$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json) Hash identifier: TZ1NVFFElQRW5xU1jbD//7Hi3JA7x9WFTLI9DvKuNcw= Subject key identifier: 74:F6:E4:FC:09:AD:32:BA:3E:63:82:98:B1:50:01:79:E5:E5:10:9F Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Certificate serial: 14C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft Manifest number: 14BC Signing time: Thu 24 Apr 2025 16:52:06 +0000 Manifest this update: Thu 24 Apr 2025 16:52:05 +0000 Manifest next update: Thu 01 May 2025 16:52:05 +0000 Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: EwtfTErbQTxfAparJa9/z/5YtmFjmCajJwtTmOwiHco=) 2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5319 (0x14c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Validity Not Before: Apr 24 16:52:05 2025 GMT Not After : May 1 16:52:05 2025 GMT Subject: CN=680a6c36-259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:1b:e6:ad:04:71:14:32:d1:e4:10:c2:31: c2:74:1d:e2:93:7b:a3:e0:c5:fa:e3:7e:cc:ae:a1: c3:86:d9:7f:48:ee:d1:ca:ae:35:05:c5:fc:64:e5: eb:6d:07:9d:91:ff:ce:4b:20:5a:6d:12:34:2c:48: c2:9d:fa:54:a1:6a:24:76:a8:fd:7d:38:d9:09:80: 66:f1:ad:e3:b5:39:4a:d0:40:07:7c:97:d1:63:51: 01:e4:19:b9:ea:3e:14:fb:52:d4:54:79:c0:3d:98: ea:36:bc:69:b5:d2:90:8a:57:5b:77:55:8b:ec:be: 20:14:b5:33:ec:41:e4:1c:7e:da:96:65:e4:8b:f8: 72:7c:ee:33:72:e0:8f:d4:43:5c:bf:9e:dd:db:36: d8:fb:52:58:63:62:18:a5:8c:bc:52:a8:4d:63:c4: 6c:24:96:d3:24:cd:9f:5c:f3:c1:20:3a:64:48:40: f6:c1:38:44:a0:7c:e8:88:77:05:99:ee:1a:f1:72: d4:d4:ad:37:c5:58:12:e0:43:d4:03:a2:58:2e:32: bc:a9:cb:a1:9a:92:37:80:3d:01:45:5c:25:cd:62: 5f:b9:be:ab:89:a8:e6:bb:8f:9b:22:02:4e:48:66: 26:32:fc:ac:0c:78:49:39:48:fb:23:77:55:d6:44: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F6:E4:FC:09:AD:32:BA:3E:63:82:98:B1:50:01:79:E5:E5:10:9F X509v3 Authority Key Identifier: keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:11:aa:12:86:7e:47:a1:6d:8d:8d:80:81:65:f2:8b:09:7c: e9:c6:e0:86:ca:1a:a8:88:58:db:64:69:63:3a:cf:c8:3d:b5: f7:1b:8e:57:6b:2f:92:12:74:8d:5e:be:d2:5a:c6:f7:13:3b: 51:4b:9d:1c:c3:e5:51:7a:73:14:0e:aa:59:c6:c0:d4:81:3f: e7:07:2f:72:f6:49:d9:56:ca:d5:a8:e0:2a:19:ce:57:4f:ea: 1c:c9:35:ec:4f:99:23:ea:f2:27:25:a5:13:9e:d9:0e:8c:92: 94:0b:91:94:66:da:01:da:7f:7f:c2:f7:98:8b:3a:af:6c:5e: f4:14:d5:80:be:b0:e3:30:85:02:e5:0f:91:6a:2a:45:83:5d: f4:da:f8:fc:7c:5f:09:b3:20:4c:7a:e1:88:fa:e8:f7:21:a5: 9e:6d:58:3f:11:c2:fc:5f:e8:82:91:d2:dd:e1:18:fc:6e:5e: e6:05:23:e6:60:71:b6:0d:b1:9a:f9:21:83:8d:11:96:31:9d: 31:b9:2d:26:a8:e1:9d:90:09:b0:44:72:2e:8d:a0:4c:17:e6: fb:71:48:7e:6c:39:96:9c:bd:3a:e8:c9:f1:7c:80:b0:ee:0a: 1e:d5:df:2e:ed:91:a3:b2:0d:9d:56:4b:a1:2e:e7:3e:fa:b5: dc:80:8a:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NzMxMTAvBgNVBAUTKDMxRTkxMkU5RkY3M0FGNUJDNDQ3NjkzNTI4RDcyNUIy NUEyQjE3RjcwHhcNMjUwNDI0MTY1MjA1WhcNMjUwNTAxMTY1MjA1WjAYMRYwFAYD VQQDEw02ODBhNmMzNi0yNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKMb5q0EcRQy0eQQwjHCdB3ik3uj4MX6437MrqHDhtl/SO7Ryq41BcX8ZOXr bQedkf/OSyBabRI0LEjCnfpUoWokdqj9fTjZCYBm8a3jtTlK0EAHfJfRY1EB5Bm5 6j4U+1LUVHnAPZjqNrxptdKQildbd1WL7L4gFLUz7EHkHH7almXki/hyfO4zcuCP 1ENcv57d2zbY+1JYY2IYpYy8UqhNY8RsJJbTJM2fXPPBIDpkSED2wThEoHzoiHcF me4a8XLU1K03xVgS4EPUA6JYLjK8qcuhmpI3gD0BRVwlzWJfub6riajmu4+bIgJO SGYmMvysDHhJOUj7I3dV1kTLLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT25PwJ rTK6PmOCmLFQAXnl5RCfMB8GA1UdIwQYMBaAFDHpEun/c69bxEdpNSjXJbJaKxf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY3My8wM0Y0MzA5QTU4 Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIxdkVSMmsxS05jbHNsb3JG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01la1M2Zjl6cjF2RVIyazFLTmNsc2xvckZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY3My8wM0Y0MzA5QTU4Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIx dkVSMmsxS05jbHNsb3JGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMEaoShn5HoW2NjYCBZfKLCXzpxuCGyhqoiFjbZGljOs/IPbX3G45X ay+SEnSNXr7SWsb3EztRS50cw+VRenMUDqpZxsDUgT/nBy9y9knZVsrVqOAqGc5X T+ocyTXsT5kj6vInJaUTntkOjJKUC5GUZtoB2n9/wveYizqvbF70FNWAvrDjMIUC 5Q+RaipFg1302vj8fF8JsyBMeuGI+uj3IaWebVg/EcL8X+iCkdLd4Rj8bl7mBSPm YHG2DbGa+SGDjRGWMZ0xuS0mqOGdkAmwRHIujaBMF+b7cUh+bDmWnL066MnxfICw 7goe1d8u7ZGjsg2dVkuhLuc++rXcgIrS -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:23 2025 by rpki-client