$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft File: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json) Hash identifier: 3BiVK5yYFS9A9igO2BV8wlkp+h73wkBkYvEhz075jC0= Subject key identifier: 8E:34:22:41:B8:13:BD:72:F5:5C:C5:F1:39:EB:18:88:CD:FD:47:2C Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft Manifest number: 01A5 Signing time: Sun 11 May 2025 02:15:56 +0000 Manifest this update: Sun 11 May 2025 02:15:56 +0000 Manifest next update: Sun 18 May 2025 02:15:56 +0000 Files and hashes: 1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: hNHtxvzF7KCPUyOPdf0szHY26IO1k1QmuWSRd4kVIQ0=) 2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4 Validity Not Before: May 11 02:15:56 2025 GMT Not After : May 18 02:15:56 2025 GMT Subject: CN=6820085c-90c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:10:c5:57:18:5a:cb:b4:06:22:e9:eb:e4: c3:af:a2:82:dc:75:96:bd:cb:16:14:30:d1:a7:dd: ec:14:23:b2:b8:bc:01:4b:80:0a:72:03:12:49:89: 13:e6:54:a0:bf:96:0a:51:03:21:b5:bf:28:bf:13: a1:75:66:0f:d3:83:5a:bf:ae:63:5f:a7:eb:da:80: bd:38:18:dc:54:22:59:bf:34:16:ff:71:47:3a:70: 89:31:80:20:8b:5a:5b:f3:1a:40:df:15:3a:68:15: 0b:96:5a:1b:09:8d:44:d6:90:99:dc:0e:98:34:19: 2e:b1:e5:59:24:e2:aa:78:10:b4:41:1e:24:8a:d9: 67:a7:d8:19:b9:0b:03:23:89:fa:9d:a0:0d:71:a9: bf:c0:80:8f:e9:f5:59:89:a2:2e:78:fd:05:86:d3: da:20:c0:0a:08:eb:5a:71:dc:73:66:52:5f:5b:28: 49:4e:7e:b8:df:97:67:c0:8f:16:b1:17:81:15:3c: e7:36:c0:2e:df:b6:f9:06:5c:fc:73:dc:c8:d4:fe: 06:e6:7b:6c:94:41:d7:aa:6f:fb:4f:ed:ff:a9:ad: 64:3a:e8:30:56:d4:c8:3b:89:57:6a:6f:35:d9:b9: bc:fa:a4:f0:b5:f7:95:c4:08:c2:49:b3:36:15:b2: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:34:22:41:B8:13:BD:72:F5:5C:C5:F1:39:EB:18:88:CD:FD:47:2C X509v3 Authority Key Identifier: keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5c:fd:2c:1a:b9:e3:cd:b8:39:5a:32:74:6c:6f:26:4a:7a: 33:28:e9:e7:61:00:76:3a:ee:b4:1c:f9:25:12:44:7c:af:f9: f6:80:da:ff:cc:ed:b2:48:5c:87:ec:1a:3b:55:76:0d:57:3c: 58:10:9d:c2:f6:c7:86:a4:ef:27:94:09:2a:22:8a:48:90:d2: 1e:22:d2:d3:33:a6:d6:91:e0:99:86:a4:23:fd:80:a4:16:ae: 87:9c:40:6c:2d:3e:51:cf:5b:91:13:50:6a:db:d4:ad:d7:84: 61:99:44:5f:62:54:b7:12:39:9a:7f:5c:f9:bb:27:03:72:03: 11:94:9d:af:e2:60:4b:6d:6d:3b:11:34:c8:6f:1a:cb:64:45: 07:d2:33:f0:df:39:71:3c:e6:b7:e1:76:aa:36:ab:d1:e4:b4: be:a1:07:f1:db:b3:99:c6:f4:e9:f1:da:8a:24:07:b7:1c:0a: e2:53:6f:a4:42:3a:b4:8b:6e:31:c3:aa:36:d5:43:60:88:fc: b9:6e:af:24:95:d7:b6:f6:1e:eb:da:12:5c:5e:92:05:50:48: bb:78:d7:a8:c9:cf:a1:a0:ba:85:0a:cb:37:d4:5a:d5:e1:9f: b9:ff:85:60:38:62:2c:a4:c1:b5:64:4f:31:3e:76:3f:63:1c: 49:63:ae:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMjIxMTAvBgNVBAUTKEJCNEZBRTg1NTQwQTVBRDlGOTNDQjQ4MkM0NUM5NTc2 RjUyQTNCRjQwHhcNMjUwNTExMDIxNTU2WhcNMjUwNTE4MDIxNTU2WjAYMRYwFAYD VQQDEw02ODIwMDg1Yy05MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWYQxVcYWsu0BiLp6+TDr6KC3HWWvcsWFDDRp93sFCOyuLwBS4AKcgMSSYkT 5lSgv5YKUQMhtb8ovxOhdWYP04Nav65jX6fr2oC9OBjcVCJZvzQW/3FHOnCJMYAg i1pb8xpA3xU6aBULllobCY1E1pCZ3A6YNBkuseVZJOKqeBC0QR4kitlnp9gZuQsD I4n6naANcam/wICP6fVZiaIueP0FhtPaIMAKCOtacdxzZlJfWyhJTn6435dnwI8W sReBFTznNsAu37b5Blz8c9zI1P4G5ntslEHXqm/7T+3/qa1kOugwVtTIO4lXam81 2bm8+qTwtfeVxAjCSbM2FbKK9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI40IkG4 E71y9VzF8TnrGIjN/UcsMB8GA1UdIwQYMBaAFLtProVUClrZ+Ty0gsRclXb1Kjv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEyMi8wRkQ0RUY0RUFF RUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0bjVQTFNDeEZ5VmR2VXFP X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UwLXVoVlFLV3RuNVBMU0N4RnlWZHZVcU9fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEyMi8wRkQ0RUY0RUFFRUYxMUVEQTJFOUJDNjhDNEY5QUUwMi91MC11aFZRS1d0 bjVQTFNDeEZ5VmR2VXFPX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaXP0sGrnjzbg5WjJ0bG8mSnozKOnnYQB2Ou60HPklEkR8r/n2gNr/ zO2ySFyH7Bo7VXYNVzxYEJ3C9seGpO8nlAkqIopIkNIeItLTM6bWkeCZhqQj/YCk Fq6HnEBsLT5Rz1uRE1Bq29St14RhmURfYlS3Ejmaf1z5uycDcgMRlJ2v4mBLbW07 ETTIbxrLZEUH0jPw3zlxPOa34XaqNqvR5LS+oQfx27OZxvTp8dqKJAe3HAriU2+k Qjq0i24xw6o21UNgiPy5bq8klde29h7r2hJcXpIFUEi7eNeoyc+hoLqFCss31FrV 4Z+5/4VgOGIspMG1ZE8xPnY/YxxJY64l -----END CERTIFICATE-----Generated at Mon May 12 15:54:17 2025 by rpki-client