$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json) Hash identifier: CrGv47Nj4BwCDrkuneznd9Uii0xP2UkDIOIPSbeU/LQ= Subject key identifier: C7:0D:DE:3F:75:35:3A:DC:1C:5E:64:40:3F:7E:52:C2:93:60:46:88 Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft Manifest number: 12 Signing time: Fri 25 Apr 2025 07:02:23 +0000 Manifest this update: Fri 25 Apr 2025 07:02:22 +0000 Manifest next update: Fri 02 May 2025 07:02:22 +0000 Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: WB88BNMqWbiPwx3rV1KyJaxLNfh1mDdVqgGEx7wZ7n4=) 2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: D+C1K1lzyhPvB9LwJB8gZilHLGwebOslipSKAX/r/Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Validity Not Before: Apr 25 07:02:22 2025 GMT Not After : May 2 07:02:22 2025 GMT Subject: CN=680b337e-f95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:54:ac:60:58:53:d0:bb:2b:31:57:b2:d5: ad:0c:57:cb:c6:58:ca:67:28:95:7c:4c:89:80:d8: 1a:66:15:15:d3:f4:1f:bb:d6:70:f2:dc:f7:f6:c0: ed:02:44:1e:65:88:32:69:38:07:1c:c1:c8:dd:bb: d9:0b:8f:e8:98:e9:31:be:9e:d1:1b:84:53:ce:62: 2d:9c:fc:f8:8f:81:69:9c:85:b7:a7:93:7c:09:e4: 91:03:c7:fd:25:94:70:3a:08:1e:22:5d:42:6b:06: 03:c3:e0:12:00:b2:e6:42:94:99:da:14:37:05:a6: 33:a1:91:fc:2c:82:62:29:58:aa:ca:8d:65:7d:60: 03:88:bd:21:56:47:50:22:e7:9b:fa:15:28:f5:46: f5:47:55:00:33:0e:50:17:e3:55:c7:51:24:9a:85: 94:52:3b:b8:6f:4d:bc:f9:af:4c:1c:79:69:1e:62: 10:4b:c3:2f:cf:02:36:b5:63:f0:6a:a0:c7:c2:2c: 2f:87:0c:b4:0e:06:07:17:ce:27:34:19:7f:52:b6: 55:e2:7a:47:5d:ce:c5:75:f5:97:78:ec:d3:6b:d6: e0:ba:91:4d:a8:a4:70:40:9f:19:b8:cf:3c:dc:c4: 67:77:d0:60:4c:64:97:92:3d:97:55:26:8a:7a:23: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:DE:3F:75:35:3A:DC:1C:5E:64:40:3F:7E:52:C2:93:60:46:88 X509v3 Authority Key Identifier: keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ed:69:dc:16:27:53:23:84:2f:d8:14:71:c1:7e:f2:ce:ed: 37:dc:a6:cc:ea:5d:57:85:97:71:e9:31:81:76:90:35:db:fa: de:ed:69:48:66:3e:df:9c:b6:1e:93:ac:33:07:2b:ce:f7:87: e9:44:8a:a0:5f:3d:b4:8e:a6:9e:2a:33:d4:33:64:74:49:d4: 72:b4:13:b6:51:af:35:3b:7f:19:ce:58:35:22:99:53:63:a2: 26:9f:8c:25:fd:c0:01:48:04:d3:2e:0e:31:82:43:78:fc:2a: 97:a5:f5:1c:67:33:fc:0e:59:0c:32:ff:e2:87:f3:f1:82:92: 59:b2:f5:8a:25:a0:dd:6d:f0:ff:5d:24:5a:5a:f4:6c:6f:44: f1:7d:3a:b7:8f:e9:04:c5:b4:ab:8f:47:d0:f6:36:ef:c4:2a: 85:e5:6c:59:9e:8c:8b:9f:ae:e1:93:b1:e8:19:df:33:71:66: db:41:80:f8:45:71:4c:ae:9b:87:d9:11:0c:f7:8b:3b:b3:82: 68:eb:cb:1c:08:52:f3:8a:3f:44:8a:39:e7:a7:36:61:ab:89: 66:38:82:f7:81:ef:3f:1c:3f:fc:ab:c7:f8:af:53:34:70:3b: 66:10:98:6d:7f:a4:eb:64:d3:2e:99:6e:73:1d:fc:8d:1c:29: 14:03:60:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwOTExMC8GA1UEBRMoMDhBMzkxQzZCMzg5QzgxMEU5NUJDNjEzOUNFQ0IyOUQ1 RDM5NThDNDAeFw0yNTA0MjUwNzAyMjJaFw0yNTA1MDIwNzAyMjJaMBgxFjAUBgNV BAMTDTY4MGIzMzdlLWY5NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkk1SsYFhT0LsrMVey1a0MV8vGWMpnKJV8TImA2BpmFRXT9B+71nDy3Pf2wO0C RB5liDJpOAccwcjdu9kLj+iY6TG+ntEbhFPOYi2c/PiPgWmchbenk3wJ5JEDx/0l lHA6CB4iXUJrBgPD4BIAsuZClJnaFDcFpjOhkfwsgmIpWKrKjWV9YAOIvSFWR1Ai 55v6FSj1RvVHVQAzDlAX41XHUSSahZRSO7hvTbz5r0wceWkeYhBLwy/PAja1Y/Bq oMfCLC+HDLQOBgcXzic0GX9StlXiekddzsV19Zd47NNr1uC6kU2opHBAnxm4zzzc xGd30GBMZJeSPZdVJop6Izv1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxw3eP3U1 OtwcXmRAP35SwpNgRogwHwYDVR0jBBgwFoAUCKORxrOJyBDpW8YTnOyynV05WMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTA5Lzg3MDU1QjMyMDhD ODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdN US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0tPUnhyT0p5QkRwVzhZVG5PeXluVjA1V01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 RTA5Lzg3MDU1QjMyMDhDODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJE cFc4WVRuT3l5blYwNVdNUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7tadwWJ1MjhC/YFHHBfvLO7TfcpszqXVeFl3HpMYF2kDXb+t7taUhm Pt+cth6TrDMHK873h+lEiqBfPbSOpp4qM9QzZHRJ1HK0E7ZRrzU7fxnOWDUimVNj oiafjCX9wAFIBNMuDjGCQ3j8Kpel9RxnM/wOWQwy/+KH8/GCklmy9YoloN1t8P9d JFpa9GxvRPF9OreP6QTFtKuPR9D2Nu/EKoXlbFmejIufruGTsegZ3zNxZttBgPhF cUyum4fZEQz3izuzgmjryxwIUvOKP0SKOeenNmGriWY4gveB7z8cP/yrx/ivUzRw O2YQmG1/pOtk0y6ZbnMd/I0cKRQDYME= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:33 2025 by rpki-client