$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json) Hash identifier: kOex0nQ1vQTW4m09hRkTMTM8sR/fjbmJP2rE4dkrtwE= Subject key identifier: 71:D8:8F:0B:16:ED:19:4D:54:7C:35:1A:82:C4:B5:97:77:2C:34:91 Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft Manifest number: 2A Signing time: Fri 25 Apr 2025 07:03:02 +0000 Manifest this update: Fri 25 Apr 2025 07:03:02 +0000 Manifest next update: Fri 02 May 2025 07:03:02 +0000 Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: AAhFRIJlv6fxp9iwAQfH1ciiO3SaidcwGVtsnMERCf0=) 2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=) 3: 0173D2DC217311F0BAF2AA30C4F9AE02.roa (hash: nryCYlJbHFwsxOAc1QWOqjcmSxXnzL35lsWmd38XYPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Validity Not Before: Apr 25 07:03:02 2025 GMT Not After : May 2 07:03:02 2025 GMT Subject: CN=680b33a6-fd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:2a:02:54:97:84:83:62:31:91:14:81:ed: f3:e2:dc:a6:7a:7a:d5:34:26:2d:82:60:aa:c1:84: ab:2f:dc:b6:82:46:9a:c9:78:50:3f:d3:11:ff:00: a8:19:4e:38:ce:90:e3:53:10:cb:5a:e5:5f:91:ed: 93:52:66:89:f6:74:23:0b:9a:9e:7a:99:f8:f3:70: f2:94:81:35:33:5d:d9:bb:2a:f7:23:8e:da:cb:39: e5:72:53:8c:b3:e5:16:cd:ca:8c:66:fa:af:41:43: fb:e6:a0:6c:15:74:15:a4:25:c1:84:30:a0:ce:8d: 10:a8:c8:9f:2f:ba:7c:8f:9c:95:8e:f6:91:0b:7e: f8:5b:ff:80:9f:a9:db:0d:d1:b1:af:df:1b:ea:1e: 62:28:7d:91:ed:0b:25:2d:a3:97:f5:98:6f:df:d5: 0e:01:bc:71:d2:c5:6e:3d:ff:ce:73:d0:50:5a:9c: 76:c3:26:25:d8:02:a4:3d:e3:91:86:50:89:2e:a5: e0:ff:db:a1:f2:0a:bc:31:e1:af:22:64:52:94:9e: a3:a1:87:1c:70:4e:ab:c6:7f:7c:96:54:b6:7f:3d: 95:03:1b:e1:d5:60:0d:9d:8a:f1:1b:1b:10:21:cd: 88:e9:6a:a0:29:b9:98:f8:30:d5:b5:e7:32:ed:d9: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:8F:0B:16:ED:19:4D:54:7C:35:1A:82:C4:B5:97:77:2C:34:91 X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cc:86:eb:bf:97:97:67:b3:3c:53:18:9d:47:5a:12:2d:0a: 0d:7a:01:8b:71:d1:1f:4b:b1:d2:e6:a0:5b:0a:de:ae:90:75: 16:f3:32:94:02:cf:6c:e8:9d:76:47:a4:32:4a:ef:ca:b7:8f: bf:4e:44:5a:6e:d6:32:ea:d6:f0:56:02:c1:96:88:a4:ca:05: 4d:eb:f2:41:5f:05:34:5b:98:39:dd:70:51:30:8c:a6:91:8b: 54:02:74:54:ae:09:13:05:46:cf:b9:a2:83:00:90:f3:3e:72: 68:1f:f9:40:01:22:84:07:7f:94:28:d1:38:30:f8:b6:7d:f5: 74:c1:64:cf:2e:2e:77:a8:68:32:05:dc:f5:4e:a9:00:27:a9: da:97:c0:8b:85:bc:ab:4d:d5:23:b0:bf:90:64:1a:09:75:2c: 09:09:26:c3:4a:50:5a:93:51:ec:cd:9a:2e:18:3f:ae:5a:d4: 66:a9:78:8f:0d:ef:58:8d:11:8a:2d:a1:71:86:0b:72:67:f2: b3:1a:a3:d1:36:d1:c7:da:1a:56:26:5b:70:61:21:b0:65:31: d0:75:53:8e:b2:a8:22:f0:b9:84:2c:a7:ea:35:d2:fa:cc:42: 59:01:af:18:09:3d:2f:60:c8:e3:1a:44:f2:b2:33:4d:d9:e3: 5c:db:8a:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTA0MjUwNzAzMDJaFw0yNTA1MDIwNzAzMDJaMBgxFjAUBgNV BAMTDTY4MGIzM2E2LWZkNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/GyoCVJeEg2IxkRSB7fPi3KZ6etU0Ji2CYKrBhKsv3LaCRprJeFA/0xH/AKgZ TjjOkONTEMta5V+R7ZNSZon2dCMLmp56mfjzcPKUgTUzXdm7KvcjjtrLOeVyU4yz 5RbNyoxm+q9BQ/vmoGwVdBWkJcGEMKDOjRCoyJ8vunyPnJWO9pELfvhb/4CfqdsN 0bGv3xvqHmIofZHtCyUto5f1mG/f1Q4BvHHSxW49/85z0FBanHbDJiXYAqQ945GG UIkupeD/26HyCrwx4a8iZFKUnqOhhxxwTqvGf3yWVLZ/PZUDG+HVYA2divEbGxAh zYjpaqApuZj4MNW15zLt2Xo9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcdiPCxbt GU1UfDUagsS1l3csNJEwHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw OTE3L0E1QUY4RTY4RjU2MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0 dk5LWjliMXVFSUpyWmxzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD/Mhuu/l5dnszxTGJ1HWhItCg16AYtx0R9LsdLmoFsK3q6QdRbzMpQC z2zonXZHpDJK78q3j79ORFpu1jLq1vBWAsGWiKTKBU3r8kFfBTRbmDndcFEwjKaR i1QCdFSuCRMFRs+5ooMAkPM+cmgf+UABIoQHf5Qo0Tgw+LZ99XTBZM8uLneoaDIF 3PVOqQAnqdqXwIuFvKtN1SOwv5BkGgl1LAkJJsNKUFqTUezNmi4YP65a1GapeI8N 71iNEYotoXGGC3Jn8rMao9E20cfaGlYmW3BhIbBlMdB1U46yqCLwuYQsp+o10vrM QlkBrxgJPS9gyOMaRPKyM03Z41zbiqE= -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:21 2025 by rpki-client