$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: Kd6tShFyseUgFxlpvVyoptWGj0BpLiTdzc4TvJGJt4s= Subject key identifier: 23:22:81:D4:28:92:05:17:E2:16:9B:F0:D8:C3:F9:B8:4D:8E:5B:C9 Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: 61 Signing time: Fri 25 Apr 2025 06:02:03 +0000 Manifest this update: Fri 25 Apr 2025 06:02:02 +0000 Manifest next update: Fri 02 May 2025 06:02:02 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: pAsowHwSjrXluuQKshh0cvp4aQ88k0PBJbQelfM1IYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24, serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Apr 25 06:02:02 2025 GMT Not After : May 2 06:02:02 2025 GMT Subject: CN=680b255b-b01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:d6:9a:58:23:4c:75:cc:3e:5c:cd:95:bf: 4b:70:94:6c:48:8c:c2:72:89:bc:11:56:a1:f3:0d: 11:8d:2f:41:f8:8c:59:21:da:71:6c:9c:22:2f:de: 9a:38:b0:11:78:32:63:f7:80:8c:05:6c:2f:d3:af: be:63:61:8e:de:a8:c4:03:f3:81:c8:a0:4f:e8:86: 1a:bc:50:2c:54:56:a2:0a:08:a5:7a:3e:27:1a:35: e6:73:1b:11:46:d0:e7:eb:cc:5a:92:2a:05:13:3e: f7:9b:3a:26:63:be:42:bb:14:f8:b5:c2:17:b8:8a: f0:32:45:8e:ac:44:8b:86:35:92:10:75:89:7b:dc: 9a:f1:4c:35:a8:1d:5b:97:a4:40:23:c4:14:4f:54: 56:12:a4:44:0d:17:3f:aa:d6:08:82:10:79:4b:d4: 80:bb:18:e8:26:37:65:c5:4c:cd:b9:27:8e:3f:34: 03:87:df:9e:24:fa:f6:a6:f3:21:06:be:c7:af:d9: b4:e6:f4:bb:ee:13:db:7c:b6:a7:15:a3:78:54:eb: e0:ff:36:7a:99:49:2c:ba:41:c0:91:94:ed:11:c8: be:2f:4e:01:91:39:04:bc:8d:5a:3e:82:f0:9b:ea: 0e:f2:b1:a0:2c:a9:e9:8e:d1:02:f6:8a:60:be:36: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:22:81:D4:28:92:05:17:E2:16:9B:F0:D8:C3:F9:B8:4D:8E:5B:C9 X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:6b:4c:8a:db:bf:45:cf:ca:a7:2d:d9:dc:f3:6b:2a:e9:86: d0:48:d6:ef:aa:c9:ea:4d:f3:f4:d6:6c:60:94:ef:77:6e:8f: 42:60:7d:df:50:90:1a:5a:f2:0d:6f:39:57:25:b3:81:2b:78: 88:33:5a:a8:3f:ca:d3:3a:83:b3:b7:1f:6f:99:7f:bf:a0:f9: ab:f7:4e:fd:33:a3:81:5b:6a:b4:bf:ac:f7:aa:cb:e6:8e:8d: 78:19:75:85:1f:8c:6a:19:55:f7:01:c0:cc:01:27:31:ff:e9: e9:a3:fd:66:44:36:c5:14:26:45:6b:62:a0:1e:99:f6:a0:4e: 5b:70:00:d3:ed:a4:97:e2:24:4e:8e:0e:b5:13:31:c9:cb:7d: dc:41:1a:52:5b:79:1c:8c:88:62:7c:fd:d5:6c:a1:d1:16:04: b7:39:75:e6:1e:4e:1b:ae:49:7c:80:12:f3:79:28:a4:77:d2: 8b:4a:e5:96:a8:48:d9:80:c1:7a:eb:47:c6:27:f9:7c:8e:05: f4:a8:71:4d:79:d9:66:30:46:a4:e5:d9:8d:12:a1:69:b4:ac: 17:01:3d:f7:24:36:4f:a5:c6:3c:af:29:dc:9d:d2:bf:56:84: 18:96:5f:24:9e:9c:70:09:10:67:ca:bf:b4:6a:d0:dd:6d:9b: 14:b8:94:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoRjUzQkNGQjhDNzJDMUEzQUI2NUUwRUE4OEUzQTFBMjFE MjhDRDE2MTAeFw0yNTA0MjUwNjAyMDJaFw0yNTA1MDIwNjAyMDJaMBgxFjAUBgNV BAMTDTY4MGIyNTViLWIwMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClNNaaWCNMdcw+XM2Vv0twlGxIjMJyibwRVqHzDRGNL0H4jFkh2nFsnCIv3po4 sBF4MmP3gIwFbC/Tr75jYY7eqMQD84HIoE/ohhq8UCxUVqIKCKV6PicaNeZzGxFG 0OfrzFqSKgUTPvebOiZjvkK7FPi1whe4ivAyRY6sRIuGNZIQdYl73JrxTDWoHVuX pEAjxBRPVFYSpEQNFz+q1giCEHlL1IC7GOgmN2XFTM25J44/NAOH354k+vam8yEG vsev2bTm9LvuE9t8tqcVo3hU6+D/NnqZSSy6QcCRlO0RyL4vTgGROQS8jVo+gvCb 6g7ysaAsqemO0QL2imC+NkI5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIyKB1CiS BRfiFpvw2MP5uE2OW8kwHwYDVR0jBBgwFoAU9TvPuMcsGjq2Xg6ojjoaIdKM0WEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzFFNEYzQTVDOEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVR2UHVNY3NHanEyWGc2b2pqb2FJZEtNMFdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzFFNEYzQTVDOEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2px MlhnNm9qam9hSWRLTTBXRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJrTIrbv0XPyqct2dzzayrphtBI1u+qyepN8/TWbGCU73duj0Jgfd9Q kBpa8g1vOVcls4EreIgzWqg/ytM6g7O3H2+Zf7+g+av3Tv0zo4FbarS/rPeqy+aO jXgZdYUfjGoZVfcBwMwBJzH/6emj/WZENsUUJkVrYqAemfagTltwANPtpJfiJE6O DrUTMcnLfdxBGlJbeRyMiGJ8/dVsodEWBLc5deYeThuuSXyAEvN5KKR30otK5Zao SNmAwXrrR8Yn+XyOBfSocU152WYwRqTl2Y0SoWm0rBcBPfckNk+lxjyvKdyd0r9W hBiWXySenHAJEGfKv7Rq0N1tmxS4lGw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:23 2025 by rpki-client