$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: K+hazR2sconH9Q1UfuZTRGXb6z5ecH+0dLAGX8gvvZk= Subject key identifier: 25:25:14:32:85:B1:7C:A1:F7:9C:5E:2D:1F:B1:28:4A:06:C0:E5:1B Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 081A Signing time: Thu 24 Apr 2025 20:41:33 +0000 Manifest this update: Thu 24 Apr 2025 20:41:33 +0000 Manifest next update: Thu 01 May 2025 20:41:33 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: WHmCE3bpvIVO9tNVbCMsj9VO8ApGSmXfFjxNj/FDr1s=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Apr 24 20:41:33 2025 GMT Not After : May 1 20:41:33 2025 GMT Subject: CN=680aa1fd-5f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:72:30:da:bf:9d:9a:ed:0b:b4:bd:1f:b5: eb:51:90:97:34:5c:d8:a0:2d:7a:e9:c2:bd:1d:a6: 62:89:81:e2:5d:de:7a:7a:59:2e:25:88:50:0a:da: bf:03:b2:80:e4:33:da:1b:8e:07:88:dd:7b:6a:85: 11:48:d8:f1:cb:c6:fe:4d:7d:fa:58:7a:76:88:f4: 39:92:0b:cb:ab:dd:05:42:93:35:17:36:64:0b:9e: 3f:29:bb:e2:4f:6e:a8:40:1b:f0:30:00:38:ff:45: b8:fd:b6:3a:df:e3:dc:94:40:8a:02:92:ea:3f:0e: 09:be:76:66:7c:20:51:e6:8c:2d:fa:b5:2e:ed:ef: fe:69:2d:3b:53:24:b5:98:bc:01:4b:9e:51:86:74: 36:44:15:d0:d8:49:63:ec:9a:ab:39:b6:b6:e5:31: d5:34:f6:51:58:11:37:d6:00:35:3c:4a:0f:a2:a1: 54:70:f1:41:d9:04:18:71:6b:5b:00:7b:84:10:08: 38:62:b2:a6:3d:73:f3:e9:2b:b8:ba:7a:75:64:c6: 6b:a4:5e:97:1c:79:22:74:08:3c:0e:68:b5:01:c0: c2:5b:42:3d:23:2c:37:40:de:41:ea:21:7e:17:63: ff:bd:2e:a3:0d:2d:f9:51:ab:7b:a3:7a:04:2d:33: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:25:14:32:85:B1:7C:A1:F7:9C:5E:2D:1F:B1:28:4A:06:C0:E5:1B X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b7:bf:55:55:26:5d:fc:29:ef:55:70:1a:03:11:8f:73:07: f6:65:a5:b5:0a:3d:ca:35:0b:5a:2c:fd:c2:44:ef:4e:b9:1b: 5a:b8:8e:ff:38:69:e1:3e:81:f8:ee:70:93:29:05:4b:c1:79: a9:08:3e:27:fe:ab:a8:f0:5e:0b:48:e4:9b:18:70:4a:64:30: 4a:ee:99:b8:7e:db:c2:fe:0f:72:eb:db:5f:d9:f8:b4:a3:cc: f6:80:57:4b:34:03:12:2a:33:f4:6f:66:ec:c5:00:0f:b0:e8: fd:c8:34:d9:b9:67:14:c7:b0:ff:e4:ea:8d:ee:b2:bb:97:ef: e9:0f:49:ea:ff:fa:a1:af:34:1b:64:97:72:81:88:3a:0e:87: c2:3e:dc:6e:1d:00:1c:c3:b9:54:4b:97:84:5e:07:c1:58:68: 13:91:ef:6a:1c:58:c9:10:2c:8e:71:b4:06:16:d4:55:6d:89: 0a:d5:91:fa:9a:61:5b:5c:5a:06:86:16:6c:d1:34:1f:9c:ec: 7d:c1:15:69:02:29:e5:33:2c:d6:21:50:19:2d:18:62:f8:cb: 54:de:ba:72:7c:79:23:ac:0e:b7:43:94:97:a2:75:40:41:40: 63:7f:c8:bb:c8:92:0a:2e:3a:d5:b3:2e:17:df:a1:dd:a8:e4: 9e:0d:99:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwNDI0MjA0MTMzWhcNMjUwNTAxMjA0MTMzWjAYMRYwFAYD VQQDEw02ODBhYTFmZC01ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5FyMNq/nZrtC7S9H7XrUZCXNFzYoC166cK9HaZiiYHiXd56elkuJYhQCtq/ A7KA5DPaG44HiN17aoURSNjxy8b+TX36WHp2iPQ5kgvLq90FQpM1FzZkC54/Kbvi T26oQBvwMAA4/0W4/bY63+PclECKApLqPw4JvnZmfCBR5owt+rUu7e/+aS07UyS1 mLwBS55RhnQ2RBXQ2Elj7JqrOba25THVNPZRWBE31gA1PEoPoqFUcPFB2QQYcWtb AHuEEAg4YrKmPXPz6Su4unp1ZMZrpF6XHHkidAg8Dmi1AcDCW0I9Iyw3QN5B6iF+ F2P/vS6jDS35Uat7o3oELTPHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUlFDKF sXyh95xeLR+xKEoGwOUbMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMt79VVSZd/CnvVXAaAxGPcwf2ZaW1Cj3KNQtaLP3CRO9OuRtauI7/ OGnhPoH47nCTKQVLwXmpCD4n/quo8F4LSOSbGHBKZDBK7pm4ftvC/g9y69tf2fi0 o8z2gFdLNAMSKjP0b2bsxQAPsOj9yDTZuWcUx7D/5OqN7rK7l+/pD0nq//qhrzQb ZJdygYg6DofCPtxuHQAcw7lUS5eEXgfBWGgTke9qHFjJECyOcbQGFtRVbYkK1ZH6 mmFbXFoGhhZs0TQfnOx9wRVpAinlMyzWIVAZLRhi+MtU3rpyfHkjrA63Q5SXonVA QUBjf8i7yJIKLjrVsy4X36HdqOSeDZkg -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:37 2025 by rpki-client