$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: 9ZuI6n6Pphqc4avcsnIlsK8zBJNT/7nRwGJ2eHXVX1g= Subject key identifier: 46:80:E1:0F:91:82:2A:84:64:EE:2B:14:12:F0:28:80:A0:6D:17:B1 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 89 Signing time: Fri 25 Apr 2025 05:30:42 +0000 Manifest this update: Fri 25 Apr 2025 05:30:42 +0000 Manifest next update: Fri 02 May 2025 05:30:42 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: Kk1MQZRfvpsO8ToJyYNgyEcAd/vuLp4p3v9iiWbh4gM=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Apr 25 05:30:42 2025 GMT Not After : May 2 05:30:42 2025 GMT Subject: CN=680b1e02-9239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:ac:90:29:92:04:76:9c:21:c3:65:e5:72: 38:ad:a4:57:b5:e6:89:aa:4c:5e:d0:a8:90:c6:7b: 91:cd:66:84:9e:ce:10:44:f2:3e:52:f7:02:98:e2: 3f:e1:c4:0d:99:9e:de:da:42:0e:db:9f:5f:b5:66: 71:34:b9:50:71:67:69:c9:78:94:95:38:4b:0b:c0: f7:54:62:81:94:67:33:20:35:ee:15:e4:41:93:ef: 05:4d:74:11:bf:ba:7d:f9:0f:1f:1c:e8:2a:96:14: 7b:b4:2a:fb:31:14:04:72:f5:5e:96:a0:30:fb:dd: c0:a9:98:55:2f:14:3b:03:63:29:5d:92:ff:a4:f1: 65:7b:05:71:a5:9a:98:ba:d3:0a:5a:b9:64:6d:11: 20:f5:03:f9:92:68:ef:62:9a:4e:40:c1:b1:86:f9: 2a:dd:1a:ab:42:d1:86:b3:12:58:f3:2a:05:5a:3d: ce:eb:46:27:17:fb:54:5e:c2:c8:7b:00:4b:15:5b: f4:81:6b:14:26:85:39:d0:f6:ae:6d:fc:ba:a8:59: 7b:ef:78:df:fa:33:33:38:59:ec:a0:b8:63:0c:17: b7:ea:c5:d5:0d:87:9d:8f:af:92:23:95:fc:8b:28: 37:d7:f6:41:7d:e6:8e:4b:5f:1f:d2:a8:4d:3e:b2: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:80:E1:0F:91:82:2A:84:64:EE:2B:14:12:F0:28:80:A0:6D:17:B1 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e3:1c:af:cf:03:54:34:d3:a6:09:1d:0e:d4:ab:83:25:7a: c2:c6:a4:d0:c5:2e:d2:89:1a:ab:0e:b2:3a:8b:5b:88:fb:88: 6b:ac:db:a3:b9:51:ec:64:36:d3:c8:47:09:e5:79:29:a7:2c: a3:ac:d5:1b:05:84:06:b5:db:8f:32:38:36:92:73:33:95:d6: e6:85:c2:54:f0:29:55:f7:27:88:dd:6a:f7:f4:72:75:de:ae: c8:e7:30:6b:56:ab:03:51:7a:27:da:e7:5d:3b:75:75:73:fd: bc:c9:09:c4:e8:9c:cd:e8:9d:5a:c8:d8:9f:5d:52:a9:bd:bd: bf:82:39:1d:0f:30:50:df:8a:21:98:38:15:5b:02:63:7e:a5: d9:ce:15:36:30:77:64:55:e3:30:40:a4:f9:5b:c5:00:8c:e7: b5:80:43:75:0b:bf:cf:39:83:9d:8f:d2:c2:3c:a4:8e:63:f4: 3a:34:0e:19:64:ef:db:4b:e3:93:95:48:10:77:24:1a:07:51: 21:fd:79:a0:7a:f2:9a:67:39:de:19:e6:bb:1f:2a:e4:5f:f0: 0f:0e:bf:1f:c9:dd:6e:0a:08:d4:04:aa:9e:1b:f6:1e:2c:82: 0c:e7:d8:4a:dc:25:4d:07:5a:16:45:a2:df:f2:29:0c:ab:a8: c4:f8:d7:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUwNDI1MDUzMDQyWhcNMjUwNTAyMDUzMDQyWjAYMRYwFAYD VQQDEw02ODBiMWUwMi05MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ2skCmSBHacIcNl5XI4raRXteaJqkxe0KiQxnuRzWaEns4QRPI+UvcCmOI/ 4cQNmZ7e2kIO259ftWZxNLlQcWdpyXiUlThLC8D3VGKBlGczIDXuFeRBk+8FTXQR v7p9+Q8fHOgqlhR7tCr7MRQEcvVelqAw+93AqZhVLxQ7A2MpXZL/pPFlewVxpZqY utMKWrlkbREg9QP5kmjvYppOQMGxhvkq3RqrQtGGsxJY8yoFWj3O60YnF/tUXsLI ewBLFVv0gWsUJoU50Paubfy6qFl773jf+jMzOFnsoLhjDBe36sXVDYedj6+SI5X8 iyg31/ZBfeaOS18f0qhNPrJ23QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaA4Q+R giqEZO4rFBLwKICgbRexMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU4xyvzwNUNNOmCR0O1KuDJXrCxqTQxS7SiRqrDrI6i1uI+4hrrNuj uVHsZDbTyEcJ5XkppyyjrNUbBYQGtduPMjg2knMzldbmhcJU8ClV9yeI3Wr39HJ1 3q7I5zBrVqsDUXon2uddO3V1c/28yQnE6JzN6J1ayNifXVKpvb2/gjkdDzBQ34oh mDgVWwJjfqXZzhU2MHdkVeMwQKT5W8UAjOe1gEN1C7/POYOdj9LCPKSOY/Q6NA4Z ZO/bS+OTlUgQdyQaB1Eh/XmgevKaZzneGea7HyrkX/APDr8fyd1uCgjUBKqeG/Ye LIIM59hK3CVNB1oWRaLf8ikMq6jE+Ncg -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:50 2025 by rpki-client