0WRr4JLenQhZyPHZvcc0pqNLF3/j0w4yvENbzAddDfh 9lWIHzf7gJkvLE6OX2dr7B895tfil4n9P8qOtPQdfi7HzqP9L6HdpSh/kikncKlD FcTgWF+xTYh0GkVLetrKR1crwnlu5lWc2VmbZfM8BAlRqoSW2p3ylBhkQyKYALhN pc8V0V9cVtYAAyhCNR/67N4Tlab9RT8u+7AoZBC4rJdii722SGdNTZtpXRZh0ZuQ AMTiA/nN/AGNZFxS190YJ6mHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbNU4Dydr 0TMhVdUokOXLUY5LymEwHwYDVR0jBBgwFoAUU+yPTxCpQGRGKCOqKZuyhmAO3wkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwODM4LzBEMTk5NTdBRTUy QTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdSR0tDT3FLWnV5aG1BTzN3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS15UFR4Q3BRR1JHS0NPcUtadXlobUFPM3drLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw ODM4LzBEMTk5NTdBRTUyQTExRUY4RjRBREYxOUM0RjlBRTAyL1UteVBUeENwUUdS R0tDT3FLWnV5aG1BTzN3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBUWsNh02og8XyuQG5mwFBrQ2cSZxpnMZ2KcHGStp3TJY9pCopEcsc7 Sc8BmFeba8p0jyR84C39u9BuHk+bUsMz1iP4tt6hftkXYPjx1dPkz8JucnRkL/X4 /r7HInFjzfsPpWb5pGC3jCxwyjaOibqnZP3AyZResAh40fYa0PiBLpaGCKspazpS IqoDjcL42J+3u9m/+o6cvO5Rqp4nf2eU0+zIdBjHUTC0H1EA4iqy0Zlpx/82seGU qmY/wqP7EaRZ8xvtpx9UJlP69TpJ3v9J3ujCFHgqitYzwKSLawH2v1LNuThlIBp1 m2t8OZTajPM5t7Jk+dklIkCBC02xH1s= -----END CERTIFICATE-----Generated at Thu May 15 19:24:27 2025 by rpki-client