$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft File: vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft (raw, json) Hash identifier: eWDFpH/7mrmf1IPTEKlppwn5vuh+jejWCHkHVWtlivY= Subject key identifier: E2:4C:7F:9A:FB:51:29:93:DB:69:4D:F2:AD:F6:E7:4A:57:05:D8:EB Authority key identifier: BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 Certificate issuer: /CN=A9181EBC/serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft Manifest number: 067B Signing time: Mon 12 May 2025 22:04:26 +0000 Manifest this update: Mon 12 May 2025 22:04:26 +0000 Manifest next update: Mon 19 May 2025 22:04:26 +0000 Files and hashes: 1: vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl (hash: GGGhzdmfjFOqoSCkII0JK3KqGToCUShsuQgqRsshG78=) 2: 62D6FB5474D811EB99569279C4F9AE02.roa (hash: d5GYDhOIlD2Y6V3aPBFRagLvqFIYFYSveCQyFaynEfU=) 3: 625827FC74D811EB99569279C4F9AE02.roa (hash: nuHbMZ7jdYXMsw/8MYqt1N+pl2yGg3LZQWJTXeLOE+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EBC, serialNumber=BD48BAFA32AD2E93B889CF3E3869AC034A172312 Validity Not Before: May 12 22:04:26 2025 GMT Not After : May 19 22:04:26 2025 GMT Subject: CN=6822706a-4fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:8f:8b:0a:6f:df:93:3d:ea:02:45:86:7c: dd:fb:59:55:95:e7:e6:d7:16:aa:4d:e5:d7:6a:c9: 0e:b3:97:b7:e0:b0:08:f4:45:23:5a:3d:70:9a:0b: 82:ad:bc:84:f7:d7:fb:d5:0d:8a:ce:47:fd:e9:f6: 6a:e8:5c:d0:da:24:52:f4:4f:d1:db:98:72:b1:75: 7c:86:9e:37:b3:f6:b1:ed:35:95:c2:4b:a0:75:09: fc:63:e4:92:d9:7a:eb:f1:1c:50:33:65:0e:18:ad: 5e:58:8d:5b:0e:f7:d1:16:95:0e:f5:f5:23:48:37: 9b:90:a7:37:08:f9:0a:40:81:99:6f:1d:09:40:33: bb:7f:a7:82:8b:20:23:6c:ed:92:59:71:01:0b:c7: 22:bf:bc:bd:84:b3:4a:b2:9b:9d:60:06:03:a9:91: f6:46:51:20:9a:cf:94:70:0d:21:c0:55:39:23:77: ff:42:5e:5f:19:be:2a:6a:02:a6:09:12:03:99:5e: f0:18:b3:00:11:99:7b:17:6b:26:5c:cd:74:53:32: c6:31:28:d3:6e:33:30:0f:87:fc:a2:f7:7f:65:ca: 54:3f:90:d0:22:13:5a:a9:0d:c0:c4:4b:6f:e5:b8: 76:c1:58:af:a7:a6:f4:1a:db:d2:ca:98:80:55:72: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:7F:9A:FB:51:29:93:DB:69:4D:F2:AD:F6:E7:4A:57:05:D8:EB X509v3 Authority Key Identifier: keyid:BD:48:BA:FA:32:AD:2E:93:B8:89:CF:3E:38:69:AC:03:4A:17:23:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUi6-jKtLpO4ic8-OGmsA0oXIxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EBC/3883414874D611EBBCBDFA73C4F9AE02/vUi6-jKtLpO4ic8-OGmsA0oXIxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:93:2f:20:f1:59:8b:88:9a:95:af:ba:d0:7d:33:45:31: 