$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft File: Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json) Hash identifier: 76MoQdehjQKdxZZ4ZjbCZzxt0dd25xk72prgZhx2q1E= Subject key identifier: C2:9E:6E:C4:3E:FE:39:57:07:03:D5:0D:1E:CC:1A:AA:E3:2B:78:06 Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 Certificate issuer: /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft Manifest number: 01D3 Signing time: Fri 25 Apr 2025 02:04:40 +0000 Manifest this update: Fri 25 Apr 2025 02:04:40 +0000 Manifest next update: Fri 02 May 2025 02:04:40 +0000 Files and hashes: 1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: 0jzxkERuYhfFySRHLfTF9KCpc6O3Cn86IqYSIbdFxY0=) 2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: J1WS3Wr+Cq+Ya2W/A8acH4GDeK/tNPuqzs+ITQkHcD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Validity Not Before: Apr 25 02:04:40 2025 GMT Not After : May 2 02:04:40 2025 GMT Subject: CN=680aedb8-97c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:49:0c:53:48:01:46:ab:44:a5:fa:62:82: 5a:f3:77:7b:e6:80:21:3d:34:e1:89:2f:92:84:35: 70:4c:40:12:64:69:e1:c9:62:e7:b9:f6:73:ea:2a: 1c:07:c0:6b:b6:85:48:ad:d7:6b:b7:1a:fd:c8:1a: 07:7b:26:32:87:2e:c0:a3:3f:3a:33:29:c7:05:66: 06:28:5b:77:59:8f:b7:ff:96:41:5f:6d:69:77:eb: 3d:ba:d7:d5:e9:90:61:6a:cf:30:07:42:e1:bf:28: 32:0a:e9:6c:30:51:f2:52:9d:3b:55:88:2d:a7:b2: 38:b2:94:83:57:5d:59:7f:19:be:0e:85:42:b5:ee: 6b:61:13:f5:ba:5a:ab:8f:48:db:5e:b1:71:6f:98: b3:ae:f3:99:36:4b:0f:0e:87:c9:68:3a:b7:87:eb: 8c:e0:63:c3:bb:66:35:b8:07:62:bd:bf:89:28:8f: 33:11:93:bf:3d:68:95:e1:25:76:a8:d0:15:29:5f: 51:b5:7f:ce:79:12:c4:7b:a5:a1:03:fb:70:c8:39: 1a:0c:d7:bc:68:d2:ff:fe:e7:81:c4:df:41:6f:86: 87:60:54:78:60:fb:37:3a:26:90:3c:2f:8a:61:80: 09:d2:89:04:3a:a4:32:25:67:35:70:b2:ec:ce:8b: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:6E:C4:3E:FE:39:57:07:03:D5:0D:1E:CC:1A:AA:E3:2B:78:06 X509v3 Authority Key Identifier: keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:18:a0:f2:61:a0:e1:ea:72:20:ab:aa:23:9c:5e:1f:d8:0c: e7:b8:d4:a7:17:48:79:5c:65:84:27:aa:91:20:b4:93:9f:8d: 96:f5:02:82:5e:b0:80:12:d8:2b:3f:6c:40:5d:e6:77:71:1c: 63:69:13:39:48:40:ca:01:62:06:75:4a:b8:89:2f:1a:c0:30: 55:dd:ec:71:06:2e:5f:bc:b9:15:6b:7e:4a:f7:b9:e4:9f:13: a9:b3:82:53:b1:b4:72:e2:56:51:f2:be:e3:fb:95:4b:3a:39: ae:4c:79:ee:a8:d9:5a:ec:f0:0e:ba:20:56:c7:56:0c:7b:51: ce:7e:d3:49:7a:23:74:f6:36:0e:c4:e2:d2:66:e8:bf:d8:db: 80:62:12:82:66:ae:1a:34:7c:cc:c0:5b:00:e0:71:57:06:77: d0:a8:a1:12:13:0b:ee:33:c1:af:5b:55:ac:c8:ee:a4:f0:8e: 75:e9:5e:0e:b8:0b:9f:0d:ae:24:c7:c9:10:bf:e7:c6:45:71: 37:4a:2a:b3:53:4f:9c:05:51:1e:0e:76:a8:2c:9c:ef:80:e0: 63:48:35:8e:15:5e:dc:25:32:d1:54:c9:49:83:f3:25:71:4d: 1c:bb:f2:36:e1:d3:56:8b:12:16:16:a7:8d:6c:b7:32:1f:1e: 11:a8:07:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGRUYxMTAvBgNVBAUTKDMyMUQwQUI3OEExQUJFMzUxQTdEQjc5MzIwRDlGRkQz NzJBMDhDNDUwHhcNMjUwNDI1MDIwNDQwWhcNMjUwNTAyMDIwNDQwWjAYMRYwFAYD VQQDEw02ODBhZWRiOC05N2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ApJDFNIAUarRKX6YoJa83d75oAhPTThiS+ShDVwTEASZGnhyWLnufZz6ioc B8BrtoVIrddrtxr9yBoHeyYyhy7Aoz86MynHBWYGKFt3WY+3/5ZBX21pd+s9utfV 6ZBhas8wB0LhvygyCulsMFHyUp07VYgtp7I4spSDV11Zfxm+DoVCte5rYRP1ulqr j0jbXrFxb5izrvOZNksPDofJaDq3h+uM4GPDu2Y1uAdivb+JKI8zEZO/PWiV4SV2 qNAVKV9RtX/OeRLEe6WhA/twyDkaDNe8aNL//ueBxN9Bb4aHYFR4YPs3OiaQPC+K YYAJ0okEOqQyJWc1cLLszotvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKebsQ+ /jlXBwPVDR7MGqrjK3gGMB8GA1UdIwQYMBaAFDIdCreKGr41Gn23kyDZ/9NyoIxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEZFRi9CMDM2M0Q2MDY0 RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZqVWFmYmVUSU5uXzAzS2dq RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oMEt0NG9hdmpVYWZiZVRJTm5fMDNLZ2pFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEZFRi9CMDM2M0Q2MDY0RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZq VWFmYmVUSU5uXzAzS2dqRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZGKDyYaDh6nIgq6ojnF4f2AznuNSnF0h5XGWEJ6qRILSTn42W9QKC XrCAEtgrP2xAXeZ3cRxjaRM5SEDKAWIGdUq4iS8awDBV3exxBi5fvLkVa35K97nk nxOps4JTsbRy4lZR8r7j+5VLOjmuTHnuqNla7PAOuiBWx1YMe1HOftNJeiN09jYO xOLSZui/2NuAYhKCZq4aNHzMwFsA4HFXBnfQqKESEwvuM8GvW1WsyO6k8I516V4O uAufDa4kx8kQv+fGRXE3SiqzU0+cBVEeDnaoLJzvgOBjSDWOFV7cJTLRVMlJg/Ml cU0cu/I24dNWixIWFqeNbLcyHx4RqAdU -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:34 2025 by rpki-client