$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: zsUMrF63sUnDXHt9zSz6nzysPpHzJxWOvA6Aqzg2tVA= Subject key identifier: 9C:9B:FB:45:CF:B9:2A:67:3C:D0:86:97:1B:9B:DE:04:EB:DB:74:38 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1EF2 Signing time: Sat 26 Apr 2025 16:00:44 +0000 Manifest this update: Sat 26 Apr 2025 16:00:44 +0000 Manifest next update: Sat 03 May 2025 16:00:44 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: arODfqDvbXu1lgCX0t6zYeaYR5ItXXVHZpFG2VQubZ4=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7938 (0x1f02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Apr 26 16:00:44 2025 GMT Not After : May 3 16:00:44 2025 GMT Subject: CN=680d032c-f3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d9:1a:3c:46:09:e3:81:da:cd:f8:f3:89:18: 37:67:1b:ed:a5:37:de:bf:ed:66:ee:d4:ad:4a:44: f4:35:0c:8d:74:b0:65:e4:f6:33:49:1c:82:49:dd: fb:78:03:d2:54:aa:77:b9:c5:45:66:fe:b0:51:8b: 65:69:3c:3e:c4:1b:cd:00:24:5a:fa:5b:ed:c3:ce: f0:84:43:4c:92:ea:07:56:47:e7:82:7b:41:1b:2c: 16:9a:2b:c0:92:27:10:1f:d0:07:b8:8f:bc:91:fc: af:99:df:9f:6c:b1:46:a4:fc:02:1a:58:41:e4:8c: 67:9a:17:e2:a0:75:a7:a9:1e:21:2a:3f:76:08:98: b2:6d:88:d3:70:f2:ba:e7:f3:d0:a4:16:65:05:87: a3:19:45:fa:5a:b1:68:f0:4d:56:87:c3:d8:a3:7b: 1f:67:3c:bd:c1:b1:8f:1e:c9:ab:ef:0f:ad:3d:db: bd:4a:3b:43:32:cb:82:58:3d:e3:83:2a:2c:83:f1: 19:08:d1:54:d3:4a:ab:18:b1:8b:19:17:c9:ac:c4: 45:a6:20:cd:74:5a:97:5b:4e:8c:18:1c:20:8c:ca: d8:a2:35:f7:2c:d2:28:4d:d8:ff:86:0e:ab:cb:87: 85:63:ed:98:76:e2:fd:b0:9b:13:46:15:de:de:70: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9B:FB:45:CF:B9:2A:67:3C:D0:86:97:1B:9B:DE:04:EB:DB:74:38 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:a7:fa:84:7c:55:46:62:b9:8f:dd:ed:8d:81:c5:0e:2e: e0:f2:98:2c:92:87:14:01:ea:9d:db:a1:a0:e6:99:d1:89:95: f7:47:62:70:8a:8a:7a:af:d6:f9:15:89:07:85:88:8f:a4:62: 17:38:49:e1:cc:26:60:61:92:19:d5:de:8c:65:18:a0:8f:4c: c6:d4:88:e0:9d:0f:f6:df:7a:29:48:ee:b5:cd:e7:09:1b:d0: a6:e1:cf:02:28:52:c4:0e:3c:07:c1:03:99:9b:e6:c2:1d:cf: 17:9f:91:61:b7:16:3a:df:cc:35:4b:25:70:d5:00:f0:dd:c4: 2f:55:75:10:45:2e:d6:7b:93:59:dd:42:d6:d6:95:26:c7:7b: 49:75:23:18:63:f2:e7:73:56:80:f6:df:e9:0d:39:f5:35:f0: 81:b6:18:da:9f:cf:6c:d9:08:83:93:a7:7a:44:3a:6a:bf:60: 17:16:91:9d:9d:b1:b1:71:36:5d:71:42:c1:28:eb:87:e3:e3: 15:15:f6:e8:bc:db:d9:74:ae:6e:b0:d5:2c:40:3c:e7:d5:e8: 37:f2:b1:82:be:2a:23:29:8c:d3:2c:67:4a:42:72:69:18:a2: 91:fe:0a:da:08:45:61:e6:fd:df:fe:cc:c8:bf:84:b0:16:57: ca:59:a5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUwNDI2MTYwMDQ0WhcNMjUwNTAzMTYwMDQ0WjAYMRYwFAYD VQQDEw02ODBkMDMyYy1mM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NkaPEYJ44HazfjziRg3ZxvtpTfev+1m7tStSkT0NQyNdLBl5PYzSRyCSd37 eAPSVKp3ucVFZv6wUYtlaTw+xBvNACRa+lvtw87whENMkuoHVkfngntBGywWmivA kicQH9AHuI+8kfyvmd+fbLFGpPwCGlhB5IxnmhfioHWnqR4hKj92CJiybYjTcPK6 5/PQpBZlBYejGUX6WrFo8E1Wh8PYo3sfZzy9wbGPHsmr7w+tPdu9SjtDMsuCWD3j gyosg/EZCNFU00qrGLGLGRfJrMRFpiDNdFqXW06MGBwgjMrYojX3LNIoTdj/hg6r y4eFY+2YduL9sJsTRhXe3nCzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyb+0XP uSpnPNCGlxub3gTr23Q4MB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWeaf6hHxVRmK5j93tjYHFDi7g8pgskocUAeqd26Gg5pnRiZX3R2Jw iop6r9b5FYkHhYiPpGIXOEnhzCZgYZIZ1d6MZRigj0zG1IjgnQ/233opSO61zecJ G9Cm4c8CKFLEDjwHwQOZm+bCHc8Xn5FhtxY638w1SyVw1QDw3cQvVXUQRS7We5NZ 3ULW1pUmx3tJdSMYY/Lnc1aA9t/pDTn1NfCBthjan89s2QiDk6d6RDpqv2AXFpGd nbGxcTZdcULBKOuH4+MVFfbovNvZdK5usNUsQDzn1eg38rGCviojKYzTLGdKQnJp GKKR/graCEVh5v3f/szIv4SwFlfKWaWL -----END CERTIFICATE-----Generated at Sun Apr 27 04:22:17 2025 by rpki-client