$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: SJXkeNGHGRVU61iKQylU7BsOEC5Htyj5Gr3AuawfIe8= Subject key identifier: BD:90:37:F5:A6:B0:D5:E6:68:3E:F5:10:AA:3C:B1:C3:64:08:B4:0D Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 0487 Signing time: Thu 24 Apr 2025 17:25:20 +0000 Manifest this update: Thu 24 Apr 2025 17:25:20 +0000 Manifest next update: Thu 01 May 2025 17:25:20 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: IOCIlcKq1bX+9m2+EmIKgxgRMxqqtz4E1B3idjX+5Po=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Apr 24 17:25:20 2025 GMT Not After : May 1 17:25:20 2025 GMT Subject: CN=680a7400-60c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:16:c8:f5:f4:00:7b:41:fe:f1:f7:2b:bd: 67:5b:d8:1c:4a:db:44:31:93:33:b7:b2:c3:42:10: f4:b2:d0:dc:12:03:95:62:f7:a7:dc:ab:9a:ae:a0: 7f:08:fd:38:47:8d:47:00:dd:ac:3d:50:90:37:86: 85:c7:d2:22:d0:2a:d9:9b:20:c5:c8:8b:23:1f:87: f1:0a:a2:3a:80:50:29:4a:2d:9f:04:a1:56:65:6a: ce:85:60:de:80:24:c7:ad:76:bb:1a:6c:14:ed:2e: 67:a1:11:31:9b:73:be:2d:a4:55:3b:2d:af:56:04: b8:da:91:ce:42:fd:d8:0c:f0:9b:9d:8a:57:1e:17: 5a:47:49:95:9f:67:5f:62:5a:f9:81:78:fb:66:52: bc:a0:58:89:06:47:1d:82:2b:42:d5:fe:3d:71:ce: cb:49:bf:5b:f8:a4:23:c8:2e:ed:04:12:07:df:70: 25:07:63:33:fb:d0:3c:2a:8f:22:a3:05:a9:ea:c8: b5:41:48:87:c1:09:8e:89:d6:01:77:ef:33:1e:a8: cd:0e:59:3e:b9:6b:c4:56:bd:49:9d:ab:1b:e7:bd: 25:d7:ab:1b:ef:24:fb:a3:a5:9d:72:e9:5b:6a:35: ce:42:61:20:4d:0d:de:93:c4:fe:e9:39:c8:ec:33: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:90:37:F5:A6:B0:D5:E6:68:3E:F5:10:AA:3C:B1:C3:64:08:B4:0D X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:7b:f3:15:20:c2:50:b1:e0:4e:d7:ef:54:ca:22:fc:3d:3d: 17:a3:a4:90:54:79:6e:17:f8:4a:24:eb:d9:5c:85:47:31:b9: 3d:52:5c:12:17:73:a8:4c:c3:44:d7:a1:09:30:f0:3d:54:1d: 88:5f:dc:96:5b:c8:a5:8c:c8:82:48:00:3d:db:38:d5:0a:aa: 8b:6e:f8:92:68:22:fa:5a:e3:76:90:18:d2:03:aa:c4:46:fd: c8:f9:42:76:bd:54:61:75:4d:e1:c9:1e:06:38:a5:01:3c:e2: 0a:41:41:0e:92:9a:fd:4f:10:68:83:23:9b:b0:55:83:5b:7d: 85:a3:e8:e4:42:f3:44:c6:7f:56:e1:55:6e:f9:60:06:5c:96: 63:19:5b:9c:03:f0:5f:bb:f8:a9:14:1c:37:16:2d:d2:54:9f: d6:93:94:b2:47:78:09:a9:af:6c:36:5a:93:e4:68:d7:a6:93: 2e:1a:1d:95:4d:82:ff:67:27:06:a6:92:3c:4f:9c:89:ae:7f: b1:77:ab:10:47:8d:dc:a1:15:5f:d5:0b:f8:51:8a:87:6b:f6: f1:1e:b2:23:79:8a:b3:2b:9f:55:5e:4b:f5:c3:73:89:76:85: 23:60:e2:c0:61:11:bb:91:33:0b:44:66:68:75:ff:eb:6b:a5: fd:2d:98:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUwNDI0MTcyNTIwWhcNMjUwNTAxMTcyNTIwWjAYMRYwFAYD VQQDEw02ODBhNzQwMC02MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmS4WyPX0AHtB/vH3K71nW9gcSttEMZMzt7LDQhD0stDcEgOVYven3KuarqB/ CP04R41HAN2sPVCQN4aFx9Ii0CrZmyDFyIsjH4fxCqI6gFApSi2fBKFWZWrOhWDe gCTHrXa7GmwU7S5noRExm3O+LaRVOy2vVgS42pHOQv3YDPCbnYpXHhdaR0mVn2df Ylr5gXj7ZlK8oFiJBkcdgitC1f49cc7LSb9b+KQjyC7tBBIH33AlB2Mz+9A8Ko8i owWp6si1QUiHwQmOidYBd+8zHqjNDlk+uWvEVr1Jnasb570l16sb7yT7o6Wdculb ajXOQmEgTQ3ek8T+6TnI7DPLzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2QN/Wm sNXmaD71EKo8scNkCLQNMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDee/MVIMJQseBO1+9UyiL8PT0Xo6SQVHluF/hKJOvZXIVHMbk9UlwS F3OoTMNE16EJMPA9VB2IX9yWW8iljMiCSAA92zjVCqqLbviSaCL6WuN2kBjSA6rE Rv3I+UJ2vVRhdU3hyR4GOKUBPOIKQUEOkpr9TxBogyObsFWDW32Fo+jkQvNExn9W 4VVu+WAGXJZjGVucA/Bfu/ipFBw3Fi3SVJ/Wk5SyR3gJqa9sNlqT5GjXppMuGh2V TYL/ZycGppI8T5yJrn+xd6sQR43coRVf1Qv4UYqHa/bxHrIjeYqzK59VXkv1w3OJ doUjYOLAYRG7kTMLRGZodf/ra6X9LZjK -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:53 2025 by rpki-client