$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft File: mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json) Hash identifier: F+glBm3aKtDd+H04aKYtNJyI/odJlcV7SeVizCyK9Q4= Subject key identifier: 60:9C:49:19:4B:17:E2:5F:29:86:79:EA:0C:F2:CE:50:96:F9:B5:55 Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 Certificate issuer: /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Certificate serial: 1DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft Manifest number: 1DB1 Signing time: Thu 24 Apr 2025 16:08:05 +0000 Manifest this update: Thu 24 Apr 2025 16:08:04 +0000 Manifest next update: Thu 01 May 2025 16:08:04 +0000 Files and hashes: 1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: vECdHoMAq/7c5CS74HBlKkVlU53BCRpsnxbGYjHtd6I=) 2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: quQxqNwWkulIRmJT2I6ZYZNStKYWsMI4R3sbyT8S9tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7614 (0x1dbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Validity Not Before: Apr 24 16:08:04 2025 GMT Not After : May 1 16:08:04 2025 GMT Subject: CN=680a61e4-af48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:03:37:f4:c1:77:74:3d:f9:f2:47:f1:ae: b9:6b:6a:27:8c:25:28:e7:82:41:b4:52:b4:12:80: 03:c6:d0:77:32:69:a7:d1:30:39:6e:ac:0e:49:c5: d4:83:0c:81:40:de:9f:9c:a9:5e:88:5a:26:1e:39: 2a:5f:56:eb:dc:1f:5a:65:1a:3f:d3:0e:f2:2c:e0: 2f:06:6a:1a:cc:3d:eb:f6:43:b2:1d:ab:39:f7:a7: 52:3e:75:05:8c:6c:64:3c:a7:f7:e8:a4:27:dc:45: 8f:12:6e:1c:bb:f0:8e:b9:d5:ec:63:8a:90:14:95: 39:4e:89:3a:c5:10:e1:c7:5b:01:cb:96:9a:3c:40: d0:c6:25:db:9b:c6:3d:0c:26:2c:ce:f7:9e:cd:01: db:78:23:17:ab:5b:3f:c4:ab:25:de:a5:f3:5b:6b: c7:3f:ab:e4:85:dd:51:ac:b5:0f:7d:00:83:de:56: 60:07:fb:68:b1:7e:3e:75:a4:68:82:13:21:f5:68: 7d:56:2e:35:05:06:a8:29:28:fd:09:1e:85:2b:ce: 4a:44:bf:21:2e:17:87:5a:4f:58:da:0a:fb:a8:73: d0:78:f5:ba:f5:d0:dc:a6:57:5d:c0:77:b8:8a:78: 20:c9:45:b2:a4:ba:e9:5c:51:40:9b:22:3d:4e:90: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9C:49:19:4B:17:E2:5F:29:86:79:EA:0C:F2:CE:50:96:F9:B5:55 X509v3 Authority Key Identifier: keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:23:7b:ed:39:5a:2d:4c:2f:ae:e1:a1:bd:15:3c:2d:41:70: 26:30:ae:b4:ba:bf:c6:de:a8:82:c3:c7:c8:dd:4e:84:f9:bc: 83:8b:52:9d:bb:d6:e4:e3:ed:11:31:ef:a5:91:c0:6d:06:f8: 00:79:0c:a1:1c:21:4f:03:7f:45:cc:79:66:10:f1:02:ad:71: f3:32:5c:b7:ae:f2:38:ae:7f:f3:51:c2:a1:58:56:0c:ab:ca: ad:b4:24:85:a8:d6:9a:b2:1b:19:e1:1b:47:bc:93:a1:aa:17: 2a:a3:76:e9:67:77:ea:dc:51:16:7f:c2:9f:42:ba:c2:5f:97: 7e:bc:68:84:cf:d8:13:2a:cd:eb:33:a0:4a:f0:f1:f3:18:b8: da:cd:7e:82:6f:2b:2f:68:9b:96:f8:2a:e0:49:11:d7:68:25: 95:0a:15:2b:ef:d4:95:13:e6:0e:0e:ac:21:48:2b:64:0f:aa: cc:24:59:a2:d5:84:b6:66:7c:5e:9e:4a:f5:17:4a:40:ac:66: 6a:94:be:b6:47:79:63:50:06:a0:46:2d:e8:72:67:83:53:c1: de:6b:6e:56:65:e0:ac:1c:72:e7:3b:42:98:a5:92:a6:00:db: b6:a7:29:27:f2:6a:6a:c0:32:da:23:a6:78:b8:28:0f:9c:6d: ad:30:5f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4MEMxMTAvBgNVBAUTKDlBNjY1MjAxRDYxNjBGMzFENzZCOUQyMTdBMURGRkVB RDEyQ0JBODIwHhcNMjUwNDI0MTYwODA0WhcNMjUwNTAxMTYwODA0WjAYMRYwFAYD VQQDEw02ODBhNjFlNC1hZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls4DN/TBd3Q9+fJH8a65a2onjCUo54JBtFK0EoADxtB3Mmmn0TA5bqwOScXU gwyBQN6fnKleiFomHjkqX1br3B9aZRo/0w7yLOAvBmoazD3r9kOyHas596dSPnUF jGxkPKf36KQn3EWPEm4cu/COudXsY4qQFJU5Tok6xRDhx1sBy5aaPEDQxiXbm8Y9 DCYszveezQHbeCMXq1s/xKsl3qXzW2vHP6vkhd1RrLUPfQCD3lZgB/tosX4+daRo ghMh9Wh9Vi41BQaoKSj9CR6FK85KRL8hLheHWk9Y2gr7qHPQePW69dDcplddwHe4 inggyUWypLrpXFFAmyI9TpBkAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCcSRlL F+JfKYZ56gzyzlCW+bVVMB8GA1UdIwQYMBaAFJpmUgHWFg8x12udIXod/+rRLLqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTgwQy85QTdDRDNFQTk2 QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6SFhhNTBoZWgzXzZ0RXN1 b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tWlNBZFlXRHpIWGE1MGhlaDNfNnRFc3VvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTgwQy85QTdDRDNFQTk2QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6 SFhhNTBoZWgzXzZ0RXN1b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbI3vtOVotTC+u4aG9FTwtQXAmMK60ur/G3qiCw8fI3U6E+byDi1Kd u9bk4+0RMe+lkcBtBvgAeQyhHCFPA39FzHlmEPECrXHzMly3rvI4rn/zUcKhWFYM q8qttCSFqNaashsZ4RtHvJOhqhcqo3bpZ3fq3FEWf8KfQrrCX5d+vGiEz9gTKs3r M6BK8PHzGLjazX6CbysvaJuW+CrgSRHXaCWVChUr79SVE+YODqwhSCtkD6rMJFmi 1YS2Znxenkr1F0pArGZqlL62R3ljUAagRi3ocmeDU8Hea25WZeCsHHLnO0KYpZKm ANu2pykn8mpqwDLaI6Z4uCgPnG2tMF/B -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:00 2025 by rpki-client