$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json) Hash identifier: s8JRng+mMewRqhFfsVy2lQtDKLEglKYmMVDqrnkRdPY= Subject key identifier: 19:FF:F9:76:49:62:ED:6E:66:FC:E2:05:D2:69:1F:57:74:FB:1A:5D Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft Manifest number: 01B4 Signing time: Fri 25 Apr 2025 02:31:28 +0000 Manifest this update: Fri 25 Apr 2025 02:31:28 +0000 Manifest next update: Fri 02 May 2025 02:31:28 +0000 Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: RVjFFOfJjmmNAtqOqr8Uv/0NhXPfiVxqyz4dDEh8Zh0=) 2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: JxIG0aTCU82q7umurfAFtEVJNKacWC+8NM/ekdYlO24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Validity Not Before: Apr 25 02:31:28 2025 GMT Not After : May 2 02:31:28 2025 GMT Subject: CN=680af400-7988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:4a:6a:a9:97:e4:51:15:35:8d:e4:e1:89: ac:0e:e5:9c:28:76:4a:04:82:ec:fd:6b:50:79:25: 8e:ae:fa:41:05:90:07:60:91:57:df:6d:78:e3:f7: 03:f4:79:7c:b9:44:49:5e:46:e7:4e:07:45:7b:6f: 26:49:83:84:54:b7:2f:11:82:ce:d7:4b:77:ca:d2: 8e:93:f5:c7:1a:fd:69:8d:a1:8d:e3:f5:07:f8:e8: 53:68:6b:97:74:08:03:ae:43:92:54:54:b5:8a:7d: 57:f8:1f:6c:df:fb:ff:8d:d3:7c:c5:42:79:3e:d2: a9:19:19:69:c4:d9:a3:b7:53:83:13:62:59:58:c6: ab:15:f2:2c:7b:5e:16:e4:98:9e:bb:a7:3f:66:f3: 29:43:21:57:07:eb:8b:a4:83:e2:92:63:69:0f:7a: 97:84:51:26:70:9e:5e:9f:13:95:30:a4:5d:dc:fe: 2c:7e:8d:e9:4d:22:12:b8:eb:d4:1c:3b:b3:81:98: f8:b1:a6:90:32:7b:a7:f1:d2:94:dd:24:22:f5:18: 36:be:df:cc:6a:cf:59:eb:f3:2d:d1:24:26:33:7d: f9:71:e5:6e:30:74:e6:40:59:eb:e4:63:cb:36:28: d9:71:3a:3c:05:11:9f:b6:de:db:cf:95:69:c9:9d: cc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:F9:76:49:62:ED:6E:66:FC:E2:05:D2:69:1F:57:74:FB:1A:5D X509v3 Authority Key Identifier: keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:44:83:10:64:d5:cd:6c:b4:88:d0:9a:11:04:91:86:29:c9: bd:7b:7f:44:a1:5f:30:d8:f5:cb:49:c4:8e:30:07:3c:94:7b: 5a:08:48:b0:58:80:35:ae:61:c1:f2:30:c4:46:12:33:8d:bd: 8a:14:0f:ba:2e:c1:c5:1e:56:f9:a4:02:ca:f8:49:37:53:22: 25:4a:76:6f:6d:45:61:74:7a:05:64:b1:6b:7b:b7:b1:71:7d: c5:7b:d6:fd:6f:07:b9:0f:4a:22:cf:0b:d7:35:e7:a1:c2:07: 86:19:c8:b2:c2:ee:d9:93:2b:15:8b:79:4e:0e:a4:80:33:69: 82:d4:51:b5:7f:ab:a4:b1:27:cf:ac:1f:b3:82:cc:00:2c:c2: e3:fb:b3:32:bd:b7:e7:9f:09:ce:fb:51:4d:5b:ab:5b:92:35: 6f:ee:85:f3:ee:35:2e:b6:84:35:d4:b6:bc:d9:97:d3:91:52: f2:ed:94:53:83:78:74:3f:0d:67:be:57:fb:f6:98:13:8f:55: 55:df:d0:b1:95:15:4d:6e:a7:cc:6b:24:f9:92:b6:a7:53:d9: 2b:38:ba:e7:8c:9b:54:3b:0f:85:f4:c0:2d:19:57:b5:8e:29: c5:ef:18:92:6e:f7:72:00:91:53:56:77:96:23:05:10:54:f9: 10:d8:1b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2 RDgwQ0M1MTcwHhcNMjUwNDI1MDIzMTI4WhcNMjUwNTAyMDIzMTI4WjAYMRYwFAYD VQQDEw02ODBhZjQwMC03OTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqRKaqmX5FEVNY3k4YmsDuWcKHZKBILs/WtQeSWOrvpBBZAHYJFX32144/cD 9Hl8uURJXkbnTgdFe28mSYOEVLcvEYLO10t3ytKOk/XHGv1pjaGN4/UH+OhTaGuX dAgDrkOSVFS1in1X+B9s3/v/jdN8xUJ5PtKpGRlpxNmjt1ODE2JZWMarFfIse14W 5Jieu6c/ZvMpQyFXB+uLpIPikmNpD3qXhFEmcJ5enxOVMKRd3P4sfo3pTSISuOvU HDuzgZj4saaQMnun8dKU3SQi9Rg2vt/Mas9Z6/Mt0SQmM335ceVuMHTmQFnr5GPL NijZcTo8BRGftt7bz5VpyZ3MEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn/+XZJ Yu1uZvziBdJpH1d0+xpdMB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwRIMQZNXNbLSI0JoRBJGGKcm9e39EoV8w2PXLScSOMAc8lHtaCEiw WIA1rmHB8jDERhIzjb2KFA+6LsHFHlb5pALK+Ek3UyIlSnZvbUVhdHoFZLFre7ex cX3Fe9b9bwe5D0oizwvXNeehwgeGGciywu7ZkysVi3lODqSAM2mC1FG1f6uksSfP rB+zgswALMLj+7MyvbfnnwnO+1FNW6tbkjVv7oXz7jUutoQ11La82ZfTkVLy7ZRT g3h0Pw1nvlf79pgTj1VV39CxlRVNbqfMayT5kranU9krOLrnjJtUOw+F9MAtGVe1 jinF7xiSbvdyAJFTVneWIwUQVPkQ2Bty -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:04 2025 by rpki-client