$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: tscIiBvX8MqRg38qNJP2/tGySb+yBlW5eXvSDK7qwhQ= Subject key identifier: A1:F3:7B:0C:E1:79:92:F9:85:69:9B:50:30:D3:C7:40:CE:67:6E:2B Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 31F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 31E7 Signing time: Thu 24 Apr 2025 15:25:55 +0000 Manifest this update: Thu 24 Apr 2025 15:25:54 +0000 Manifest next update: Thu 01 May 2025 15:25:54 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: gyDLAyrbA9LVJJ5cyuHrHLNiGV2RM7xJZbJmMXc9GRM=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: wEw2eUrFn2P+zJcWQBZWJ1lh7HYxVvAoUW5q1cBACrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12792 (0x31f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Validity Not Before: Apr 24 15:25:54 2025 GMT Not After : May 1 15:25:54 2025 GMT Subject: CN=680a5802-f07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:2c:ff:c0:81:d7:b9:cd:1d:24:da:6c:82: 41:43:3d:e0:7b:61:da:85:bb:33:5b:2b:52:7a:95: 6c:78:bf:fe:bd:07:b5:1c:b8:00:e6:b5:f3:a3:d6: cb:39:4c:fa:7e:96:b2:e5:66:c1:c0:c8:6e:6d:60: 56:19:39:c8:4d:20:3a:8f:fd:5d:1b:e1:da:7d:3b: e8:55:78:6b:28:89:23:63:fd:1f:b4:9d:f7:97:78: 74:a6:f8:a6:fe:78:74:73:ea:b0:0d:62:b1:d2:d4: 4e:2f:0b:24:51:1e:67:f6:7f:a1:53:b5:29:3a:9e: 21:d9:16:37:28:93:f9:36:e5:85:04:7b:27:77:59: 1a:a2:a6:fc:ec:48:36:46:f6:3b:92:19:54:9f:a1: 8f:8d:04:c6:38:24:04:b1:ad:08:e3:a7:34:ce:cc: 2d:b1:98:b2:f0:2d:1a:29:7c:a2:ec:e9:86:e6:09: 7e:3e:cc:00:ee:93:eb:9e:42:5b:95:92:7f:64:5f: 55:df:c6:3b:11:f0:e5:48:23:fa:60:cf:a0:c0:68: 86:d6:dc:57:05:49:fd:00:60:eb:33:e2:72:a6:32: 82:18:7b:25:de:b7:e6:cf:c4:83:70:d7:61:70:42: ce:e2:61:cb:7a:6d:fc:91:5b:5b:f9:a4:14:29:d4: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F3:7B:0C:E1:79:92:F9:85:69:9B:50:30:D3:C7:40:CE:67:6E:2B X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ef:85:50:03:17:b3:20:70:e9:09:03:88:c0:5d:f9:98:f4: 24:6a:bd:9f:76:d2:e5:62:a3:e1:f3:ab:fa:46:d7:5e:db:02: 96:39:df:72:80:35:95:93:d5:dc:d2:c9:c6:83:6a:e6:16:dc: 04:c0:c0:5a:a4:84:67:4d:22:4c:2f:da:ac:ff:3b:26:cf:d4: a2:f9:ed:a4:fa:8b:77:de:59:d4:69:e6:1e:9d:64:e6:fd:8b: 80:10:2c:4f:1c:1f:31:dc:69:c9:32:3a:8a:ce:0b:d2:f1:5d: db:77:07:40:40:60:e7:c2:01:06:0c:08:c9:d6:c2:0b:27:c8: 10:51:0f:39:70:ff:7c:6f:8e:cb:d2:fc:35:29:90:b8:bb:f0: 85:88:23:8b:7a:a9:3e:16:50:46:a7:4b:4e:13:55:34:c4:13: 92:68:51:5e:dd:2c:34:04:13:41:b5:66:6e:de:17:32:35:e0: 99:e0:0d:8f:62:fc:92:a6:c2:02:c1:e2:ef:ae:13:57:84:9b: c9:2e:f3:cd:51:12:b4:3b:87:1b:a0:a8:55:bd:fd:b8:e7:80: b6:2e:eb:c0:67:fb:f0:48:e9:cf:ae:2b:9b:37:a5:17:7f:80: 8e:70:e2:8c:88:03:5c:08:ea:55:72:99:ec:2f:07:43:b8:39: 5e:90:dc:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjUwNDI0MTUyNTU0WhcNMjUwNTAxMTUyNTU0WjAYMRYwFAYD VQQDEw02ODBhNTgwMi1mMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Hos/8CB17nNHSTabIJBQz3ge2HahbszWytSepVseL/+vQe1HLgA5rXzo9bL OUz6fpay5WbBwMhubWBWGTnITSA6j/1dG+HafTvoVXhrKIkjY/0ftJ33l3h0pvim /nh0c+qwDWKx0tROLwskUR5n9n+hU7UpOp4h2RY3KJP5NuWFBHsnd1kaoqb87Eg2 RvY7khlUn6GPjQTGOCQEsa0I46c0zswtsZiy8C0aKXyi7OmG5gl+PswA7pPrnkJb lZJ/ZF9V38Y7EfDlSCP6YM+gwGiG1txXBUn9AGDrM+JypjKCGHsl3rfmz8SDcNdh cELO4mHLem38kVtb+aQUKdQi9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHzewzh eZL5hWmbUDDTx0DOZ24rMB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx74VQAxezIHDpCQOIwF35mPQkar2fdtLlYqPh86v6Rtde2wKWOd9y gDWVk9Xc0snGg2rmFtwEwMBapIRnTSJML9qs/zsmz9Si+e2k+ot33lnUaeYenWTm /YuAECxPHB8x3GnJMjqKzgvS8V3bdwdAQGDnwgEGDAjJ1sILJ8gQUQ85cP98b47L 0vw1KZC4u/CFiCOLeqk+FlBGp0tOE1U0xBOSaFFe3Sw0BBNBtWZu3hcyNeCZ4A2P YvySpsICweLvrhNXhJvJLvPNURK0O4cboKhVvf2454C2LuvAZ/vwSOnPriubN6UX f4COcOKMiANcCOpVcpnsLwdDuDlekNzt -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:50 2025 by rpki-client