$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: J53tHHxMGiYKHWv3MV9g9BXccQMZ0avfQB1nL1wq4oA= Subject key identifier: 18:A8:24:F1:5F:EC:DC:23:36:7E:92:5E:07:E3:EA:69:4F:67:7B:7D Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 097C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 0967 Signing time: Thu 24 Apr 2025 20:06:28 +0000 Manifest this update: Thu 24 Apr 2025 20:06:28 +0000 Manifest next update: Thu 01 May 2025 20:06:28 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: 1X6cBNfXoGnCJUa1r/zVUyYeCglX53au/ZVrnwh3dXA=) 2: 746D55EAC51911EE8C160640C4F9AE02.roa (hash: ZZiIZRMEIsrG7/xqv+su6NUv4n/vVm5n5Gd55n/uWmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2428 (0x97c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Apr 24 20:06:28 2025 GMT Not After : May 1 20:06:28 2025 GMT Subject: CN=680a99c4-b85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:49:af:3a:2c:f3:13:e5:34:75:b2:24:7f: 1e:04:03:e3:f3:cf:7f:a2:ae:3b:47:b3:3e:97:31: 01:17:9c:a6:31:22:d0:08:54:b9:36:7f:f4:40:ff: 65:c3:5a:ba:d8:0a:39:33:69:0e:e2:f4:09:85:6c: e4:56:3d:6e:fa:6b:cf:8f:86:76:fc:13:2d:1e:4f: 8d:a1:af:42:63:5c:d1:e0:41:60:6a:88:a4:b4:1f: 93:92:23:f6:d8:c6:d0:c8:c4:0d:bb:9a:fe:17:fd: ad:6d:a1:e7:a6:bb:0e:8d:4e:df:3c:3b:4b:df:ef: b1:fa:35:c8:b1:14:fe:83:d5:6c:20:f4:55:1d:20: 79:5e:bd:16:e4:2f:d8:ec:30:7b:8f:28:f5:3a:65: 70:38:e6:c3:97:ee:de:a3:57:1f:0a:3d:6f:f5:06: 2e:e1:f2:ce:c7:78:ce:ad:d6:09:50:79:7a:ee:18: 01:bc:5f:9d:2a:b2:c6:f7:c3:fb:72:ab:d9:b3:ee: ae:25:b1:ea:4f:fe:15:e2:8a:89:ae:e6:b7:5f:0b: 68:f2:94:36:cf:ae:5c:7f:ed:fe:80:91:04:fd:c4: 77:15:83:b8:80:81:79:5e:50:1e:2d:1e:d9:00:50: 39:54:68:14:57:10:25:0e:a4:59:11:fa:46:2f:e8: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A8:24:F1:5F:EC:DC:23:36:7E:92:5E:07:E3:EA:69:4F:67:7B:7D X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:4b:ed:6d:b7:12:b0:24:a1:bb:cc:38:97:42:55:7c:d8:f0: a3:99:62:9d:0d:66:48:fd:f2:c3:ea:f8:01:46:16:c4:72:96: 7f:04:65:cf:00:97:4b:33:28:02:04:a3:ec:1f:68:0a:a8:db: 0e:1d:c4:ab:da:65:0c:12:ca:7f:98:46:73:54:3d:0a:f0:73: bc:5d:a3:f2:bf:dc:45:98:94:9a:ac:ae:97:c9:ee:50:14:62: ec:6f:a3:53:08:5f:5e:33:82:ab:90:12:f7:5d:e3:fc:79:70: f1:1c:0b:84:b0:4f:88:c7:fe:cd:04:63:6f:a4:9e:c6:5d:07: 02:f9:2c:d9:a7:6b:2f:f9:b4:3c:b7:5f:d4:8f:cf:18:ae:5a: 1e:7f:2a:79:a3:d3:9e:a1:ac:5a:f2:49:77:91:4d:f0:36:61: 51:b8:a9:49:27:04:f3:68:6c:83:d7:15:b6:fb:29:0d:91:03: f3:b3:00:ec:46:5b:9e:de:85:73:e3:d2:1a:ef:21:19:4e:73: 37:29:2f:bd:c2:85:93:94:86:f8:da:f2:39:6d:cd:ef:66:d6: fa:50:f4:6d:fc:b3:c2:38:7a:b3:3e:cb:34:46:90:13:1a:c8: 59:6c:44:ff:83:13:98:46:c9:4c:d4:71:ed:e7:75:fe:94:8c: 81:cd:23:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUwNDI0MjAwNjI4WhcNMjUwNTAxMjAwNjI4WjAYMRYwFAYD VQQDEw02ODBhOTljNC1iODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EZJrzos8xPlNHWyJH8eBAPj889/oq47R7M+lzEBF5ymMSLQCFS5Nn/0QP9l w1q62Ao5M2kO4vQJhWzkVj1u+mvPj4Z2/BMtHk+Noa9CY1zR4EFgaoiktB+TkiP2 2MbQyMQNu5r+F/2tbaHnprsOjU7fPDtL3++x+jXIsRT+g9VsIPRVHSB5Xr0W5C/Y 7DB7jyj1OmVwOObDl+7eo1cfCj1v9QYu4fLOx3jOrdYJUHl67hgBvF+dKrLG98P7 cqvZs+6uJbHqT/4V4oqJrua3Xwto8pQ2z65cf+3+gJEE/cR3FYO4gIF5XlAeLR7Z AFA5VGgUVxAlDqRZEfpGL+hT0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBioJPFf 7NwjNn6SXgfj6mlPZ3t9MB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBES+1ttxKwJKG7zDiXQlV82PCjmWKdDWZI/fLD6vgBRhbEcpZ/BGXP AJdLMygCBKPsH2gKqNsOHcSr2mUMEsp/mEZzVD0K8HO8XaPyv9xFmJSarK6Xye5Q FGLsb6NTCF9eM4KrkBL3XeP8eXDxHAuEsE+Ix/7NBGNvpJ7GXQcC+SzZp2sv+bQ8 t1/Uj88Yrloefyp5o9Oeoaxa8kl3kU3wNmFRuKlJJwTzaGyD1xW2+ykNkQPzswDs Rlue3oVz49Ia7yEZTnM3KS+9woWTlIb42vI5bc3vZtb6UPRt/LPCOHqzPss0RpAT GshZbET/gxOYRslM1HHt53X+lIyBzSPL -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:51 2025 by rpki-client