$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json) Hash identifier: 0RGxtG1dscPMeTOQlE8M/xX7A7HFWmkjXz7V1/QH0VY= Subject key identifier: E8:4F:7E:F8:E6:45:BB:B9:65:69:59:C1:EE:59:55:98:90:DC:BF:CC Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft Manifest number: AD Signing time: Fri 25 Apr 2025 05:06:50 +0000 Manifest this update: Fri 25 Apr 2025 05:06:49 +0000 Manifest next update: Fri 02 May 2025 05:06:49 +0000 Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: lynshCQCPW5B7Zn5Yi6COB4siJu5dnd+gGPhvizILfk=) 2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=) 3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Validity Not Before: Apr 25 05:06:49 2025 GMT Not After : May 2 05:06:49 2025 GMT Subject: CN=680b186a-c15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:2f:df:6d:96:92:19:af:d4:f6:01:dc:96: 00:c1:23:74:c2:43:b4:00:76:fb:9d:9a:4a:de:0b: 21:87:5e:8e:c9:ef:85:15:26:fe:72:55:ad:9c:7e: 07:34:0a:4c:85:e9:6c:0b:0e:30:2e:0b:06:f4:a9: fe:59:7d:6c:f8:62:ce:31:15:a4:0c:05:91:5a:82: 64:91:3c:8e:ce:9a:62:f3:c2:0f:f1:c6:3a:10:50: 18:4e:48:53:6f:c6:ee:ea:5c:58:7d:e4:09:2e:5c: f7:ae:a6:cf:7f:30:8c:b4:0f:2b:a3:a7:3b:c3:1a: 25:50:fc:92:9e:c0:74:ae:31:57:d7:91:af:81:1b: cd:93:2b:d6:33:b2:d9:23:6c:a2:bc:d8:1a:f5:b1: c2:64:8e:e2:31:6c:c8:d9:98:ce:56:fa:94:26:27: 65:5d:86:f9:e2:99:10:46:45:f2:3c:b6:dd:f3:41: 16:69:69:14:ac:3a:74:c3:d2:49:99:68:bd:06:58: 5c:ac:11:9d:a2:e0:48:05:a9:1c:c8:25:7e:3a:b8: c7:cd:b4:a6:10:b9:25:ed:82:91:d2:44:45:4b:f9: bb:0d:a1:67:76:6a:58:1d:8e:2e:a1:76:aa:87:f3: d4:77:aa:e1:a1:9a:16:8d:26:1e:4c:c9:64:08:03: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4F:7E:F8:E6:45:BB:B9:65:69:59:C1:EE:59:55:98:90:DC:BF:CC X509v3 Authority Key Identifier: keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7e:30:98:e2:2c:f3:69:d4:5c:f9:48:da:b8:3e:15:53:f7: 2b:f7:f8:90:67:d8:d2:fa:35:1b:cf:1f:df:f1:e9:5d:01:96: 97:64:64:6f:1a:99:0f:f9:0f:70:b5:e6:e4:5e:46:77:c0:19: 41:01:30:52:4e:ac:a3:86:37:b1:1c:54:fb:35:f3:ff:fe:4a: 60:b4:2a:eb:b4:27:4c:7b:bc:19:61:29:69:be:d0:c7:6f:76: bc:df:d3:02:a9:94:27:5a:83:bf:e4:ac:da:48:db:0c:ee:cc: 8d:ea:3a:2f:27:ef:f1:c8:56:c1:5d:b9:4a:0f:4d:6d:91:1d: dc:f5:03:59:51:a9:13:c2:13:fe:90:ce:dd:d8:04:20:87:77: 81:79:92:54:31:71:7b:78:12:c8:42:02:85:6f:6d:f4:7e:85: ec:5f:e0:6c:a4:34:b6:45:db:aa:52:8e:12:80:35:03:8a:f2: e1:02:e6:dd:b2:07:6a:d8:45:a4:2e:97:5e:dd:74:e0:53:9b: c7:34:06:cf:b9:af:3d:aa:8c:ef:c1:33:43:c7:80:45:d4:8b: da:74:5a:e3:35:fe:08:79:fd:11:95:7f:67:ed:20:f3:8d:b0: fd:af:40:ce:00:d3:f2:a7:fe:1b:46:a0:c1:ad:18:5a:86:0d: 05:df:8f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx RDAxMjlFQkUwHhcNMjUwNDI1MDUwNjQ5WhcNMjUwNTAyMDUwNjQ5WjAYMRYwFAYD VQQDEw02ODBiMTg2YS1jMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyckv322Wkhmv1PYB3JYAwSN0wkO0AHb7nZpK3gshh16Oye+FFSb+clWtnH4H NApMhelsCw4wLgsG9Kn+WX1s+GLOMRWkDAWRWoJkkTyOzppi88IP8cY6EFAYTkhT b8bu6lxYfeQJLlz3rqbPfzCMtA8ro6c7wxolUPySnsB0rjFX15GvgRvNkyvWM7LZ I2yivNga9bHCZI7iMWzI2ZjOVvqUJidlXYb54pkQRkXyPLbd80EWaWkUrDp0w9JJ mWi9BlhcrBGdouBIBakcyCV+OrjHzbSmELkl7YKR0kRFS/m7DaFndmpYHY4uoXaq h/PUd6rhoZoWjSYeTMlkCAMiWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhPfvjm Rbu5ZWlZwe5ZVZiQ3L/MMB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkIxMy9EQzQ4M0YzMDFFQzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZ Um1KUWpIZ1Y5LXNkQVNucjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBofjCY4izzadRc+UjauD4VU/cr9/iQZ9jS+jUbzx/f8eldAZaXZGRv GpkP+Q9wtebkXkZ3wBlBATBSTqyjhjexHFT7NfP//kpgtCrrtCdMe7wZYSlpvtDH b3a839MCqZQnWoO/5KzaSNsM7syN6jovJ+/xyFbBXblKD01tkR3c9QNZUakTwhP+ kM7d2AQgh3eBeZJUMXF7eBLIQgKFb230foXsX+BspDS2RduqUo4SgDUDivLhAubd sgdq2EWkLpde3XTgU5vHNAbPua89qozvwTNDx4BF1IvadFrjNf4Ief0RlX9n7SDz jbD9r0DOANPyp/4bRqDBrRhahg0F34+X -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:03 2025 by rpki-client