$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft File: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json) Hash identifier: 45GVhaZvp2qvt+AJhEjaddA0bAD5h19Bc+Uj6GxSzf8= Subject key identifier: 93:15:75:34:D6:02:B5:FF:C1:C3:49:A5:8F:17:A6:1E:62:CF:E3:16 Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft Manifest number: 0621 Signing time: Thu 24 Apr 2025 22:34:29 +0000 Manifest this update: Thu 24 Apr 2025 22:34:28 +0000 Manifest next update: Thu 01 May 2025 22:34:28 +0000 Files and hashes: 1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: P/au5Z3UOu78EEBKSBuoBKkdEOY9h/1YguT4UcJUgHA=) 2: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: y+RhkfZMGTxRVubK4QV96TYGnjkmbmFAXQyjgVFX8go=) 3: 948A2714980211EB82357D6CC4F9AE02.roa (hash: nUrfHwU2ledrvSpXzdKHdIfP/lVdp7uA8FU8ZIbWtPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Validity Not Before: Apr 24 22:34:28 2025 GMT Not After : May 1 22:34:28 2025 GMT Subject: CN=680abc75-533b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:a7:fc:83:20:fb:c2:99:87:ef:9f:53:34: 72:e3:63:b9:b0:b6:c0:5a:a4:b0:9a:c8:92:51:54: f8:ad:4f:95:13:03:85:d9:62:5a:a7:06:b8:5a:e6: bf:f0:51:d4:fe:95:04:c8:0a:e1:11:19:10:1e:e1: a9:e3:3a:28:74:b0:7c:4b:fb:21:9d:0b:9f:ae:a9: 2c:af:6e:51:79:87:46:e9:76:ad:b3:ce:cc:88:aa: fa:24:89:bf:68:e4:3a:fe:76:85:68:96:41:c6:9c: a6:e8:59:41:77:b1:6d:6c:f8:ae:e9:c6:89:a6:d5: a5:8c:43:c0:a3:77:34:84:cf:84:19:32:8e:38:11: 17:cb:96:c5:29:84:76:f9:a3:d9:21:30:10:02:67: d8:dd:ee:9a:24:08:bb:eb:3d:6a:35:ef:46:ce:ae: a8:6b:6c:57:19:e5:ff:2f:33:29:db:73:c2:2b:4d: 01:50:1f:28:a2:9a:1e:92:9c:a2:86:1a:42:f3:09: 5f:6f:d9:9c:c0:7c:89:27:8d:c6:85:a5:0d:b7:31: 70:28:63:52:83:e5:35:ad:12:e3:e3:e5:d3:b8:db: 50:a6:df:20:a4:c1:d1:fe:f1:21:46:4d:f0:b8:ef: fb:98:ad:1a:cd:e4:67:ad:6e:a8:b7:45:50:3c:8c: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:15:75:34:D6:02:B5:FF:C1:C3:49:A5:8F:17:A6:1E:62:CF:E3:16 X509v3 Authority Key Identifier: keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5b:11:39:c4:90:70:cd:e1:73:2e:e8:23:30:c5:39:ea:57: d6:d0:fc:37:64:d1:17:3a:d5:a1:d3:06:7c:e8:bb:77:62:2d: d9:0c:af:61:dc:9c:9f:a3:a5:ac:72:09:14:41:d8:58:36:e4: 55:2d:fa:66:c5:8d:32:f1:af:ab:91:27:c7:e0:8d:32:92:c4: 02:48:43:d6:25:b8:38:b8:6f:9e:c6:34:91:e2:48:4e:3b:aa: b4:10:21:bd:9a:c2:4b:81:61:fe:27:05:92:f8:6f:9a:c4:85: b5:5c:27:d1:34:93:b0:b3:06:cf:1a:2c:e9:e1:1c:08:c3:31: 3f:52:eb:fb:89:a2:d2:3d:a7:15:73:25:a2:22:03:3d:69:4d: 49:96:62:87:47:06:c7:a1:3d:01:35:7f:71:63:9c:79:cc:25: 6d:c8:85:bd:9a:37:12:83:c9:31:df:53:80:dd:87:1c:1c:2b: 4f:d7:06:48:b6:4c:4b:2f:64:de:f4:de:88:51:69:c6:97:86: 7c:40:47:dd:28:a5:15:4d:3e:ec:6a:85:0d:36:99:02:35:e1: ec:84:46:92:c0:43:56:3f:45:fd:f2:64:58:06:b0:bb:a0:54: a7:be:81:cc:f9:77:06:6c:a5:1f:d0:37:c9:9b:e9:f5:00:c2: 3b:c8:1a:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG NzhDNjhGRDEwHhcNMjUwNDI0MjIzNDI4WhcNMjUwNTAxMjIzNDI4WjAYMRYwFAYD VQQDEw02ODBhYmM3NS01MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApein/IMg+8KZh++fUzRy42O5sLbAWqSwmsiSUVT4rU+VEwOF2WJapwa4Wua/ 8FHU/pUEyArhERkQHuGp4zoodLB8S/shnQufrqksr25ReYdG6Xats87MiKr6JIm/ aOQ6/naFaJZBxpym6FlBd7FtbPiu6caJptWljEPAo3c0hM+EGTKOOBEXy5bFKYR2 +aPZITAQAmfY3e6aJAi76z1qNe9Gzq6oa2xXGeX/LzMp23PCK00BUB8oopoekpyi hhpC8wlfb9mcwHyJJ43GhaUNtzFwKGNSg+U1rRLj4+XTuNtQpt8gpMHR/vEhRk3w uO/7mK0azeRnrW6ot0VQPIxAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMVdTTW ArX/wcNJpY8Xph5iz+MWMB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4 MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUJGQi9ERTJERTY0Njk4MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5 OXBPVzVlRVVMTWYzakdqOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7WxE5xJBwzeFzLugjMMU56lfW0Pw3ZNEXOtWh0wZ86Lt3Yi3ZDK9h 3Jyfo6WscgkUQdhYNuRVLfpmxY0y8a+rkSfH4I0yksQCSEPWJbg4uG+exjSR4khO O6q0ECG9msJLgWH+JwWS+G+axIW1XCfRNJOwswbPGizp4RwIwzE/Uuv7iaLSPacV cyWiIgM9aU1JlmKHRwbHoT0BNX9xY5x5zCVtyIW9mjcSg8kx31OA3YccHCtP1wZI tkxLL2Te9N6IUWnGl4Z8QEfdKKUVTT7saoUNNpkCNeHshEaSwENWP0X98mRYBrC7 oFSnvoHM+XcGbKUf0DfJm+n1AMI7yBqE -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:20 2025 by rpki-client