$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: WtkG5qKzJFZaQc0/6trqYR5jgF+ReW4mnmTBOuPemgk= Subject key identifier: A1:0F:D3:E7:9F:75:19:5B:57:C4:08:9C:71:E9:13:1B:EB:3B:55:6A Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 012F Signing time: Mon 05 May 2025 03:29:07 +0000 Manifest this update: Mon 05 May 2025 03:29:07 +0000 Manifest next update: Mon 12 May 2025 03:29:07 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: qoYijpTS7tPJBEpfdW0SFBvkKpTfmJXfkB98/uTTKrM=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: May 5 03:29:07 2025 GMT Not After : May 12 03:29:07 2025 GMT Subject: CN=68183083-8f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:2d:b0:ec:de:ea:c3:18:68:d9:ae:88:0b: 8f:da:ab:0b:7e:e0:19:fa:35:4b:6f:77:95:fd:3d: 91:75:f3:86:84:90:a7:d0:ee:6e:66:62:bf:f5:88: ed:6f:a9:8b:9f:08:2c:3b:ba:30:8b:a4:85:83:78: 3d:75:2e:5c:7c:75:ef:74:1f:46:f9:6e:69:14:cd: 92:ba:b9:a8:6e:ab:24:24:dc:bc:f4:3e:89:2f:c6: 9c:2f:bc:c7:e1:93:e8:ea:b2:35:fd:4d:4b:4a:70: 5f:ed:99:4d:9e:af:70:ce:f7:7d:f6:6e:50:e1:37: dc:3a:cf:4a:1f:f0:d6:ea:23:c2:5e:51:de:f2:0b: f8:75:84:2a:78:d4:79:4b:7f:3a:c5:e9:55:29:b0: cc:7e:27:2e:51:cb:af:73:98:83:98:bf:59:d5:a1: 88:49:90:54:85:08:ba:a8:0b:2f:35:90:5f:b8:87: 3f:fa:e7:1d:a2:88:5f:f7:37:0f:08:72:56:86:c2: 89:05:55:12:ec:c6:ee:34:27:88:65:38:98:9b:c3: 19:f4:2b:6f:9b:4b:12:4b:83:c8:21:4b:90:eb:96: ac:0d:16:f0:c2:04:f9:a1:b3:10:0b:a9:f8:0d:f5: f5:8f:d2:8f:2c:3b:22:9a:41:a5:47:46:6e:e6:27: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0F:D3:E7:9F:75:19:5B:57:C4:08:9C:71:E9:13:1B:EB:3B:55:6A X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:43:7b:72:bd:0b:62:3d:83:93:f2:be:f0:ac:da:db:0f:4d: 65:fa:4c:cb:9c:c6:59:20:43:80:73:3d:00:fd:5d:20:34:3a: 25:7b:47:16:8c:3e:c4:cc:7d:48:0f:12:a2:fe:6b:3c:77:99: d9:4c:47:ca:6a:04:f5:40:83:81:f9:d3:2f:27:5a:65:04:d0: 51:30:27:3a:ba:0b:21:b9:27:5d:ea:11:5f:37:12:8b:ec:30: 61:2b:32:04:31:02:8b:7c:78:19:dd:a8:6a:37:72:70:ea:ae: 9b:68:7a:eb:2e:04:9b:a3:8e:8d:5c:05:7f:28:36:f2:fb:ec: e6:98:84:1a:af:04:ab:bf:7f:31:f3:19:e4:f9:ab:90:35:6f: 3a:f3:55:8f:1f:07:20:0f:71:7c:97:8b:48:ed:5d:91:52:10: a4:fa:90:4b:53:29:6f:d6:a9:58:04:07:49:3a:86:70:a4:85: 97:46:4e:a1:70:3b:55:da:b5:77:db:37:9e:db:37:be:99:5f: b4:c3:94:73:ea:d9:e5:90:c2:12:e4:a3:54:22:fb:09:b7:e6: 5a:69:78:60:55:71:2a:21:ed:db:84:46:cb:92:96:5f:60:aa: 5c:91:c3:db:21:4e:43:a7:4e:b9:fa:1e:50:44:c7:c8:83:44: 2d:63:99:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwNTA1MDMyOTA3WhcNMjUwNTEyMDMyOTA3WjAYMRYwFAYD VQQDEw02ODE4MzA4My04ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiMtsOze6sMYaNmuiAuP2qsLfuAZ+jVLb3eV/T2RdfOGhJCn0O5uZmK/9Yjt b6mLnwgsO7owi6SFg3g9dS5cfHXvdB9G+W5pFM2SurmobqskJNy89D6JL8acL7zH 4ZPo6rI1/U1LSnBf7ZlNnq9wzvd99m5Q4TfcOs9KH/DW6iPCXlHe8gv4dYQqeNR5 S386xelVKbDMficuUcuvc5iDmL9Z1aGISZBUhQi6qAsvNZBfuIc/+ucdoohf9zcP CHJWhsKJBVUS7MbuNCeIZTiYm8MZ9Ctvm0sSS4PIIUuQ65asDRbwwgT5obMQC6n4 DfX1j9KPLDsimkGlR0Zu5ifq/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEP0+ef dRlbV8QInHHpExvrO1VqMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPQ3tyvQtiPYOT8r7wrNrbD01l+kzLnMZZIEOAcz0A/V0gNDole0cW jD7EzH1IDxKi/ms8d5nZTEfKagT1QIOB+dMvJ1plBNBRMCc6ugshuSdd6hFfNxKL 7DBhKzIEMQKLfHgZ3ahqN3Jw6q6baHrrLgSbo46NXAV/KDby++zmmIQarwSrv38x 8xnk+auQNW8681WPHwcgD3F8l4tI7V2RUhCk+pBLUylv1qlYBAdJOoZwpIWXRk6h cDtV2rV32zee2ze+mV+0w5Rz6tnlkMIS5KNUIvsJt+ZaaXhgVXEqIe3bhEbLkpZf YKpckcPbIU5Dp065+h5QRMfIg0QtY5kc -----END CERTIFICATE-----Generated at Tue May 6 11:49:08 2025 by rpki-client