$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: IrYivt3lyU6y9LQ3NhlKm44ECZOA9yl5lsglxLVG5m8= Subject key identifier: 6D:AC:0A:29:35:DB:4F:86:83:98:D6:6E:6B:C3:A7:21:7E:3F:55:79 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 01BC Signing time: Fri 25 Apr 2025 02:14:00 +0000 Manifest this update: Fri 25 Apr 2025 02:14:00 +0000 Manifest next update: Fri 02 May 2025 02:14:00 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: 6stFSiEZnQEWSzJOzXfExFSnlPe+jYwZ2tAhwtGmPj8=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: zvSljqq8u0aCswP8WadYkts+Ql8DETe3wBjOyVuGUoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Apr 25 02:14:00 2025 GMT Not After : May 2 02:14:00 2025 GMT Subject: CN=680aefe8-0301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:8f:04:96:e3:c8:92:04:b6:05:aa:9c:64: c9:48:8c:0a:5e:e1:20:43:7f:6c:2c:3b:6e:83:a5: c8:ee:ca:8d:9d:62:08:2c:a3:48:9a:15:08:95:81: 95:70:46:ad:77:d7:38:b5:a0:63:13:66:63:d0:e1: af:e7:46:cc:b7:bd:65:7d:8b:c4:c3:ae:d6:07:7a: d3:c0:18:cd:9e:8b:33:e1:b2:d4:de:82:0e:39:a6: 43:69:61:93:ce:5f:07:78:b5:d1:c1:36:54:5f:50: 49:93:30:e7:05:bf:8e:e8:00:2c:46:c6:a1:5e:72: f2:6d:63:b2:92:a4:50:55:78:8e:82:86:60:12:15: dc:18:dc:20:61:27:06:d8:ee:9a:a4:fc:08:1e:de: ad:91:7f:1e:0e:5d:6c:fd:f4:1e:97:b2:57:04:37: 69:5a:12:31:c7:0a:25:dd:86:7b:fc:8b:f5:1d:38: 8e:c6:63:39:f5:1d:d3:f7:bf:14:82:e1:72:36:b1: 21:3c:10:9c:f0:ed:5d:2c:c1:21:a1:1c:1f:34:d3: a3:21:86:5d:c3:66:a8:2a:35:85:96:59:39:67:3a: 15:3b:3a:c6:48:dd:27:c9:77:1d:6d:73:8f:82:38: 07:54:ae:15:0f:81:10:b6:48:cc:e7:f0:65:88:e2: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AC:0A:29:35:DB:4F:86:83:98:D6:6E:6B:C3:A7:21:7E:3F:55:79 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c9:61:b3:d1:64:bc:89:43:7f:f1:67:2f:56:69:a9:f5:2e: e2:25:7c:68:67:83:f9:06:f9:0d:78:25:74:1f:9d:5e:a0:db: 6c:8f:30:69:5b:d6:c1:00:b2:bb:a6:d6:8c:44:20:b5:85:dc: 98:a9:eb:60:5f:a1:73:4a:2d:07:33:09:fe:af:57:60:6b:ff: 17:4e:47:aa:6c:5e:6b:b6:49:af:09:d8:75:3c:9c:84:18:6d: ed:98:83:39:6f:28:19:54:1a:bb:46:21:13:76:cf:63:12:84: 84:26:d2:19:e1:b7:cd:17:ba:8e:d6:39:d9:18:3a:7f:3f:de: a1:9a:02:59:de:de:33:ca:34:72:5b:45:2a:3a:98:12:78:6e: 84:6e:8c:b0:f1:50:0e:b6:db:33:90:23:25:3a:62:05:49:35: f1:df:cb:f2:dd:ba:bc:b1:28:86:fd:14:03:22:e3:ba:e9:ab: 7f:64:c6:a8:8d:3b:22:15:7c:d9:03:f1:d1:34:81:b1:38:59: 42:4d:95:8b:c6:50:64:1c:96:72:16:a5:b0:17:b2:97:51:3e: 70:63:97:30:6d:1f:9a:f5:e5:fc:b5:e9:d7:b9:de:45:b6:07: 62:9f:cf:76:74:4b:0f:52:7b:de:8a:3b:e1:c1:36:5f:4d:97: 8b:db:88:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjUwNDI1MDIxNDAwWhcNMjUwNTAyMDIxNDAwWjAYMRYwFAYD VQQDEw02ODBhZWZlOC0wMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3iPBJbjyJIEtgWqnGTJSIwKXuEgQ39sLDtug6XI7sqNnWIILKNImhUIlYGV cEatd9c4taBjE2Zj0OGv50bMt71lfYvEw67WB3rTwBjNnosz4bLU3oIOOaZDaWGT zl8HeLXRwTZUX1BJkzDnBb+O6AAsRsahXnLybWOykqRQVXiOgoZgEhXcGNwgYScG 2O6apPwIHt6tkX8eDl1s/fQel7JXBDdpWhIxxwol3YZ7/Iv1HTiOxmM59R3T978U guFyNrEhPBCc8O1dLMEhoRwfNNOjIYZdw2aoKjWFllk5ZzoVOzrGSN0nyXcdbXOP gjgHVK4VD4EQtkjM5/BliOJt9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2sCik1 20+Gg5jWbmvDpyF+P1V5MB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVyWGz0WS8iUN/8WcvVmmp9S7iJXxoZ4P5BvkNeCV0H51eoNtsjzBp W9bBALK7ptaMRCC1hdyYqetgX6FzSi0HMwn+r1dga/8XTkeqbF5rtkmvCdh1PJyE GG3tmIM5bygZVBq7RiETds9jEoSEJtIZ4bfNF7qO1jnZGDp/P96hmgJZ3t4zyjRy W0UqOpgSeG6Eboyw8VAOttszkCMlOmIFSTXx38vy3bq8sSiG/RQDIuO66at/ZMao jTsiFXzZA/HRNIGxOFlCTZWLxlBkHJZyFqWwF7KXUT5wY5cwbR+a9eX8tenXud5F tgdin892dEsPUnveijvhwTZfTZeL24i1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:02 2025 by rpki-client