$ rpki-client -vvf rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft File: 9yY4deggn7olR_uOOH2AP3WAvtY.mft (raw, json) Hash identifier: 5sjtq8Yl1eyZPcYlRn0/BISH661XZfXJnKi/AjT1S54= Subject key identifier: C8:F2:75:0A:00:90:B2:8A:4D:6B:BD:A9:31:04:07:92:6A:2E:A4:DA Authority key identifier: F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 Certificate issuer: /CN=A9126AFE/serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft Manifest number: 0614 Signing time: Thu 24 Apr 2025 22:35:42 +0000 Manifest this update: Thu 24 Apr 2025 22:35:41 +0000 Manifest next update: Thu 01 May 2025 22:35:41 +0000 Files and hashes: 1: 9yY4deggn7olR_uOOH2AP3WAvtY.crl (hash: Tp+dDxgHmjCnBWYGz7YbmEwlVWWM/BG/4E1nz4TcbSk=) 2: B46F501C994D11EBB61C0C71C4F9AE02.roa (hash: OwzCMKJ00AP/4rlFPssRc/a1t58qHPUtNTvkBc1kXsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126AFE, serialNumber=F7263875E8209FBA2547FB8E387D803F7580BED6 Validity Not Before: Apr 24 22:35:41 2025 GMT Not After : May 1 22:35:41 2025 GMT Subject: CN=680abcbd-005d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:8a:e5:b3:01:8d:0c:dd:cd:87:12:28:27: 45:cf:34:16:9d:fb:46:c3:aa:30:59:41:a9:86:12: 44:08:93:d6:66:13:64:8b:7e:4b:24:76:23:8c:b1: 77:e9:36:30:32:d2:52:ac:fc:86:a5:e3:bd:0b:8a: ce:3e:5f:ce:ef:c8:fe:cb:ab:c5:04:d0:27:b0:94: c1:49:c0:9f:16:5d:03:3d:08:31:59:71:39:a2:55: 60:41:d2:56:c3:c2:46:82:17:dc:fa:fa:72:3f:c7: 8f:82:3b:5d:54:a3:9f:20:a0:11:26:a5:7a:b8:23: 05:49:22:9c:b9:1f:9f:62:76:d5:89:21:cd:0a:ae: 23:4f:8c:6f:d4:b8:44:54:e4:09:d1:77:3d:d6:39: 18:7c:dd:15:e1:2b:d4:f7:5e:a5:4f:02:65:86:54: fc:6f:1b:f2:81:70:8d:50:af:4f:11:8a:75:b5:ea: 75:2c:cf:54:a0:23:86:6d:d9:01:97:71:34:95:fd: 1f:86:ab:d1:f1:e9:fd:d0:6f:35:4c:46:a2:9d:27: b9:40:93:26:fe:fa:55:cf:5e:d4:68:cf:2b:1f:81: 3b:60:79:78:4e:44:08:0b:9a:ea:92:97:29:a0:d8: 66:46:06:c5:93:a0:18:d2:92:e9:02:e2:c7:28:2b: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:75:0A:00:90:B2:8A:4D:6B:BD:A9:31:04:07:92:6A:2E:A4:DA X509v3 Authority Key Identifier: keyid:F7:26:38:75:E8:20:9F:BA:25:47:FB:8E:38:7D:80:3F:75:80:BE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yY4deggn7olR_uOOH2AP3WAvtY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126AFE/5827293A994B11EBBF1D696AC4F9AE02/9yY4deggn7olR_uOOH2AP3WAvtY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7c:27:18:e5:50:f0:de:41:40:70:3a:35:fe:d7:4c:18:19: 