$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json) Hash identifier: DtrelUBA5GWhxsiwLzAqRjx0y6SMMw3jOgFb1HqyGUM= Subject key identifier: DF:21:F0:A9:64:1B:51:93:09:EC:75:5D:BC:85:57:10:7A:C3:30:2D Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft Manifest number: 01B2 Signing time: Fri 25 Apr 2025 02:20:25 +0000 Manifest this update: Fri 25 Apr 2025 02:20:24 +0000 Manifest next update: Fri 02 May 2025 02:20:24 +0000 Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: l+lzllqn/w1/OiIupG4WaYMBFu93I4hJSzGWaL+BjAk=) 2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: UfZMrxaB0qz4pcGB9q6XltymVUTNDZVQp2pT7h14Zqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: Apr 25 02:20:24 2025 GMT Not After : May 2 02:20:24 2025 GMT Subject: CN=680af168-04c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:e1:c1:41:a4:f9:83:ad:df:04:90:d4:b7: 30:de:bb:a0:0b:fd:b2:df:46:7e:4f:f4:3b:f0:8a: e1:ae:2e:ad:fc:53:7f:b0:0e:f3:22:53:e9:e3:bb: e9:c6:47:8f:ff:43:3a:d3:33:21:1a:38:f6:21:84: 4d:0e:4c:a0:2c:a3:ab:ff:80:92:e1:48:b4:43:9a: c9:61:35:e2:28:36:a3:6f:c4:df:c9:11:1e:33:1f: 9e:2e:89:a5:be:fe:9f:66:4d:d3:6f:2b:65:9f:70: 31:c2:58:03:a4:ad:fa:7d:29:de:db:97:06:89:0b: 0e:b7:71:af:a8:fa:88:ea:2c:fe:d1:9a:d4:c1:85: 80:01:da:d3:c7:fa:c4:3b:bc:e9:ab:48:ef:b4:29: eb:5a:3d:34:a8:36:1c:94:3f:43:76:ef:ca:f6:22: d7:58:3a:e8:4a:39:d3:59:b5:d0:ba:36:ae:79:eb: fa:41:4a:f3:8e:6c:72:50:d4:90:70:1c:fa:02:a1: 6d:75:a2:7e:54:d0:0b:38:89:e0:88:22:56:3e:1c: 22:5a:2e:22:76:c8:cb:63:94:1d:20:78:c4:38:e8: 83:10:65:1c:82:c2:c0:1b:34:21:a5:ee:9c:dd:ed: 4e:ca:5e:67:78:90:a9:5f:16:f8:32:d2:da:8b:9f: 12:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:F0:A9:64:1B:51:93:09:EC:75:5D:BC:85:57:10:7A:C3:30:2D X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e0:c1:04:e3:6d:94:73:0c:06:69:76:77:4a:b9:0d:0b:03: 4a:52:cf:55:53:1e:26:f7:52:42:af:ba:19:0a:3a:73:aa:62: 37:fd:41:e7:d2:af:35:08:b5:ec:bf:91:a7:65:10:0b:78:10: 89:2a:c9:fb:91:61:44:22:fe:d8:0f:f0:58:57:c2:5c:63:6b: 90:29:08:29:0c:f2:57:73:c6:a2:a0:d8:e1:42:b7:86:c3:6d: 36:2c:f8:db:05:0a:d3:7d:cc:7d:f7:0b:0b:e2:e8:58:8c:d7: d2:60:8a:b4:c1:7f:cf:f2:fb:48:95:f6:8a:be:89:e5:05:01: 14:8b:3f:ae:30:e3:1d:5f:d1:f0:f2:83:b1:9a:5f:74:2c:52: c6:2e:c1:99:bd:e4:6e:99:0e:cf:46:f7:d7:77:1e:d0:9b:7e: 78:9e:c0:76:8b:6f:27:03:a7:a2:b4:4c:07:96:9c:7d:10:b4: 41:c4:83:49:e5:08:0c:d3:3a:09:81:5f:4f:86:a7:10:e8:e1: a4:d4:a7:14:24:7d:6e:79:b1:e6:e9:27:97:88:b8:53:f1:2a: 70:9b:bc:06:83:80:1a:0e:a4:a6:88:86:1b:88:f0:35:44:df: ba:8f:05:fd:d4:5f:56:5b:42:2d:71:b3:94:a1:c8:78:6b:74: aa:92:ed:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjUwNDI1MDIyMDI0WhcNMjUwNTAyMDIyMDI0WjAYMRYwFAYD VQQDEw02ODBhZjE2OC0wNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRfhwUGk+YOt3wSQ1Lcw3rugC/2y30Z+T/Q78Irhri6t/FN/sA7zIlPp47vp xkeP/0M60zMhGjj2IYRNDkygLKOr/4CS4Ui0Q5rJYTXiKDajb8TfyREeMx+eLoml vv6fZk3Tbytln3AxwlgDpK36fSne25cGiQsOt3GvqPqI6iz+0ZrUwYWAAdrTx/rE O7zpq0jvtCnrWj00qDYclD9Ddu/K9iLXWDroSjnTWbXQujaueev6QUrzjmxyUNSQ cBz6AqFtdaJ+VNALOIngiCJWPhwiWi4idsjLY5QdIHjEOOiDEGUcgsLAGzQhpe6c 3e1Oyl5neJCpXxb4MtLai58SyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8h8Klk G1GTCex1XbyFVxB6wzAtMB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I4Qi9ERDA0NzNGQThCRkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZN bmhiTE00SlVEVVlpTmdJVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs4MEE422UcwwGaXZ3SrkNCwNKUs9VUx4m91JCr7oZCjpzqmI3/UHn 0q81CLXsv5GnZRALeBCJKsn7kWFEIv7YD/BYV8JcY2uQKQgpDPJXc8aioNjhQreG w202LPjbBQrTfcx99wsL4uhYjNfSYIq0wX/P8vtIlfaKvonlBQEUiz+uMOMdX9Hw 8oOxml90LFLGLsGZveRumQ7PRvfXdx7Qm354nsB2i28nA6eitEwHlpx9ELRBxINJ 5QgM0zoJgV9PhqcQ6OGk1KcUJH1uebHm6SeXiLhT8Spwm7wGg4AaDqSmiIYbiPA1 RN+6jwX91F9WW0ItcbOUoch4a3Sqku2v -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:00 2025 by rpki-client