$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: 8TPOBNNxRv7ifOp7/s/PD1S87tmkdoOpV7bEKhAN8cs= Subject key identifier: 84:54:62:39:98:E2:C5:1E:4C:C6:84:4A:16:26:F2:26:CA:78:25:C1 Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: F9 Signing time: Thu 24 Apr 2025 23:22:19 +0000 Manifest this update: Thu 24 Apr 2025 23:22:18 +0000 Manifest next update: Thu 01 May 2025 23:22:18 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: AXrMwyBC45fIzCanXPORSqpnD6zlk4+nAw+MJADnD5E=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: tvLrXzmWLi+yYUfuM7mTXsSMiwGKfb5ZJS93I35M4zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Apr 24 23:22:18 2025 GMT Not After : May 1 23:22:18 2025 GMT Subject: CN=680ac7ab-240c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:90:14:8e:53:d3:fa:c8:3d:23:b3:59:b9: 6b:39:30:22:48:0b:c6:b0:48:31:bf:a4:cc:15:4b: e4:0e:87:b0:b4:fd:0a:c8:0e:34:c1:8f:1b:f2:b0: f0:1d:83:fc:8f:1d:3a:72:8e:72:25:9d:d5:1c:23: f7:47:7b:61:9f:fc:fd:23:89:c4:bb:de:5b:cf:a1: 6c:6c:a3:58:01:46:ca:30:81:bc:ff:14:0b:31:05: df:6e:38:3d:af:41:ef:63:8a:5a:9a:77:ea:06:41: f4:de:0f:ba:22:bc:19:51:09:3c:8a:b9:fc:2a:ac: c9:da:5c:56:2a:13:2f:ce:c5:b4:27:a8:b2:24:10: b9:83:f1:51:a9:aa:5d:28:91:78:27:93:1f:37:18: 7d:28:5d:31:56:37:3c:cc:2c:9b:3d:02:aa:b0:6d: 47:fa:3b:d4:13:50:4d:c8:3d:a1:d4:8b:39:1f:14: 0f:e1:6f:d4:c4:f2:d5:04:33:07:bf:d5:97:6e:45: cf:bc:7f:48:2a:5f:1e:d1:23:df:4e:58:d1:ff:20: 3a:41:9e:73:4d:98:4a:27:0e:e0:1b:e0:58:82:fe: 18:5e:3c:4d:a7:4a:76:70:1b:dc:06:43:dc:bc:6b: 37:57:23:9e:0a:7b:5f:8a:4a:5e:3b:a5:1e:ec:bc: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:62:39:98:E2:C5:1E:4C:C6:84:4A:16:26:F2:26:CA:78:25:C1 X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b6:7d:b2:c7:34:49:21:cb:4c:c0:be:e7:11:14:33:94:27: ad:62:6e:41:c5:34:95:0e:48:ae:8c:ca:1f:03:55:77:c3:cc: f9:98:31:99:10:5d:98:c9:c5:34:a1:f5:b0:c7:a9:c9:47:43: 77:9f:12:81:1e:13:8e:56:2c:ae:5a:9e:f6:6d:75:7a:e9:2c: e7:df:7a:2b:15:2d:2e:4a:46:3c:f3:f3:b4:61:6f:e5:a8:14: c2:ac:45:5e:10:ea:8e:dd:0e:87:4f:c8:2f:07:15:7d:44:b3: 39:61:7b:53:75:28:1e:7a:f3:33:36:66:af:8a:d2:30:7e:38: e5:b3:bf:d4:27:6c:3a:e3:fd:9a:39:23:5b:67:5e:8a:64:79: 90:b8:d7:39:26:29:c6:3a:03:9a:da:95:59:ed:e1:bd:6b:ac: 63:1e:1b:4b:4d:ac:75:eb:2e:d5:ce:4e:7e:4b:a9:97:a4:78: 01:50:74:36:de:c2:1b:cb:d4:fb:89:de:1f:59:2e:9b:d9:da: d4:91:55:ae:c1:ec:bb:d8:d6:60:f8:e5:e2:55:89:bd:48:73: f4:66:df:f9:c4:24:fe:b8:6e:b9:96:db:ff:4c:76:ec:23:7c: e0:ac:0d:7f:db:9c:2a:89:b6:48:26:1a:3c:e1:6a:b9:ca:28: 84:84:03:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjUwNDI0MjMyMjE4WhcNMjUwNTAxMjMyMjE4WjAYMRYwFAYD VQQDEw02ODBhYzdhYi0yNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspaQFI5T0/rIPSOzWblrOTAiSAvGsEgxv6TMFUvkDoewtP0KyA40wY8b8rDw HYP8jx06co5yJZ3VHCP3R3thn/z9I4nEu95bz6FsbKNYAUbKMIG8/xQLMQXfbjg9 r0HvY4pamnfqBkH03g+6IrwZUQk8irn8KqzJ2lxWKhMvzsW0J6iyJBC5g/FRqapd KJF4J5MfNxh9KF0xVjc8zCybPQKqsG1H+jvUE1BNyD2h1Is5HxQP4W/UxPLVBDMH v9WXbkXPvH9IKl8e0SPfTljR/yA6QZ5zTZhKJw7gG+BYgv4YXjxNp0p2cBvcBkPc vGs3VyOeCntfikpeO6Ue7LwoSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRUYjmY 4sUeTMaEShYm8ibKeCXBMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUtn2yxzRJIctMwL7nERQzlCetYm5BxTSVDkiujMofA1V3w8z5mDGZ EF2YycU0ofWwx6nJR0N3nxKBHhOOViyuWp72bXV66Szn33orFS0uSkY88/O0YW/l qBTCrEVeEOqO3Q6HT8gvBxV9RLM5YXtTdSgeevMzNmavitIwfjjls7/UJ2w64/2a OSNbZ16KZHmQuNc5JinGOgOa2pVZ7eG9a6xjHhtLTax16y7Vzk5+S6mXpHgBUHQ2 3sIby9T7id4fWS6b2drUkVWuwey72NZg+OXiVYm9SHP0Zt/5xCT+uG65ltv/THbs I3zgrA1/25wqibZIJho84Wq5yiiEhAPq -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:42 2025 by rpki-client