$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: Urkwr03qrGOVbOXZMEH+GjPh8vMJR/DqU1ujoVaBgeI= Subject key identifier: F3:35:DF:C2:6E:AA:0B:21:CE:1F:89:F8:01:22:AC:26:03:F3:BB:47 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 014C Signing time: Fri 25 Apr 2025 03:20:21 +0000 Manifest this update: Fri 25 Apr 2025 03:20:21 +0000 Manifest next update: Fri 02 May 2025 03:20:21 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: nz/6R12Ru3d/wEg8eF4e/5F+rzKcb6HNFaqnwawdWXA=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: Apr 25 03:20:21 2025 GMT Not After : May 2 03:20:21 2025 GMT Subject: CN=680aff75-4fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:da:17:72:8a:8f:73:51:3a:c6:e1:ef:72: 31:3d:2f:88:b5:e8:37:74:1d:4f:3b:4d:f5:3f:ef: 59:6b:a2:bf:70:53:a9:33:9d:d7:5c:8d:e0:f2:30: dc:3c:ba:54:94:4c:9a:79:09:da:28:c2:34:f4:cd: 59:ac:cd:8f:10:9d:81:63:24:4d:59:e7:7d:4f:31: 92:db:f9:d5:f5:a9:87:ea:2e:35:db:4c:a3:8f:71: 59:1e:83:87:05:ca:62:c5:42:f4:ca:e0:1b:ab:95: 0f:01:09:e9:f6:6d:44:a3:14:49:52:dd:ce:fa:82: 39:57:c2:8b:d5:2b:f0:42:07:40:fe:93:b1:a8:62: a1:7d:07:6c:e1:9b:87:ab:8f:24:76:f0:6f:97:0a: 3b:04:d5:52:fe:f6:7c:b7:bf:a0:ab:23:d4:f8:01: 7b:ce:a9:52:0e:da:ce:be:07:73:04:83:fd:24:c9: 90:b7:98:97:24:54:d1:b4:87:e7:39:6b:0f:38:3d: 7c:a6:26:ac:00:9f:da:98:b3:64:85:71:4b:47:95: 2a:da:4a:a6:a0:e4:36:27:ed:60:b9:8a:2b:31:18: a4:ad:a5:18:a3:b1:f1:01:0d:ac:1a:b1:4a:a1:aa: be:69:43:af:cc:ab:da:54:dc:ce:2e:fd:f2:4e:d7: 7b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:DF:C2:6E:AA:0B:21:CE:1F:89:F8:01:22:AC:26:03:F3:BB:47 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5e:e8:d6:3e:89:0c:86:ae:39:db:1f:e1:c4:ba:bf:6d:de: 16:cb:fa:a1:dd:89:55:3c:7a:db:46:fb:50:e3:1b:1a:68:ab: 1c:4c:2b:5e:3b:4d:9c:eb:08:f9:6f:58:8d:36:ef:bb:76:2c: df:14:c1:fa:88:56:2c:1d:63:f8:a8:c9:cc:2d:fa:24:5c:4f: 3b:1e:7e:11:aa:c6:69:93:12:52:b8:67:5c:dd:8c:73:a0:87: 4d:54:3c:03:5b:09:a2:c1:53:c3:f2:f2:95:31:7b:6d:f2:c9: b4:95:39:86:39:a4:f7:6d:27:4b:4e:54:4b:86:ba:a6:80:de: 15:fa:ee:23:60:a1:3a:b5:3d:25:db:95:db:86:51:72:d2:99: 2f:cd:6e:ab:d4:30:2d:78:84:77:86:50:41:3d:44:c6:fc:38: 6b:ae:3f:a6:30:82:d2:4e:10:dd:fe:91:ac:9d:d5:94:d5:5f: 9b:47:72:4a:53:1f:12:e6:b3:77:43:28:8d:80:2c:50:4f:fe: 9d:65:33:56:5e:fa:03:83:d5:2e:0a:5b:43:e3:c7:d4:c7:61: d8:83:a3:d9:22:f4:45:73:e1:fd:37:e7:8e:42:e7:0c:66:8b: 57:99:8a:45:d8:e7:e3:73:7f:bb:fe:ca:9f:5f:8c:fe:1f:2a: 54:e3:dc:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUwNDI1MDMyMDIxWhcNMjUwNTAyMDMyMDIxWjAYMRYwFAYD VQQDEw02ODBhZmY3NS00ZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutjaF3KKj3NROsbh73IxPS+Iteg3dB1PO031P+9Za6K/cFOpM53XXI3g8jDc PLpUlEyaeQnaKMI09M1ZrM2PEJ2BYyRNWed9TzGS2/nV9amH6i4120yjj3FZHoOH BcpixUL0yuAbq5UPAQnp9m1EoxRJUt3O+oI5V8KL1SvwQgdA/pOxqGKhfQds4ZuH q48kdvBvlwo7BNVS/vZ8t7+gqyPU+AF7zqlSDtrOvgdzBIP9JMmQt5iXJFTRtIfn OWsPOD18piasAJ/amLNkhXFLR5Uq2kqmoOQ2J+1guYorMRikraUYo7HxAQ2sGrFK oaq+aUOvzKvaVNzOLv3yTtd7zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM138Ju qgshzh+J+AEirCYD87tHMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuXujWPokMhq452x/hxLq/bd4Wy/qh3YlVPHrbRvtQ4xsaaKscTCte O02c6wj5b1iNNu+7dizfFMH6iFYsHWP4qMnMLfokXE87Hn4RqsZpkxJSuGdc3Yxz oIdNVDwDWwmiwVPD8vKVMXtt8sm0lTmGOaT3bSdLTlRLhrqmgN4V+u4jYKE6tT0l 25XbhlFy0pkvzW6r1DAteIR3hlBBPUTG/Dhrrj+mMILSThDd/pGsndWU1V+bR3JK Ux8S5rN3QyiNgCxQT/6dZTNWXvoDg9UuCltD48fUx2HYg6PZIvRFc+H9N+eOQucM ZotXmYpF2Ofjc3+7/sqfX4z+HypU49yh -----END CERTIFICATE-----Generated at Sat Apr 26 05:03:45 2025 by rpki-client