$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json) Hash identifier: 45uoGGifzFY5z7TKKIm3vazVc1RvqD/lVUcIbD3aS8I= Subject key identifier: F6:EA:DE:03:97:1A:4B:CA:BF:71:0D:B7:9F:62:15:95:66:CE:53:10 Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft Manifest number: 03B6 Signing time: Fri 25 Apr 2025 00:27:33 +0000 Manifest this update: Fri 25 Apr 2025 00:27:32 +0000 Manifest next update: Fri 02 May 2025 00:27:32 +0000 Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: BBlt3GRUBG78Eg9iWh3+ohmTFsC7nMSo2vu6JTRHPuU=) 2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=) 3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24 Validity Not Before: Apr 25 00:27:32 2025 GMT Not After : May 2 00:27:32 2025 GMT Subject: CN=680ad6f4-9462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:5b:39:15:40:0e:04:38:a5:a4:dd:43:0f: 3c:de:e4:0a:87:06:27:bc:a8:77:79:c3:ce:39:78: 54:50:69:67:ab:9a:fa:89:91:ad:7f:b1:e3:60:57: 34:02:b3:8c:49:09:d8:d8:0d:7e:de:35:df:bc:0b: 13:92:1b:f1:a5:3f:67:0d:b2:95:88:0f:2a:bb:40: 2e:a2:03:a3:53:07:1f:36:d4:d1:bc:4f:68:43:80: 43:1f:c1:d7:31:5f:a0:fd:14:7b:fa:3c:4f:30:2e: 57:ed:69:fa:53:62:1a:c1:22:0a:be:16:86:bd:0d: dd:e5:27:ff:fd:f3:3a:e6:1a:68:08:7e:6c:f3:16: c7:4f:ed:45:6e:70:59:99:ed:0c:58:1c:4a:08:5b: c7:b8:00:45:3e:74:2b:39:fa:de:7e:6c:7e:63:1d: 6a:f6:b7:46:e7:0f:7d:0b:5e:ea:65:a7:17:38:e8: 89:e4:3d:16:73:94:8c:b7:06:7c:74:d8:9c:97:43: aa:af:12:77:fd:f6:98:57:f8:fa:86:b9:2b:b3:0f: a4:db:8b:74:9b:00:71:68:b7:39:f7:09:78:4d:5c: 9a:21:8f:ca:0f:d8:5e:e8:8e:18:02:37:ec:9e:f2: 17:ef:b6:f2:0f:21:c7:4c:a3:a2:9d:af:67:14:76: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EA:DE:03:97:1A:4B:CA:BF:71:0D:B7:9F:62:15:95:66:CE:53:10 X509v3 Authority Key Identifier: keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:79:90:97:f1:fc:ab:e8:0b:74:21:09:78:04:00:80:66: 9f:76:e8:b8:a6:d3:e5:38:5b:db:1e:d9:45:82:cc:1f:67:64: 22:0e:a1:fd:ca:ea:85:ad:0d:34:05:25:3d:0c:1a:e2:5e:86: 34:73:16:9b:e6:6e:01:b3:ac:c8:82:61:9a:ff:19:aa:26:0e: 77:a6:7c:06:7f:1b:ee:d1:8b:6d:d6:6a:79:18:55:fe:4f:0f: 1f:9e:1e:54:23:c2:b9:1f:cc:b9:85:b0:28:24:50:a7:95:1d: 30:9c:cb:27:0d:4a:2b:58:27:ee:06:49:85:c2:ae:77:a1:d7: d5:18:da:5d:ad:32:46:01:41:6f:d3:f2:a6:0b:9d:ed:74:29: ea:1b:73:77:35:b1:54:69:22:bb:bd:60:57:39:1b:1f:40:c4: c2:ee:6b:6a:65:22:1c:b5:14:b3:93:fb:36:f4:d0:be:3b:90: ca:17:6f:03:0c:db:59:1a:b2:9c:8c:d3:c2:7b:5e:6c:09:42: 7f:0a:9d:4b:a3:af:27:18:ff:4e:89:dc:39:e8:a4:7f:e1:33: f6:49:bd:84:a7:71:d8:e3:36:a0:2b:f6:ed:ad:14:87:d8:17: e8:db:5f:7f:ee:e6:3e:f1:f7:ab:66:30:9b:16:4f:54:31:f0: e9:e8:21:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0 MDkxQjdDMjQwHhcNMjUwNDI1MDAyNzMyWhcNMjUwNTAyMDAyNzMyWjAYMRYwFAYD VQQDEw02ODBhZDZmNC05NDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvFbORVADgQ4paTdQw883uQKhwYnvKh3ecPOOXhUUGlnq5r6iZGtf7HjYFc0 ArOMSQnY2A1+3jXfvAsTkhvxpT9nDbKViA8qu0AuogOjUwcfNtTRvE9oQ4BDH8HX MV+g/RR7+jxPMC5X7Wn6U2IawSIKvhaGvQ3d5Sf//fM65hpoCH5s8xbHT+1FbnBZ me0MWBxKCFvHuABFPnQrOfrefmx+Yx1q9rdG5w99C17qZacXOOiJ5D0Wc5SMtwZ8 dNicl0OqrxJ3/faYV/j6hrkrsw+k24t0mwBxaLc59wl4TVyaIY/KD9he6I4YAjfs nvIX77byDyHHTKOina9nFHan4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbq3gOX GkvKv3ENt59iFZVmzlMQMB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr SUkwVFlrM1duWTVBa2JmQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS9XmQl/H8q+gLdCEJeAQAgGafdui4ptPlOFvbHtlFgswfZ2QiDqH9 yuqFrQ00BSU9DBriXoY0cxab5m4Bs6zIgmGa/xmqJg53pnwGfxvu0Ytt1mp5GFX+ Tw8fnh5UI8K5H8y5hbAoJFCnlR0wnMsnDUorWCfuBkmFwq53odfVGNpdrTJGAUFv 0/KmC53tdCnqG3N3NbFUaSK7vWBXORsfQMTC7mtqZSIctRSzk/s29NC+O5DKF28D DNtZGrKcjNPCe15sCUJ/Cp1Lo68nGP9Oidw56KR/4TP2Sb2Ep3HY4zagK/btrRSH 2Bfo219/7uY+8ferZjCbFk9UMfDp6CHN -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:23 2025 by rpki-client