$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json) Hash identifier: sGzpXwiPGwH5rir3OXMRMfO4+5o7VeSFfDlA2NGQVb0= Subject key identifier: 37:79:0C:7D:F4:B2:5F:D0:D8:D7:08:AF:4D:99:AA:55:D0:91:D7:19 Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft Manifest number: EA Signing time: Fri 25 Apr 2025 04:25:00 +0000 Manifest this update: Fri 25 Apr 2025 04:25:00 +0000 Manifest next update: Fri 02 May 2025 04:24:59 +0000 Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: R/dzepGfcP8yao7ynkffyntduF+X2SE3MG5KURvZWX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Validity Not Before: Apr 25 04:25:00 2025 GMT Not After : May 2 04:24:59 2025 GMT Subject: CN=680b0e9c-ae12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:e1:77:3b:81:eb:4e:6d:72:0d:5f:fd:29: b2:37:8c:87:01:53:7e:5e:4f:76:da:f1:72:dc:ef: ba:06:cf:d1:f2:63:a7:2a:50:86:68:10:18:00:4a: 89:b7:56:b0:81:27:42:8c:d8:b3:36:25:9e:95:2b: 25:89:4b:4c:07:56:4e:56:60:62:b1:7d:51:96:b0: c1:9a:f4:3a:1e:22:93:68:b4:bd:07:55:32:26:28: f2:58:a1:47:0a:4b:da:50:90:38:48:22:cb:3f:0d: b5:e3:66:e3:37:5d:71:10:f3:40:ca:76:3a:07:42: 23:8f:5d:3c:31:ea:06:6a:fa:2a:2b:be:7b:aa:74: e9:09:b1:ad:c7:c3:1b:3e:1d:2f:f7:ce:11:75:14: ae:90:7e:d3:15:6e:68:f4:f5:2d:32:1c:04:9c:2a: 45:cc:36:e6:5d:ec:8c:f7:5e:c6:55:ae:e6:da:1d: 7c:b4:6f:99:00:89:c3:20:e2:5e:8a:32:e6:78:11: a6:93:f7:82:7d:97:c1:4e:dc:a6:99:a2:e0:04:e0: ea:96:d2:c6:4a:0f:1d:6e:f7:90:b4:ab:c2:2d:e2: 21:1a:77:bc:7e:72:50:70:6c:e6:b2:69:d5:7d:60: 6a:f9:43:d1:a0:fb:14:e1:1d:22:53:76:0c:5a:50: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:79:0C:7D:F4:B2:5F:D0:D8:D7:08:AF:4D:99:AA:55:D0:91:D7:19 X509v3 Authority Key Identifier: keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7c:ce:56:74:2e:d9:01:72:8f:80:b5:f0:c9:8e:73:ec:b3: 67:11:b9:d7:da:c4:ed:6d:04:68:ad:0d:af:e1:95:86:eb:ac: 38:24:e9:a2:d7:c6:46:4b:c7:38:59:de:ec:65:dc:3d:be:71: 17:28:3d:b8:7e:e5:cf:40:c2:2f:52:cf:c8:7b:90:a0:2c:fc: b8:3e:43:dd:ba:49:5b:54:fd:4d:c9:58:22:51:f6:59:7b:2d: 99:8e:27:ec:33:5c:d0:fd:45:f7:83:1e:1d:08:8d:90:78:ba: a9:6c:00:d4:4e:67:47:a8:e9:07:ee:72:c4:fd:ec:62:83:cf: 55:56:85:2a:4d:ea:71:cf:0d:32:ad:b5:65:6b:28:3a:24:7b: 10:f3:5f:61:8f:ac:df:f3:73:4b:33:bf:b8:f0:1a:0e:65:f0: 84:c5:45:e6:4d:1c:ca:df:96:68:f3:8c:a0:66:47:76:aa:fb: 1a:4d:80:73:30:3a:24:d1:6b:60:ba:dd:36:a1:8a:7e:76:e5: 69:72:ec:c0:94:9c:11:13:5c:fd:03:82:77:5e:6f:b5:35:60: e0:63:f1:80:8d:4e:5b:32:64:d4:b7:37:66:9b:c5:b8:7f:57: 0a:d9:6c:9b:b3:8b:50:28:f2:ce:fe:51:c7:07:fd:30:e0:4f: 5c:ce:cf:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB MUJCOTZGM0UwHhcNMjUwNDI1MDQyNTAwWhcNMjUwNTAyMDQyNDU5WjAYMRYwFAYD VQQDEw02ODBiMGU5Yy1hZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtrhdzuB605tcg1f/SmyN4yHAVN+Xk922vFy3O+6Bs/R8mOnKlCGaBAYAEqJ t1awgSdCjNizNiWelSsliUtMB1ZOVmBisX1RlrDBmvQ6HiKTaLS9B1UyJijyWKFH CkvaUJA4SCLLPw2142bjN11xEPNAynY6B0Ijj108MeoGavoqK757qnTpCbGtx8Mb Ph0v984RdRSukH7TFW5o9PUtMhwEnCpFzDbmXeyM917GVa7m2h18tG+ZAInDIOJe ijLmeBGmk/eCfZfBTtymmaLgBODqltLGSg8dbveQtKvCLeIhGne8fnJQcGzmsmnV fWBq+UPRoPsU4R0iU3YMWlA6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd5DH30 sl/Q2NcIr02ZqlXQkdcZMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1 SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATfM5WdC7ZAXKPgLXwyY5z7LNnEbnX2sTtbQRorQ2v4ZWG66w4JOmi 18ZGS8c4Wd7sZdw9vnEXKD24fuXPQMIvUs/Ie5CgLPy4PkPduklbVP1NyVgiUfZZ ey2ZjifsM1zQ/UX3gx4dCI2QeLqpbADUTmdHqOkH7nLE/exig89VVoUqTepxzw0y rbVlayg6JHsQ819hj6zf83NLM7+48BoOZfCExUXmTRzK35Zo84ygZkd2qvsaTYBz MDok0Wtgut02oYp+duVpcuzAlJwRE1z9A4J3Xm+1NWDgY/GAjU5bMmTUtzdmm8W4 f1cK2Wybs4tQKPLO/lHHB/0w4E9czs+V -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:41 2025 by rpki-client