$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: ZCy9Wo8i16dGccDhm3mZxOEdDWNgN5Go089j7FTg75E= Subject key identifier: B6:D4:87:B9:79:EC:86:91:2E:B7:58:56:AE:9C:BF:A0:06:D9:1B:C8 Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 01C7 Signing time: Fri 25 Apr 2025 02:07:54 +0000 Manifest this update: Fri 25 Apr 2025 02:07:53 +0000 Manifest next update: Fri 02 May 2025 02:07:53 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: 8E7L9joExT+Uyx7FJvarYzbq4DI1V53YxuIohTSYBAQ=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: Apr 25 02:07:53 2025 GMT Not After : May 2 02:07:53 2025 GMT Subject: CN=680aee79-c749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:6a:c2:7c:f3:21:30:75:20:76:7a:9a:0b: 97:ac:33:8a:bc:a1:0d:1d:f3:7a:9d:61:e8:69:6c: 3c:ff:01:07:a6:38:7e:f8:26:14:df:41:1d:d0:4c: 99:bf:0a:92:ca:45:bf:a8:99:f0:9a:1c:35:91:57: 3a:4c:bf:74:75:c4:d7:a3:2c:36:3f:a5:59:bc:ce: 50:4f:10:3f:f1:60:f6:a6:5b:b4:2c:77:86:e7:5a: e1:a6:44:2b:29:f6:dd:22:e0:a6:b2:5e:dd:7c:d8: 0c:ab:9b:f3:b9:20:ce:73:23:b1:54:e8:70:a9:fd: 94:9e:c1:f6:c5:86:c1:33:9d:cb:a7:2d:fd:d4:01: da:c9:c4:aa:f2:0d:0f:cb:4d:f6:f3:fc:fd:dc:36: 2f:97:9e:8e:ec:0e:be:13:89:32:55:89:7e:51:b1: aa:ce:fa:c2:3d:40:75:9c:0a:00:e6:52:96:7f:06: e4:05:3f:93:01:38:0e:85:10:28:f7:88:90:41:5b: 6b:ec:71:30:95:3c:84:d4:34:ad:18:55:37:9f:20: d8:c8:dd:71:af:9e:94:3a:cb:e7:50:3e:12:7e:9e: e2:8f:de:46:8c:8d:db:98:16:63:30:ed:9e:48:a5: 26:c4:67:29:ba:d3:0c:64:23:c8:f0:23:54:81:77: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D4:87:B9:79:EC:86:91:2E:B7:58:56:AE:9C:BF:A0:06:D9:1B:C8 X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:4b:3f:c4:d2:41:5d:45:c1:7d:b4:99:1f:4f:f2:27:a0: 73:9f:30:61:b0:22:34:aa:22:35:48:b2:4e:a3:62:bc:f1:be: 35:c9:34:0d:94:2d:f1:07:b4:36:c6:3e:f8:c6:26:a2:1e:12: b6:fe:6c:5d:71:02:82:97:b6:66:da:d3:cb:79:ae:46:8d:7c: 45:ef:61:00:66:52:ff:87:03:5f:0e:e6:40:e8:e8:1c:84:39: 00:f8:c0:1d:ad:bf:df:c4:6a:60:cc:b7:0a:e3:87:02:df:95: fb:b0:92:bc:f6:cb:00:bf:4e:66:d2:7c:60:30:a6:25:1a:f1: 61:db:ce:f3:ad:05:c0:6e:e9:17:e9:80:6a:6b:b1:9a:5c:cc: b9:f7:c4:6a:4e:d9:13:84:ec:62:f1:8f:6e:c0:0a:ef:5b:14: a1:2f:73:48:b7:68:72:60:69:ac:f1:a6:18:85:05:b8:4c:3c: 86:4a:65:e9:55:ff:96:e5:f1:9e:38:ef:f1:62:3b:e7:12:1a: 25:9a:0a:a4:48:89:ba:5c:19:cd:93:8f:80:4b:8b:34:99:c5: d5:2e:c5:18:42:d3:b0:2e:91:f3:7d:8f:38:85:bb:2e:db:e7: 94:1e:28:5a:c1:63:4e:55:f1:44:0b:43:5f:b8:c8:b3:2d:0e: 90:d8:18:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjUwNDI1MDIwNzUzWhcNMjUwNTAyMDIwNzUzWjAYMRYwFAYD VQQDEw02ODBhZWU3OS1jNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo5qwnzzITB1IHZ6mguXrDOKvKENHfN6nWHoaWw8/wEHpjh++CYU30Ed0EyZ vwqSykW/qJnwmhw1kVc6TL90dcTXoyw2P6VZvM5QTxA/8WD2plu0LHeG51rhpkQr KfbdIuCmsl7dfNgMq5vzuSDOcyOxVOhwqf2UnsH2xYbBM53Lpy391AHaycSq8g0P y0328/z93DYvl56O7A6+E4kyVYl+UbGqzvrCPUB1nAoA5lKWfwbkBT+TATgOhRAo 94iQQVtr7HEwlTyE1DStGFU3nyDYyN1xr56UOsvnUD4Sfp7ij95GjI3bmBZjMO2e SKUmxGcputMMZCPI8CNUgXeCOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbUh7l5 7IaRLrdYVq6cv6AG2RvIMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwn0s/xNJBXUXBfbSZH0/yJ6BznzBhsCI0qiI1SLJOo2K88b41yTQN lC3xB7Q2xj74xiaiHhK2/mxdcQKCl7Zm2tPLea5GjXxF72EAZlL/hwNfDuZA6Ogc hDkA+MAdrb/fxGpgzLcK44cC35X7sJK89ssAv05m0nxgMKYlGvFh287zrQXAbukX 6YBqa7GaXMy598RqTtkThOxi8Y9uwArvWxShL3NIt2hyYGms8aYYhQW4TDyGSmXp Vf+W5fGeOO/xYjvnEholmgqkSIm6XBnNk4+AS4s0mcXVLsUYQtOwLpHzfY84hbsu 2+eUHihawWNOVfFEC0NfuMizLQ6Q2Bg+ -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:03 2025 by rpki-client