$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json) Hash identifier: wY3SfTAGOWIwA1A7IHXWlOths5rKAmd688HhMpwYHeo= Subject key identifier: 37:30:C3:30:9B:54:FF:01:42:92:55:2C:24:DF:CA:E3:3D:B2:52:E6 Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Certificate serial: 09CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft Manifest number: 099E Signing time: Thu 24 Apr 2025 20:01:19 +0000 Manifest this update: Thu 24 Apr 2025 20:01:19 +0000 Manifest next update: Thu 01 May 2025 20:01:19 +0000 Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: 7ZyG0hSo4JBcwXUbW5fH+8MlIl1Zm4J66oLjslUhy9w=) 2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: Fn/SXrKcwrvikRaZqbM9UmvxwM1m/am9+sz8PJUtJeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2508 (0x9cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Validity Not Before: Apr 24 20:01:19 2025 GMT Not After : May 1 20:01:19 2025 GMT Subject: CN=680a988f-045e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:d1:34:b3:dd:36:aa:64:66:bd:56:7a:08: 4e:70:35:ee:26:36:97:b9:fa:ab:6f:07:81:94:d1: dc:07:28:bb:2c:7f:35:42:f7:93:fa:4c:70:5f:93: aa:9b:26:e6:6e:b7:17:a0:e7:3a:a4:7c:ef:d9:2d: 36:03:91:ac:54:b7:c6:2d:d5:38:ee:8e:5f:c0:bd: 6c:04:bb:04:b2:1c:dd:75:a8:51:ce:b8:dc:a6:71: fe:0f:0e:db:20:00:17:75:2b:be:73:68:21:c7:53: 3d:1f:54:68:df:ff:0e:44:7d:39:6f:08:30:6c:a5: e9:93:10:57:39:9e:d0:6c:72:c7:13:f8:89:e6:9e: 5d:72:8a:15:e3:69:1b:39:4f:cc:69:dd:1d:3c:61: 46:75:57:03:01:b2:1e:98:e1:5b:80:36:c9:8a:22: ef:a7:6b:3c:c7:66:4d:98:4a:06:8e:6c:7a:2e:eb: 00:95:5f:e5:1f:7d:80:50:03:51:fb:e8:26:86:5b: 9f:6f:3f:a4:5c:ad:62:b5:3a:84:06:76:86:c7:44: 1a:ed:27:7c:bb:f6:85:d3:7d:78:c9:ec:46:76:5a: f1:8c:b8:44:66:d2:62:c2:ba:b6:86:8e:f1:ff:3d: 87:d6:bb:ac:6d:a7:9d:2b:f4:99:d7:0e:9b:5e:0d: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:C3:30:9B:54:FF:01:42:92:55:2C:24:DF:CA:E3:3D:B2:52:E6 X509v3 Authority Key Identifier: keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c6:8d:e5:52:a6:20:04:25:f9:d6:c8:4e:bf:da:d1:f7:02: 2c:63:68:75:7c:b9:1c:c0:52:42:a3:68:6b:34:5e:fa:ce:1a: 67:40:e8:65:5e:e7:ed:21:e8:2d:e7:08:e8:c5:26:3e:ec:0a: fc:96:a3:32:e4:c5:9c:bb:11:8d:88:f4:cb:cf:4c:9a:86:9d: 53:ea:dd:a9:ff:19:5a:99:1d:1e:cf:a3:a8:75:7c:d4:65:d6: d3:5c:5b:44:f3:fe:16:cb:16:23:e8:a5:49:a9:bd:92:8a:65: ab:10:33:cb:d3:bd:a0:e7:fc:28:aa:94:e3:3b:5e:69:2c:8d: ef:3b:43:83:6d:ff:fd:f3:04:12:50:6a:c3:11:49:8a:9a:a7: 62:f3:9f:e7:68:7b:60:8a:fa:20:2d:04:0c:cd:28:7e:d0:98: a7:b5:23:e8:1d:6f:f2:f7:69:ef:46:d1:40:f9:38:6b:46:4b: 64:e5:15:e5:f2:2a:1b:5f:e3:ea:5d:3e:6f:6b:ae:ff:4c:3f: e3:67:d4:8c:e1:91:79:96:05:d1:20:37:50:c2:01:99:cb:8c: 02:22:16:57:8a:2d:61:a6:40:5f:71:e8:8a:bd:79:23:c5:6c: 0f:01:f2:a4:f9:2b:e9:e0:86:11:73:a2:88:3d:1d:8f:51:a8: e3:6d:2a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3 MEE2NkEwNTUwHhcNMjUwNDI0MjAwMTE5WhcNMjUwNTAxMjAwMTE5WjAYMRYwFAYD VQQDEw02ODBhOTg4Zi0wNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcbRNLPdNqpkZr1WeghOcDXuJjaXufqrbweBlNHcByi7LH81QveT+kxwX5Oq mybmbrcXoOc6pHzv2S02A5GsVLfGLdU47o5fwL1sBLsEshzddahRzrjcpnH+Dw7b IAAXdSu+c2ghx1M9H1Ro3/8ORH05bwgwbKXpkxBXOZ7QbHLHE/iJ5p5dcooV42kb OU/Mad0dPGFGdVcDAbIemOFbgDbJiiLvp2s8x2ZNmEoGjmx6LusAlV/lH32AUANR ++gmhlufbz+kXK1itTqEBnaGx0Qa7Sd8u/aF0314yexGdlrxjLhEZtJiwrq2ho7x /z2H1rusbaedK/SZ1w6bXg385wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcwwzCb VP8BQpJVLCTfyuM9slLmMB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REU3QS9CQzcxRUNDNjhENDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cx T3NUTkw0UFJHd1J3cG1vRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwxo3lUqYgBCX51shOv9rR9wIsY2h1fLkcwFJCo2hrNF76zhpnQOhl XuftIegt5wjoxSY+7Ar8lqMy5MWcuxGNiPTLz0yahp1T6t2p/xlamR0ez6OodXzU ZdbTXFtE8/4WyxYj6KVJqb2SimWrEDPL072g5/woqpTjO15pLI3vO0ODbf/98wQS UGrDEUmKmqdi85/naHtgivogLQQMzSh+0JintSPoHW/y92nvRtFA+ThrRktk5RXl 8iobX+PqXT5va67/TD/jZ9SM4ZF5lgXRIDdQwgGZy4wCIhZXii1hpkBfceiKvXkj xWwPAfKk+Svp4IYRc6KIPR2PUajjbSo1 -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:50 2025 by rpki-client