$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft File: 1rdRTL8L4gRsE8oNf10iNS_aWO4.mft (raw, json) Hash identifier: nRttnelCRwL+IP6JnjnNbuu++oB2Vo5ThYzpyPSu5Fg= Subject key identifier: 26:91:32:EA:8A:9B:2E:0F:6B:F0:4F:CA:6A:69:70:3F:57:7D:F3:E9 Authority key identifier: D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE Certificate issuer: /CN=A9134B2D/serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft Manifest number: 01B9 Signing time: Fri 25 Apr 2025 02:18:11 +0000 Manifest this update: Fri 25 Apr 2025 02:18:10 +0000 Manifest next update: Fri 02 May 2025 02:18:10 +0000 Files and hashes: 1: 1rdRTL8L4gRsE8oNf10iNS_aWO4.crl (hash: OjD5cpqEiT/tTP7Hykrn0EDCUaZgdBOhVLnCulXzMpY=) 2: 8E3128B4837D11EDB082012FC4F9AE02.roa (hash: pbCZups9CHpt8yF1jqE6eaTv1T+fEJy3uGbRYPbMwLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B2D, serialNumber=D6B7514CBF0BE2046C13CA0D7F5D22352FDA58EE Validity Not Before: Apr 25 02:18:10 2025 GMT Not After : May 2 02:18:10 2025 GMT Subject: CN=680af0e3-c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:b4:bb:a5:69:74:29:7f:65:0c:17:1c:87: 19:09:ce:40:4d:8e:64:62:8f:11:2b:c9:d8:a7:d9: 79:e3:18:cc:0d:89:85:d7:dc:10:bb:da:d1:a5:78: d5:0d:51:94:d5:d7:25:45:93:0c:8d:a8:e4:7b:91: dc:23:d2:5d:97:48:20:e6:8e:87:e6:7f:f3:65:3b: 75:cb:25:e4:64:77:41:a8:87:e0:ed:18:74:1f:79: a1:e8:6c:1c:7c:6f:89:f1:28:4a:d0:2f:bc:6c:25: d8:1e:5d:f5:15:45:43:8a:f7:21:3d:66:33:97:f5: d1:0f:7b:67:7b:f7:31:22:4f:0f:d6:20:78:9f:a6: eb:7a:45:fd:34:8f:ee:6c:8a:7f:68:9b:1a:0b:24: dd:33:e1:d9:db:40:12:86:4e:e1:a3:61:4f:55:2d: 9d:0a:cd:99:16:b2:9f:77:02:a7:54:84:c0:cf:67: 8e:9d:8c:3c:17:cd:1e:16:6d:48:63:5e:72:3d:2f: 4d:38:0b:8e:74:ab:9c:ef:e1:d7:5d:cd:d7:f0:07: 5b:42:11:20:83:cb:dd:51:2e:66:6f:4f:7b:c5:6e: cd:67:97:13:c5:1d:16:9c:9f:bc:78:9e:e2:e5:aa: 03:4a:9f:18:cc:aa:8d:14:7b:f1:03:af:07:0b:89: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:91:32:EA:8A:9B:2E:0F:6B:F0:4F:CA:6A:69:70:3F:57:7D:F3:E9 X509v3 Authority Key Identifier: keyid:D6:B7:51:4C:BF:0B:E2:04:6C:13:CA:0D:7F:5D:22:35:2F:DA:58:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1rdRTL8L4gRsE8oNf10iNS_aWO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B2D/031F451E837B11ED805D402EC4F9AE02/1rdRTL8L4gRsE8oNf10iNS_aWO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:b4:ff:1b:5f:50:47:71:5e:c2:ea:60:82:71:c9:39:11:2f: 