$ rpki-client -vvf rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft File: V0mF4m2MdxawntUDGbTOZJYd5w0.mft (raw, json) Hash identifier: 5f7HGUEkAWowPtc3OKnV3TM/3waF3w2bk003k//gaZE= Subject key identifier: F9:5E:86:8E:4D:2C:1B:44:8A:77:D0:37:90:19:D4:62:54:2A:9D:17 Authority key identifier: 57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D Certificate issuer: /CN=A9146ABC/serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft Manifest number: 0147 Signing time: Fri 25 Apr 2025 03:23:31 +0000 Manifest this update: Fri 25 Apr 2025 03:23:31 +0000 Manifest next update: Fri 02 May 2025 03:23:31 +0000 Files and hashes: 1: V0mF4m2MdxawntUDGbTOZJYd5w0.crl (hash: 8PoJdzSFx3j4UiRHu2MTnNfE6Nnu90g11Hu8QjhdJbA=) 2: 5DC923B630ED11EE9A24D25BC4F9AE02.roa (hash: 9sMoBTHNBzTXrd/0A6/mBQcgU25EK23u4Vylq7ntRrs=) 3: 5D4D209030ED11EE9A24D25BC4F9AE02.roa (hash: h0tUzjsSDJepu4YPR5C33X4gta0umpYL27rKDh0bZWE=) 4: 67CDF190321211EEA6FE6D43C4F9AE02.roa (hash: vFUGfYTbO0hXtZL5WrXZO6Ff20WnBskmHAy+Zz+UlEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146ABC, serialNumber=574985E26D8C7716B09ED50319B4CE64961DE70D Validity Not Before: Apr 25 03:23:31 2025 GMT Not After : May 2 03:23:31 2025 GMT Subject: CN=680b0033-d5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:3a:c2:d0:97:bd:ff:34:f6:8a:3e:4a:72:ba: 6b:d8:f8:2e:95:f7:3c:cb:09:56:a4:fe:9f:c0:53: 0a:68:99:9d:d4:bf:92:5b:86:9f:fe:cc:14:21:3d: df:03:cc:b2:bf:93:ae:8c:0d:2b:18:46:56:1c:4a: 1d:31:7e:46:e2:c4:0f:84:ff:f0:f6:fd:fa:ee:dc: f8:1f:f8:e3:3a:78:87:36:7e:a7:44:15:33:cf:da: 7c:46:60:a3:e3:15:0f:b4:52:82:d0:b0:86:a9:46: 79:27:a8:45:3b:01:3f:41:3c:b6:b4:dc:ae:64:15: 09:e9:d9:33:28:e0:d7:d7:5c:26:58:68:26:25:73: ff:2d:df:fe:e2:3e:c9:88:4d:ce:e9:36:55:3a:f4: 5d:7d:6a:b4:02:cf:33:fc:17:31:8a:2b:d1:bd:51: 1e:be:03:ca:d9:f5:f6:f8:10:c1:d7:9b:2c:b7:62: 48:a6:7f:d8:f0:5a:c0:fb:39:1a:0b:d2:30:f4:95: 24:c7:3d:fb:aa:77:2d:45:d1:73:e4:4a:ef:9b:d7: c5:bf:e6:44:3c:39:d7:cd:5f:71:e8:32:ea:0d:26: 03:5f:27:25:ae:d6:e0:0b:03:54:bb:fd:c2:87:f5: b8:2e:87:07:b4:03:50:5c:a8:56:cc:73:b8:e5:b9: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5E:86:8E:4D:2C:1B:44:8A:77:D0:37:90:19:D4:62:54:2A:9D:17 X509v3 Authority Key Identifier: keyid:57:49:85:E2:6D:8C:77:16:B0:9E:D5:03:19:B4:CE:64:96:1D:E7:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V0mF4m2MdxawntUDGbTOZJYd5w0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146ABC/F0E7987C30EC11EE980EB247C4F9AE02/V0mF4m2MdxawntUDGbTOZJYd5w0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:df:98:59:5b:fd:e0:c8:bc:e6:06:ef:a0:aa:b1:e0:10:04: