$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft File: 9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json) Hash identifier: UUdVVgSnWh56ry+3mO8/RZdQGmlGN87J9UGqTBqf828= Subject key identifier: 5C:C3:64:29:D6:AE:EA:25:B4:71:0E:32:27:DF:32:90:17:B4:7A:0C Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 Certificate issuer: /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Certificate serial: 1812 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft Manifest number: 1804 Signing time: Thu 24 Apr 2025 16:33:43 +0000 Manifest this update: Thu 24 Apr 2025 16:33:42 +0000 Manifest next update: Thu 01 May 2025 16:33:42 +0000 Files and hashes: 1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: FrTWpk0ZKxQwO6Bd3CDWAcMJ38Dmo0TlICKsL/PmRkE=) 2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: 12/YQGKh2uNHDbW3TNnX9cKDq/H76Hjbaf684uCZbYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6162 (0x1812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154020, serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Validity Not Before: Apr 24 16:33:42 2025 GMT Not After : May 1 16:33:42 2025 GMT Subject: CN=680a67e7-dfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:9f:1c:59:f9:c6:f3:ef:f7:8c:7a:63:17: ed:e2:d4:97:2e:f2:88:2b:a8:e4:ca:b0:ad:e2:cd: 3c:22:21:d5:f8:c8:3e:8d:89:fd:83:5a:83:e8:18: 3c:2f:b6:da:97:73:6b:2d:f4:30:4f:71:52:e7:2b: a7:5a:f1:0a:aa:90:54:83:32:f5:dd:2a:3a:10:d4: 71:9c:7c:41:a4:b2:97:56:f0:07:fd:d3:fc:6a:32: 22:fb:10:5f:c0:70:82:cd:f1:98:1e:4d:a6:0a:fb: 05:cc:bd:dc:52:4e:90:f9:ec:1c:d0:0a:cc:67:7a: e7:d8:4c:3e:e1:27:80:56:ff:bc:75:30:82:c3:fd: da:f2:91:e2:28:0f:4a:4b:5c:96:5a:06:40:68:77: 1a:28:c7:48:de:c4:a8:9d:fc:e0:1e:3e:95:ce:20: 9c:9a:b8:8d:95:46:44:10:5b:31:46:fe:44:0b:39: 62:bd:2f:3d:e7:89:cb:19:9c:56:08:b6:1d:5f:ec: e6:79:bc:59:20:cd:38:9c:aa:12:0c:3d:d5:19:76: a0:4d:21:d2:f3:d7:1f:24:3a:cf:6c:9d:33:1e:3d: ff:29:a3:99:dd:1b:c6:bf:82:d5:b0:21:e9:fe:25: c4:c7:44:3b:18:18:ef:63:8c:d9:4b:93:cd:7b:fa: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:64:29:D6:AE:EA:25:B4:71:0E:32:27:DF:32:90:17:B4:7A:0C X509v3 Authority Key Identifier: keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ba:3e:1c:50:65:f0:6f:41:bd:e5:a6:29:14:a1:f3:53:e2: 48:39:f9:20:23:49:60:da:fd:7a:fb:48:73:bb:bc:7a:d0:c0: e5:57:a7:70:2f:3e:91:dc:cd:c9:e7:ab:61:05:ef:65:fa:f8: e9:45:26:75:a5:f1:9e:28:30:51:eb:a6:47:cc:ea:cf:96:62: cb:20:82:d8:1a:36:15:75:f7:82:d7:7e:02:0c:a4:17:a8:89: b0:0b:c8:54:7e:2c:47:94:bc:e5:4d:8a:17:58:76:5a:8c:9c: 60:ea:90:94:7a:87:f1:c1:c8:0d:2a:6c:ea:96:1d:97:c7:2e: 53:eb:74:d8:db:b3:f6:ba:0c:0f:81:83:5b:60:a8:80:b8:2d: ee:7f:af:b4:bf:59:a5:a0:79:99:91:78:72:79:0e:dd:e2:54: ec:46:32:2c:ba:5f:e5:61:7b:53:e5:a4:92:49:07:71:64:2c: a9:dd:ce:f4:ab:ed:12:7a:e9:12:f8:09:1f:ff:49:f5:68:01: c9:e1:b5:80:64:6f:27:4e:9e:c5:aa:d9:92:1c:a0:0c:a4:f9: 18:fe:42:05:4b:06:f9:4c:90:a8:69:ce:6c:87:95:81:e9:35: d1:42:ec:24:61:5e:67:d4:7a:66:a4:c5:6a:c8:60:93:92:72: 2d:84:e3:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwMjAxMTAvBgNVBAUTKEY2Njk5MjY0NDE3QzIyOEI1MUZFMTVCM0IxRUNCNzg2 N0YyQTI3NDMwHhcNMjUwNDI0MTYzMzQyWhcNMjUwNTAxMTYzMzQyWjAYMRYwFAYD VQQDEw02ODBhNjdlNy1kZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnk2fHFn5xvPv94x6Yxft4tSXLvKIK6jkyrCt4s08IiHV+Mg+jYn9g1qD6Bg8 L7bal3NrLfQwT3FS5yunWvEKqpBUgzL13So6ENRxnHxBpLKXVvAH/dP8ajIi+xBf wHCCzfGYHk2mCvsFzL3cUk6Q+ewc0ArMZ3rn2Ew+4SeAVv+8dTCCw/3a8pHiKA9K S1yWWgZAaHcaKMdI3sSonfzgHj6VziCcmriNlUZEEFsxRv5ECzlivS8954nLGZxW CLYdX+zmebxZIM04nKoSDD3VGXagTSHS89cfJDrPbJ0zHj3/KaOZ3RvGv4LVsCHp /iXEx0Q7GBjvY4zZS5PNe/p7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzDZCnW ruoltHEOMiffMpAXtHoMMB8GA1UdIwQYMBaAFPZpkmRBfCKLUf4Vs7Hst4Z/KidD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDAyMC9BRDFCOERFNEI0 MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElvdFJfaFd6c2V5M2huOHFK ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbVNaRUY4SW90Ul9oV3pzZXkzaG44cUowTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDAyMC9BRDFCOERFNEI0MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElv dFJfaFd6c2V5M2huOHFKME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSuj4cUGXwb0G95aYpFKHzU+JIOfkgI0lg2v16+0hzu7x60MDlV6dw Lz6R3M3J56thBe9l+vjpRSZ1pfGeKDBR66ZHzOrPlmLLIILYGjYVdfeC134CDKQX qImwC8hUfixHlLzlTYoXWHZajJxg6pCUeofxwcgNKmzqlh2Xxy5T63TY27P2ugwP gYNbYKiAuC3uf6+0v1mloHmZkXhyeQ7d4lTsRjIsul/lYXtT5aSSSQdxZCyp3c70 q+0SeukS+Akf/0n1aAHJ4bWAZG8nTp7FqtmSHKAMpPkY/kIFSwb5TJCoac5sh5WB 6TXRQuwkYV5n1HpmpMVqyGCTknIthOOD -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:21 2025 by rpki-client