$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: 1Lv2SCVtdXgNdSxkz1URPbUd8bD8H0JBNmf6P98tNUg= Subject key identifier: F1:B9:1C:48:26:8B:24:B7:6F:53:3A:D1:70:F0:A6:30:04:1A:30:BC Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0FDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FC4 Signing time: Thu 24 Apr 2025 17:30:12 +0000 Manifest this update: Thu 24 Apr 2025 17:30:12 +0000 Manifest next update: Thu 01 May 2025 17:30:12 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: gjKjc6KEW38cy5EilFwuyzmKfY+FBPPVL3hVjdn+WCs=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Apr 24 17:30:12 2025 GMT Not After : May 1 17:30:12 2025 GMT Subject: CN=680a7524-c2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:15:f0:97:a2:0d:72:18:c5:4e:0f:4d:16: e0:e8:ec:f9:f4:85:cf:3f:c0:ed:34:1c:bd:0b:df: 88:bc:fa:22:02:81:97:2c:27:e8:9d:68:5d:da:67: cd:55:c7:7b:db:21:74:83:d3:e2:54:e7:5a:6d:96: 5c:5d:2f:ce:03:fe:43:6a:88:3d:eb:29:85:9e:29: 7f:8e:b8:d8:40:bb:90:ff:34:e1:93:da:80:86:90: d0:35:a8:8e:72:e7:bc:cd:d8:63:72:82:1d:f0:e8: 59:5d:48:15:77:4c:67:40:3e:c3:10:8a:bd:46:04: 5d:75:b5:2c:02:f9:61:e8:d1:79:e3:d7:a5:aa:8d: 35:ec:50:05:fc:8c:fb:2e:eb:9c:71:88:9c:49:9d: 55:b8:9e:3a:7b:fb:96:1b:00:7a:b4:ec:ba:14:fb: 7b:58:a8:c6:73:1f:90:19:d2:db:32:18:95:38:27: 5a:d4:9e:d6:6b:1c:7e:0b:06:97:d8:3c:4f:9a:ca: d6:31:b3:99:72:42:68:d6:63:cd:7f:c5:58:85:c8: cc:b8:f7:e0:25:3e:af:0d:85:01:33:0e:99:94:00: 46:a2:63:25:50:24:b8:f8:f7:21:35:a0:03:94:ff: cc:1e:17:9c:f7:df:01:d6:9f:5c:1e:43:af:24:52: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B9:1C:48:26:8B:24:B7:6F:53:3A:D1:70:F0:A6:30:04:1A:30:BC X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:49:55:59:4e:13:0d:cd:cb:a0:b2:ce:c9:87:b1:28:df: 60:cd:4c:84:03:6f:43:4f:90:51:88:5f:a6:ee:fd:96:16:74: 94:06:ba:0f:95:38:0f:11:04:4b:29:9b:34:47:b0:7f:84:09: a6:54:cc:5c:ac:d3:e5:bc:ae:da:10:f9:7e:1d:00:b4:f3:cd: f7:75:9e:c7:4b:b9:55:1d:fa:46:b5:ac:93:85:25:6c:34:d0: be:a7:60:02:3d:3f:b3:8d:16:91:ca:a3:91:dd:79:ba:00:b8: 89:06:78:f4:e8:9c:73:e1:97:7d:81:e3:b3:fa:03:5b:b6:13: b3:24:6d:52:f9:6f:e3:d4:6a:97:8c:ea:c9:8a:67:8b:91:cb: 49:16:89:e1:2f:83:ba:6b:ac:ce:49:a0:9e:91:c7:89:ed:29: 35:d3:f7:bb:39:23:87:07:55:43:dd:d5:fa:e3:19:5e:64:ec: 64:aa:a3:67:3b:c5:d3:41:f1:d0:6f:e4:44:e8:ba:65:6a:fb: 36:98:99:29:04:92:92:81:5a:7d:10:ba:cc:e7:55:38:17:70: 34:a0:22:af:43:6c:8c:b6:e0:eb:9b:86:89:c5:2d:09:c3:b2: 51:ac:a4:eb:67:27:aa:3e:9b:0b:15:15:14:ce:d2:39:12:8c: 25:fc:31:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNDI0MTczMDEyWhcNMjUwNTAxMTczMDEyWjAYMRYwFAYD VQQDEw02ODBhNzUyNC1jMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1kV8JeiDXIYxU4PTRbg6Oz59IXPP8DtNBy9C9+IvPoiAoGXLCfonWhd2mfN Vcd72yF0g9PiVOdabZZcXS/OA/5Daog96ymFnil/jrjYQLuQ/zThk9qAhpDQNaiO cue8zdhjcoId8OhZXUgVd0xnQD7DEIq9RgRddbUsAvlh6NF549elqo017FAF/Iz7 LuuccYicSZ1VuJ46e/uWGwB6tOy6FPt7WKjGcx+QGdLbMhiVOCda1J7Waxx+CwaX 2DxPmsrWMbOZckJo1mPNf8VYhcjMuPfgJT6vDYUBMw6ZlABGomMlUCS4+PchNaAD lP/MHhec998B1p9cHkOvJFJWvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPG5HEgm iyS3b1M60XDwpjAEGjC8MB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIC0lVWU4TDc3LoLLOyYexKN9gzUyEA29DT5BRiF+m7v2WFnSUBroP lTgPEQRLKZs0R7B/hAmmVMxcrNPlvK7aEPl+HQC08833dZ7HS7lVHfpGtayThSVs NNC+p2ACPT+zjRaRyqOR3Xm6ALiJBnj06Jxz4Zd9geOz+gNbthOzJG1S+W/j1GqX jOrJimeLkctJFonhL4O6a6zOSaCekceJ7Sk10/e7OSOHB1VD3dX64xleZOxkqqNn O8XTQfHQb+RE6Lplavs2mJkpBJKSgVp9ELrM51U4F3A0oCKvQ2yMtuDrm4aJxS0J w7JRrKTrZyeqPpsLFRUUztI5Eowl/DED -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:57 2025 by rpki-client