$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: 00jHMKTrwR79neVj0xwJuoB3e4JlUYJ0ew1pQ2QDFl4= Subject key identifier: D9:E5:95:60:E2:08:6A:3E:C6:67:DA:54:DB:99:23:45:6E:3F:E6:19 Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 0621 Signing time: Thu 24 Apr 2025 23:25:00 +0000 Manifest this update: Thu 24 Apr 2025 23:25:00 +0000 Manifest next update: Thu 01 May 2025 23:25:00 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: ulaFpBHQRx95f+nM3kGP61RAzn2wPCmW9BFsVn7OTMU=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: fvo1aPGM+n05nvJm6qW9Z2hmGhNw4J6QEIdDkjbjrFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Apr 24 23:25:00 2025 GMT Not After : May 1 23:25:00 2025 GMT Subject: CN=680ac84c-b724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:fd:07:73:15:9a:8c:a1:d6:26:8c:27:e2: d2:9d:ed:87:2d:68:12:e1:cc:26:7f:66:6f:13:c6: ee:fa:7c:1d:67:09:00:ca:50:ec:45:5c:37:7e:bc: 5b:a7:27:98:1d:3d:41:79:c1:a2:9d:d0:b2:61:09: 19:fe:09:81:56:25:7a:61:a6:43:7c:72:71:12:1d: 11:e3:55:1a:7c:2b:1b:5f:18:f5:8a:f4:5c:f9:3a: a6:de:f4:35:2d:83:e1:61:4c:47:85:18:81:51:51: 82:47:f0:8c:42:5a:63:71:49:63:38:04:4c:b9:70: 61:1c:8f:2a:1a:1f:6a:7c:be:e7:b8:0f:50:c0:62: c4:b7:97:65:90:4e:9f:90:be:8a:0c:98:ea:21:e5: f6:99:00:53:7e:55:08:46:87:3c:cf:34:c9:8e:e6: cc:85:f4:23:a2:57:07:9d:5f:be:53:a8:8a:77:d2: 47:43:c9:8c:52:68:92:e8:68:1f:97:fb:20:28:e7: 48:74:c0:74:0e:58:57:77:0e:72:a3:03:c3:2d:91: 24:74:97:83:1d:c5:26:bc:09:5c:e7:87:ab:a3:d5: 8a:00:e0:7e:84:82:0a:9d:01:4d:ca:1e:aa:83:e6: 4e:7c:82:1e:3a:0b:7d:b3:a3:53:dd:84:f6:65:21: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:95:60:E2:08:6A:3E:C6:67:DA:54:DB:99:23:45:6E:3F:E6:19 X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6c:a2:d7:27:75:67:fc:3f:75:29:5e:95:56:ed:41:cf:c8: e9:89:b8:9f:7c:f9:08:10:5e:1a:8b:dc:f8:e7:5c:60:aa:e7: da:59:bc:03:56:a1:82:75:64:39:0b:61:64:0c:0e:9a:61:d4: ad:1d:1c:ab:70:26:f2:10:a5:01:f8:02:7c:f0:de:dc:85:bc: 98:d8:70:79:55:6a:0a:a1:e3:63:4c:ca:cc:e9:4b:ee:d4:df: 29:06:d0:c3:40:b8:12:8d:31:d1:42:47:8e:57:4b:59:2c:2a: 1a:5d:9a:8e:49:f5:79:91:c6:56:e9:15:7f:31:2c:93:68:e2: 0a:83:4c:2b:e8:f2:53:46:40:36:93:ce:6d:b1:2a:d3:db:42: 12:3a:09:a9:76:c3:0f:4d:b2:bf:a1:8e:1a:ef:f6:e8:91:3e: 5a:04:10:f6:71:10:b9:eb:38:1b:9d:42:b9:2d:fe:23:bc:57: 36:06:8e:61:96:35:b4:d2:f6:88:69:52:00:43:96:57:96:53: 11:44:b7:5d:02:0b:c7:ee:85:c7:24:ea:42:99:8b:bb:12:6d: 99:46:0d:70:55:0e:17:2c:75:2f:4d:4b:64:6e:b9:5a:18:43: a6:ef:8b:2e:a6:47:81:0f:62:b9:71:4c:b5:8e:dd:18:34:79: 4e:79:00:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUwNDI0MjMyNTAwWhcNMjUwNTAxMjMyNTAwWjAYMRYwFAYD VQQDEw02ODBhYzg0Yy1iNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+P9B3MVmoyh1iaMJ+LSne2HLWgS4cwmf2ZvE8bu+nwdZwkAylDsRVw3frxb pyeYHT1BecGindCyYQkZ/gmBViV6YaZDfHJxEh0R41UafCsbXxj1ivRc+Tqm3vQ1 LYPhYUxHhRiBUVGCR/CMQlpjcUljOARMuXBhHI8qGh9qfL7nuA9QwGLEt5dlkE6f kL6KDJjqIeX2mQBTflUIRoc8zzTJjubMhfQjolcHnV++U6iKd9JHQ8mMUmiS6Ggf l/sgKOdIdMB0DlhXdw5yowPDLZEkdJeDHcUmvAlc54ero9WKAOB+hIIKnQFNyh6q g+ZOfIIeOgt9s6NT3YT2ZSHaywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnllWDi CGo+xmfaVNuZI0VuP+YZMB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBibKLXJ3Vn/D91KV6VVu1Bz8jpibiffPkIEF4ai9z451xgqufaWbwD VqGCdWQ5C2FkDA6aYdStHRyrcCbyEKUB+AJ88N7chbyY2HB5VWoKoeNjTMrM6Uvu 1N8pBtDDQLgSjTHRQkeOV0tZLCoaXZqOSfV5kcZW6RV/MSyTaOIKg0wr6PJTRkA2 k85tsSrT20ISOgmpdsMPTbK/oY4a7/bokT5aBBD2cRC56zgbnUK5Lf4jvFc2Bo5h ljW00vaIaVIAQ5ZXllMRRLddAgvH7oXHJOpCmYu7Em2ZRg1wVQ4XLHUvTUtkbrla GEOm74supkeBD2K5cUy1jt0YNHlOeQDo -----END CERTIFICATE-----Generated at Sat Apr 26 08:00:17 2025 by rpki-client