47:ce:a8:48:94:ee:de:4d:e1:44:a7:1e:d7:18:48:b4:66:39: 0e:d4:9e:85:3e:dc:70:b5:f2:a4:2c:c8:44:2c:cf:47:f9:3a: 21:bf:ee:ee:5e:c3:29:c7:97:bf:b9:ee:52:8e:84:c3:9f:3f: 3b:3b:5f:73:1f:03:99:98:c8:b0:92:ca:3c:10:15:14:37:0b: f6:49:e2:f4:bc:8f:be:fb:0b:81:2f:87:12:9f:0b:7d:09:1d: d2:49:12:8c:64:52:3d:7f:1a:07:40:16:fd:03:0e:52:17:cc: 94:cd:f7:ec:59:0b:91:22:f6:95:ea:10:f0:9a:d9:ed:3a:21: 37:e6:c5:0d:22:e3:da:b8:0a:42:3a:a6:29:78:8d:4f:8a:7a: e5:09:9a:14:aa:b8:de:72:ca:e5:65:91:98:c7:26:e0:ed:a6: 2a:23:a0:57:cf:bb:89:e3:e0:48:43:0d:89:62:e3:c3:90:c5: a5:dd:08:dd:9f:9b:70:41:d4:95:46:a0:63:0f:82:40:50:80: 74:17:6e:d9:1e:27:57:ff:fb:cd:d6:50:99:c3:13:8c:fa:e6: 94:7c:3a:0d:13:31:92:0c:1e:ca:33:01:01:cf:09:76:5f:d9: 66:53:a8:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCMkQxMTAvBgNVBAUTKEQ2Qjc1MTRDQkYwQkUyMDQ2QzEzQ0EwRDdGNUQyMjM1 MkZEQTU4RUUwHhcNMjUwNDI1MDIxODEwWhcNMjUwNTAyMDIxODEwWjAYMRYwFAYD VQQDEw02ODBhZjBlMy1jOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhe0u6VpdCl/ZQwXHIcZCc5ATY5kYo8RK8nYp9l54xjMDYmF19wQu9rRpXjV DVGU1dclRZMMjajke5HcI9Jdl0gg5o6H5n/zZTt1yyXkZHdBqIfg7Rh0H3mh6Gwc fG+J8ShK0C+8bCXYHl31FUVDivchPWYzl/XRD3tne/cxIk8P1iB4n6brekX9NI/u bIp/aJsaCyTdM+HZ20AShk7ho2FPVS2dCs2ZFrKfdwKnVITAz2eOnYw8F80eFm1I Y15yPS9NOAuOdKuc7+HXXc3X8AdbQhEgg8vdUS5mb097xW7NZ5cTxR0WnJ+8eJ7i 5aoDSp8YzKqNFHvxA68HC4lw4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaRMuqK my4Pa/BPymppcD9XffPpMB8GA1UdIwQYMBaAFNa3UUy/C+IEbBPKDX9dIjUv2lju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEIyRC8wMzFGNDUxRTgz N0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRnUnNFOG9OZjEwaU5TX2FX TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyZFJUTDhMNGdSc0U4b05mMTBpTlNfYVdPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEIyRC8wMzFGNDUxRTgzN0IxMUVEODA1RDQwMkVDNEY5QUUwMi8xcmRSVEw4TDRn UnNFOG9OZjEwaU5TX2FXTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5tP8bX1BHcV7C6mCCcck5ES9HzqhIlO7eTeFEpx7XGEi0ZjkO1J6F PtxwtfKkLMhELM9H+Tohv+7uXsMpx5e/ue5SjoTDnz87O19zHwOZmMiwkso8EBUU Nwv2SeL0vI+++wuBL4cSnwt9CR3SSRKMZFI9fxoHQBb9Aw5SF8yUzffsWQuRIvaV 6hDwmtntOiE35sUNIuPauApCOqYpeI1PinrlCZoUqrjecsrlZZGYxybg7aYqI6BX z7uJ4+BIQw2JYuPDkMWl3Qjdn5twQdSVRqBjD4JAUIB0F27ZHidX//vN1lCZwxOM +uaUfDoNEzGSDB7KMwEBzwl2X9lmU6i3 -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:30 2025 by rpki-client