ef:f9:71:36:2d:f2:32:ee:be:c9:8c:a9:c9:eb:be:3d:59:73: 3a:4b:a7:f1:fd:5b:d7:b3:da:e3:30:1c:d7:dc:c8:63:f0:c7: 6f:ff:dc:91:6c:94:9b:90:50:d0:7d:29:1e:97:99:f5:70:a7: 2c:b9:47:af:90:70:2e:9f:e3:01:c8:0f:fc:be:fe:6e:e5:35: ab:89:da:8c:d3:79:32:4f:89:cc:f3:d8:ba:4b:91:3d:b2:63: 28:4c:df:53:3d:27:86:99:53:30:41:ac:0c:9d:f3:c0:80:60: 8c:fa:c0:26:96:8e:ba:70:17:e9:68:e7:dc:69:f6:15:3b:43: 7c:9d:6b:15:39:b3:b3:0f:6d:b1:be:73:35:2d:c9:3e:02:1d: f1:89:74:29:52:f2:88:a8:8f:b2:04:3f:e8:38:f8:f1:94:8f: da:c5:5b:c8:c5:9e:1b:d4:12:7e:ec:ab:17:c1:11:e8:ee:95: 69:1a:f0:cc:f8:81:ab:29:64:43:2a:3e:06:41:45:2f:c9:15: 75:13:84:0e:34:c3:36:0f:be:f0:25:b1:d4:72:15:f5:1c:47: 81:0d:c4:cb:35:df:14:e9:fd:2f:c4:ff:4e:f0:9f:9b:a0:c1: f9:32:a5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBQkMxMTAvBgNVBAUTKDU3NDk4NUUyNkQ4Qzc3MTZCMDlFRDUwMzE5QjRDRTY0 OTYxREU3MEQwHhcNMjUwNDI1MDMyMzMxWhcNMjUwNTAyMDMyMzMxWjAYMRYwFAYD VQQDEw02ODBiMDAzMy1kNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DrC0Je9/zT2ij5Kcrpr2Pgulfc8ywlWpP6fwFMKaJmd1L+SW4af/swUIT3f A8yyv5OujA0rGEZWHEodMX5G4sQPhP/w9v367tz4H/jjOniHNn6nRBUzz9p8RmCj 4xUPtFKC0LCGqUZ5J6hFOwE/QTy2tNyuZBUJ6dkzKODX11wmWGgmJXP/Ld/+4j7J iE3O6TZVOvRdfWq0As8z/BcxiivRvVEevgPK2fX2+BDB15sst2JIpn/Y8FrA+zka C9Iw9JUkxz37qnctRdFz5Ervm9fFv+ZEPDnXzV9x6DLqDSYDXyclrtbgCwNUu/3C h/W4LocHtANQXKhWzHO45bng8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPleho5N LBtEinfQN5AZ1GJUKp0XMB8GA1UdIwQYMBaAFFdJheJtjHcWsJ7VAxm0zmSWHecN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFCQy9GMEU3OTg3QzMw RUMxMUVFOTgwRUIyNDdDNEY5QUUwMi9WMG1GNG0yTWR4YXdudFVER2JUT1pKWWQ1 dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwbUY0bTJNZHhhd250VURHYlRPWkpZZDV3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkFCQy9GMEU3OTg3QzMwRUMxMUVFOTgwRUIyNDdDNEY5QUUwMi9WMG1GNG0yTWR4 YXdudFVER2JUT1pKWWQ1dzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA35hZW/3gyLzmBu+gqrHgEATv+XE2LfIy7r7JjKnJ6749WXM6S6fx /VvXs9rjMBzX3Mhj8Mdv/9yRbJSbkFDQfSkel5n1cKcsuUevkHAun+MByA/8vv5u 5TWridqM03kyT4nM89i6S5E9smMoTN9TPSeGmVMwQawMnfPAgGCM+sAmlo66cBfp aOfcafYVO0N8nWsVObOzD22xvnM1Lck+Ah3xiXQpUvKIqI+yBD/oOPjxlI/axVvI xZ4b1BJ+7KsXwRHo7pVpGvDM+IGrKWRDKj4GQUUvyRV1E4QONMM2D77wJbHUchX1 HEeBDcTLNd8U6f0vxP9O8J+boMH5MqUx -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:56 2025 by rpki-client