58:5c:bd:e7:89:67:62:14:51:8b:5c:1e:54:8a:98:ba:be:6e: 8d:47:9c:e6:7a:19:13:0b:ee:41:a5:06:61:8a:f2:87:e8:a0: b7:8e:16:6b:57:7c:d1:5d:45:c0:41:ab:5b:6d:49:00:bf:13: 63:c6:c9:a3:17:2d:60:ba:33:79:6f:da:5e:10:cf:70:3b:69: e9:11:01:8d:9c:f4:22:ce:db:97:cf:aa:0a:b2:fe:81:8d:b5: a6:b4:a5:93:e7:87:09:9f:66:67:11:61:43:96:27:84:80:7c: c1:de:d0:5d:c1:96:e1:91:44:07:05:28:d9:24:8e:b3:4b:87: 85:dc:07:df:ec:85:52:e9:aa:9c:1d:b8:cb:42:64:65:2d:a7: e4:82:a0:74:9a:55:87:d6:a3:4c:37:55:0b:cc:cf:72:b0:f0: 57:4b:1d:9c:e7:6d:6d:32:a2:ab:f1:ce:84:7c:ee:8e:a8:64: 9c:08:50:c4:5c:d8:5a:62:5e:d0:46:19:b5:c8:9f:62:f9:72: d7:0f:7e:84:09:ba:b1:53:db:8e:0b:59:c2:33:1f:2d:21:63: a5:c3:88:4a:88:a6:29:10:cf:94:e6:68:e5:b3:22:43:13:8e: 1f:66:e0:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQkMxMTAvBgNVBAUTKEJENDhCQUZBMzJBRDJFOTNCODg5Q0YzRTM4NjlBQzAz NEExNzIzMTIwHhcNMjUwNTEyMjIwNDI2WhcNMjUwNTE5MjIwNDI2WjAYMRYwFAYD VQQDEw02ODIyNzA2YS00ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsImPiwpv35M96gJFhnzd+1lVlefm1xaqTeXXaskOs5e34LAI9EUjWj1wmguC rbyE99f71Q2Kzkf96fZq6FzQ2iRS9E/R25hysXV8hp43s/ax7TWVwkugdQn8Y+SS 2Xrr8RxQM2UOGK1eWI1bDvfRFpUO9fUjSDebkKc3CPkKQIGZbx0JQDO7f6eCiyAj bO2SWXEBC8civ7y9hLNKspudYAYDqZH2RlEgms+UcA0hwFU5I3f/Ql5fGb4qagKm CRIDmV7wGLMAEZl7F2smXM10UzLGMSjTbjMwD4f8ovd/ZcpUP5DQIhNaqQ3AxEtv 5bh2wVivp6b0GtvSypiAVXKZ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJMf5r7 USmT22lN8q3250pXBdjrMB8GA1UdIwQYMBaAFL1IuvoyrS6TuInPPjhprANKFyMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVCQy8zODgzNDE0ODc0 RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExwTzRpYzgtT0dtc0Ewb1hJ eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVaTYtakt0THBPNGljOC1PR21zQTBvWEl4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVCQy8zODgzNDE0ODc0RDYxMUVCQkNCREZBNzNDNEY5QUUwMi92VWk2LWpLdExw TzRpYzgtT0dtc0Ewb1hJeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbApMvIPFZi4iala+60H0zRTFYXL3niWdiFFGLXB5Uipi6vm6NR5zm ehkTC+5BpQZhivKH6KC3jhZrV3zRXUXAQatbbUkAvxNjxsmjFy1gujN5b9peEM9w O2npEQGNnPQiztuXz6oKsv6BjbWmtKWT54cJn2ZnEWFDlieEgHzB3tBdwZbhkUQH BSjZJI6zS4eF3Aff7IVS6aqcHbjLQmRlLafkgqB0mlWH1qNMN1ULzM9ysPBXSx2c 521tMqKr8c6EfO6OqGScCFDEXNhaYl7QRhm1yJ9i+XLXD36ECbqxU9uOC1nCMx8t IWOlw4hKiKYpEM+U5mjlsyJDE44fZuBz -----END CERTIFICATE-----Generated at Wed May 14 17:42:56 2025 by rpki-client