$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: 0+L0TzfwXr8qR4fAng6kRi5Tk4yuKa+aKyBlhWgtItk= Subject key identifier: AE:DE:61:66:3C:08:A5:78:76:84:B9:E1:EC:80:D4:5D:31:4E:E0:47 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0158 Signing time: Fri 25 Apr 2025 03:11:09 +0000 Manifest this update: Fri 25 Apr 2025 03:11:08 +0000 Manifest next update: Fri 02 May 2025 03:11:08 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: WkBPXM4gGMQV9PRlaXdnOnP2OuxEFKSwC7rXCOG5udg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Apr 25 03:11:08 2025 GMT Not After : May 2 03:11:08 2025 GMT Subject: CN=680afd4c-09ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:3a:3f:44:de:18:38:6a:d8:be:66:85:eb: bf:7a:5e:94:2e:8e:25:7b:69:ef:2c:fd:a6:9b:b1: b7:4b:02:ba:7d:7b:23:51:3c:03:63:4e:42:04:10: ff:91:7b:81:02:83:66:a3:b9:a6:c6:90:ca:14:5d: bd:0b:cb:9c:e4:bf:ed:83:e9:fe:a7:99:87:58:ff: 2f:f2:98:cd:aa:70:9c:c7:50:46:d9:77:87:b3:1e: 3c:32:f8:c8:c9:c5:b9:12:d9:b3:00:d4:4b:39:53: 96:57:ef:8d:78:59:0b:ad:40:f5:50:c2:62:a6:44: 15:a0:af:c0:7d:48:45:92:f3:3d:3f:c0:b8:e6:39: 1f:b2:5a:ad:c2:f9:5e:ba:a1:e1:92:91:88:5e:fa: e5:ea:da:b2:b7:54:58:6b:d2:c2:a2:db:a3:fe:39: 28:ba:aa:3a:c6:91:1c:dd:de:74:ba:33:50:50:9a: fd:4a:88:f3:95:05:3d:a4:94:5a:cf:2b:5f:d3:19: e8:d9:ab:c4:16:f7:e4:96:20:24:73:9f:ef:15:71: ab:70:6b:f8:3c:7f:15:5f:c7:07:a2:72:a1:e7:a7: a0:96:57:c6:0b:28:15:21:d2:3c:8b:31:d0:e3:8f: b2:9e:10:b5:6c:79:70:fe:84:33:93:76:13:4d:b8: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DE:61:66:3C:08:A5:78:76:84:B9:E1:EC:80:D4:5D:31:4E:E0:47 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:83:ad:ed:8c:c8:8a:70:11:12:68:5a:dd:e5:5e:0f:0a:1e: 4f:9f:fe:fa:3f:03:25:ba:37:86:ff:bf:aa:c1:47:18:a9:2b: 9d:99:e7:dd:63:c5:86:1f:96:ca:e2:56:37:9e:a2:fb:ae:d2: 01:a7:32:af:97:1d:eb:cd:c3:34:94:a0:25:c0:4e:72:b6:a3: 16:93:77:1e:df:0d:0f:81:a5:57:2c:b8:4c:4f:a2:42:e9:2b: 45:f9:b3:ad:1e:90:71:52:d8:82:68:0b:a2:5c:e2:09:1f:f8: d6:75:7b:54:ae:de:da:e8:61:da:e7:7c:f1:e7:2c:c3:94:ed: ca:44:e5:65:c1:a6:68:6d:fe:14:8f:d9:fe:d7:d0:1a:73:e3: 48:33:2e:ee:05:ed:b4:c2:ad:d0:39:a6:69:ae:73:3f:51:32: 3e:37:dd:9b:61:3f:79:20:cf:38:51:1a:71:e9:87:bc:11:42: 46:75:b3:f1:fe:b8:bb:9d:89:04:62:6b:64:26:76:ff:20:b5: 48:43:2e:8f:28:be:e9:33:b2:4e:8e:28:06:5d:13:0c:3a:ec: f0:3b:f3:cd:29:41:37:bc:02:24:bb:f0:6b:e9:09:4b:74:ec: d7:ef:32:c1:69:45:b4:7c:c3:bf:69:96:2a:79:8b:79:a0:2b: 48:bc:e7:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwNDI1MDMxMTA4WhcNMjUwNTAyMDMxMTA4WjAYMRYwFAYD VQQDEw02ODBhZmQ0Yy0wOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bs6P0TeGDhq2L5mheu/el6ULo4le2nvLP2mm7G3SwK6fXsjUTwDY05CBBD/ kXuBAoNmo7mmxpDKFF29C8uc5L/tg+n+p5mHWP8v8pjNqnCcx1BG2XeHsx48MvjI ycW5EtmzANRLOVOWV++NeFkLrUD1UMJipkQVoK/AfUhFkvM9P8C45jkfslqtwvle uqHhkpGIXvrl6tqyt1RYa9LCotuj/jkouqo6xpEc3d50ujNQUJr9SojzlQU9pJRa zytf0xno2avEFvfkliAkc5/vFXGrcGv4PH8VX8cHonKh56egllfGCygVIdI8izHQ 44+ynhC1bHlw/oQzk3YTTbgE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7eYWY8 CKV4doS54eyA1F0xTuBHMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfg63tjMiKcBESaFrd5V4PCh5Pn/76PwMlujeG/7+qwUcYqSudmefd Y8WGH5bK4lY3nqL7rtIBpzKvlx3rzcM0lKAlwE5ytqMWk3ce3w0PgaVXLLhMT6JC 6StF+bOtHpBxUtiCaAuiXOIJH/jWdXtUrt7a6GHa53zx5yzDlO3KROVlwaZobf4U j9n+19Aac+NIMy7uBe20wq3QOaZprnM/UTI+N92bYT95IM84URpx6Ye8EUJGdbPx /ri7nYkEYmtkJnb/ILVIQy6PKL7pM7JOjigGXRMMOuzwO/PNKUE3vAIku/Br6QlL dOzX7zLBaUW0fMO/aZYqeYt5oCtIvOdJ -----END CERTIFICATE-----Generated at Sat Apr 26 05:47:19 2025 by rpki-client