$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: +/RZp7xvigmUpsKKLtY81mptfOZ+Dw39tnXrq4OgyS4= Subject key identifier: AD:9D:EA:1F:BE:07:CA:81:11:20:5D:9E:00:E4:8F:71:34:31:4F:AB Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 1104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 10E7 Signing time: Thu 24 Apr 2025 17:18:59 +0000 Manifest this update: Thu 24 Apr 2025 17:18:58 +0000 Manifest next update: Thu 01 May 2025 17:18:58 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: lHF5JkTNz3vmDajBq3SVWUqeM0nwKtm+2cKzBKMyr2Y=) 2: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: b6hr7IhNuFUDMwuO8Nb6ge3GDbb3DEInCX/HHEiFoVM=) 3: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: skRP+9UcVz6p99ItfpkcWdsCVMpTNN+fUT0lptapL6Y=) 4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI=) 5: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: Z7+3DvwJtElz8GyUhaEbEO58MPBIQdKLUzyM58gm72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4356 (0x1104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Apr 24 17:18:58 2025 GMT Not After : May 1 17:18:58 2025 GMT Subject: CN=680a7282-369f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:d1:f3:26:6e:9f:5c:1b:e4:cc:5f:01:e3: 5a:ac:fb:e8:2e:00:a3:78:d8:74:77:8f:db:6a:18: e0:96:41:fc:a0:5b:c3:8b:79:81:2a:b0:60:ba:bf: 64:b8:e8:73:b2:a4:c0:d5:98:aa:0e:08:61:d0:c0: 3c:9d:7d:ae:a9:35:d0:b3:d2:49:3c:41:5d:97:01: 65:21:b0:3b:e1:3f:26:f1:95:26:95:f4:cc:d7:a2: de:53:31:37:b4:0f:dd:63:5b:c4:45:4d:4c:bd:85: 8c:2c:64:3d:51:27:18:0c:03:68:b1:cb:75:20:a9: 3b:48:30:9c:ea:ba:d5:1d:e4:17:d5:6b:02:04:68: eb:2f:b0:08:44:d3:e5:f8:20:28:68:49:e2:9e:b2: b8:4e:0e:57:6e:fe:8a:83:ba:6f:20:9c:7f:1a:06: 1b:99:de:6c:3d:10:6d:df:35:91:c1:e9:11:14:a3: 87:dd:79:e3:20:b3:82:67:62:1d:07:fb:d7:8c:8b: 59:4f:23:05:75:7a:b3:45:15:de:79:8b:0a:e9:80: e9:e5:69:52:88:8e:2a:8f:67:bb:e8:1a:a6:b0:87: 26:ac:7f:9d:b3:6c:19:c1:a7:be:11:e0:3d:ce:68: 09:8c:7a:c9:81:a8:13:dc:a2:0e:27:c9:d6:a0:91: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:EA:1F:BE:07:CA:81:11:20:5D:9E:00:E4:8F:71:34:31:4F:AB X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:f9:7b:6e:cf:b2:81:1b:dd:fb:6b:32:13:f6:79:f9:21: c1:b3:41:9a:c8:5a:d0:91:4e:08:d3:63:c1:08:f5:9b:8d:54: 2c:dd:69:fb:2d:0f:e7:4b:08:06:72:b1:cd:c9:f3:82:08:1a: ca:3c:23:38:60:7e:b0:b6:3c:16:33:70:16:17:ae:22:57:32: b7:4b:15:34:ae:61:3e:44:e5:ad:37:9b:c0:b2:ee:c6:1a:d6: c8:16:b0:5a:f5:d7:f6:5f:fc:37:a7:a2:22:73:29:70:5a:22: 4c:1c:4a:45:42:62:29:31:10:34:f3:aa:74:ad:33:3e:3e:d3: cb:81:26:46:c4:22:d8:35:52:f7:dc:6c:5d:2b:fa:e3:72:37: 62:ec:9e:0b:fc:e7:2f:e8:1a:8e:4e:af:33:69:e4:4f:eb:8e: 86:32:16:aa:f7:25:be:7a:8e:3e:8a:1c:9a:30:10:17:44:c5: bc:7e:f6:ba:2f:7b:42:86:50:cf:35:bc:aa:ed:cb:25:d8:98: a0:bc:28:bd:a3:2b:b6:fd:50:60:a4:15:74:d5:33:0a:0e:9d: 92:22:de:8b:a0:55:fe:b3:22:38:49:e8:67:01:cd:c4:ad:ad: bf:32:ee:26:b0:75:e7:09:1e:8f:a2:9b:1b:bb:1c:6a:7b:af: cb:45:e4:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUwNDI0MTcxODU4WhcNMjUwNTAxMTcxODU4WjAYMRYwFAYD VQQDEw02ODBhNzI4Mi0zNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8bR8yZun1wb5MxfAeNarPvoLgCjeNh0d4/bahjglkH8oFvDi3mBKrBgur9k uOhzsqTA1ZiqDghh0MA8nX2uqTXQs9JJPEFdlwFlIbA74T8m8ZUmlfTM16LeUzE3 tA/dY1vERU1MvYWMLGQ9UScYDANosct1IKk7SDCc6rrVHeQX1WsCBGjrL7AIRNPl +CAoaEninrK4Tg5Xbv6Kg7pvIJx/GgYbmd5sPRBt3zWRwekRFKOH3XnjILOCZ2Id B/vXjItZTyMFdXqzRRXeeYsK6YDp5WlSiI4qj2e76BqmsIcmrH+ds2wZwae+EeA9 zmgJjHrJgagT3KIOJ8nWoJGJbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2d6h++ B8qBESBdngDkj3E0MU+rMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE9/l7bs+ygRvd+2syE/Z5+SHBs0GayFrQkU4I02PBCPWbjVQs3Wn7 LQ/nSwgGcrHNyfOCCBrKPCM4YH6wtjwWM3AWF64iVzK3SxU0rmE+ROWtN5vAsu7G GtbIFrBa9df2X/w3p6IicylwWiJMHEpFQmIpMRA086p0rTM+PtPLgSZGxCLYNVL3 3GxdK/rjcjdi7J4L/Ocv6BqOTq8zaeRP646GMhaq9yW+eo4+ihyaMBAXRMW8fva6 L3tChlDPNbyq7csl2JigvCi9oyu2/VBgpBV01TMKDp2SIt6LoFX+syI4SehnAc3E ra2/Mu4msHXnCR6Popsbuxxqe6/LReRL -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:32 2025 by rpki-client