46:fc:e9:65:0d:be:ea:d4:31:4d:f6:24:52:f8:29:e1:dc:02: 84:3e:28:c6:39:a0:91:8d:d4:61:66:41:34:6d:ab:e3:9e:ed: e1:b7:c5:90:2f:b1:d0:ce:7f:1a:8b:fd:60:e1:eb:85:f2:9b: d4:79:79:65:d8:01:9b:92:95:5d:0c:fd:80:3f:d2:c4:85:fb: ce:e2:d0:ec:f4:14:7a:9a:4e:26:76:77:90:4d:a0:fc:39:a7: 18:cb:03:ab:b7:17:85:0f:47:ff:57:fa:12:ed:b8:f4:0d:ef: 17:a8:e2:ba:7f:61:e0:a2:ee:75:43:c6:16:64:df:7e:b4:9a: 44:5f:39:12:36:10:0c:15:33:85:75:a3:d6:b2:cc:c8:82:b3: 86:b5:d7:7e:8b:d1:d4:85:7d:e0:d0:12:ab:d7:7d:d2:70:81: 38:72:26:96:1c:d5:f7:bd:ab:f4:86:59:8c:15:9b:d9:cb:18: c0:4c:ba:bb:ab:b4:6a:b2:d9:4b:88:f2:f1:cb:8a:99:c3:fb: 9f:38:a4:70:88:e0:a4:1d:01:d4:c2:77:f4:2e:24:e7:65:59: 2d:4e:1a:0c:46:ea:6d:e7:f8:6e:2f:6d:96:e6:f3:56:de:d1: d4:55:78:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBRkUxMTAvBgNVBAUTKEY3MjYzODc1RTgyMDlGQkEyNTQ3RkI4RTM4N0Q4MDNG NzU4MEJFRDYwHhcNMjUwNDI0MjIzNTQxWhcNMjUwNTAxMjIzNTQxWjAYMRYwFAYD VQQDEw02ODBhYmNiZC0wMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4f6K5bMBjQzdzYcSKCdFzzQWnftGw6owWUGphhJECJPWZhNki35LJHYjjLF3 6TYwMtJSrPyGpeO9C4rOPl/O78j+y6vFBNAnsJTBScCfFl0DPQgxWXE5olVgQdJW w8JGghfc+vpyP8ePgjtdVKOfIKARJqV6uCMFSSKcuR+fYnbViSHNCq4jT4xv1LhE VOQJ0Xc91jkYfN0V4SvU916lTwJlhlT8bxvygXCNUK9PEYp1tep1LM9UoCOGbdkB l3E0lf0fhqvR8en90G81TEainSe5QJMm/vpVz17UaM8rH4E7YHl4TkQIC5rqkpcp oNhmRgbFk6AY0pLpAuLHKCt0oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjydQoA kLKKTWu9qTEEB5JqLqTaMB8GA1UdIwQYMBaAFPcmOHXoIJ+6JUf7jjh9gD91gL7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkFGRS81ODI3MjkzQTk5 NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243b2xSX3VPT0gyQVAzV0F2 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5WTRkZWdnbjdvbFJfdU9PSDJBUDNXQXZ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkFGRS81ODI3MjkzQTk5NEIxMUVCQkYxRDY5NkFDNEY5QUUwMi85eVk0ZGVnZ243 b2xSX3VPT0gyQVAzV0F2dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYfCcY5VDw3kFAcDo1/tdMGBlG/OllDb7q1DFN9iRS+Cnh3AKEPijG OaCRjdRhZkE0bavjnu3ht8WQL7HQzn8ai/1g4euF8pvUeXll2AGbkpVdDP2AP9LE hfvO4tDs9BR6mk4mdneQTaD8OacYywOrtxeFD0f/V/oS7bj0De8XqOK6f2Hgou51 Q8YWZN9+tJpEXzkSNhAMFTOFdaPWsszIgrOGtdd+i9HUhX3g0BKr133ScIE4ciaW HNX3vav0hlmMFZvZyxjATLq7q7RqstlLiPLxy4qZw/ufOKRwiOCkHQHUwnf0LiTn ZVktThoMRupt5/huL22W5vNW3tHUVXht -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:53 2025 by rpki-client