$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: 9qyrrg33H4n89k/pPSF021e2lDkJsiVZSuoIsT7rrgI= Subject key identifier: DD:A4:07:DD:00:45:EE:0A:53:26:A5:9D:52:1C:05:C4:D7:E5:01:5A Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C2D Signing time: Thu 24 Apr 2025 18:28:12 +0000 Manifest this update: Thu 24 Apr 2025 18:28:11 +0000 Manifest next update: Thu 01 May 2025 18:28:11 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: Nav/t0D4X0KXYcMhaaGFvKxYDq15IEWepNME6K4eHww=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Apr 24 18:28:11 2025 GMT Not After : May 1 18:28:11 2025 GMT Subject: CN=680a82bc-af87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:d0:a1:bc:6a:d7:64:6d:48:9e:40:0d:36: 7f:83:33:9c:75:e6:e7:82:af:41:67:7a:07:51:f2: 15:e8:8a:ee:53:4b:90:5d:1e:9d:e8:9a:51:10:da: f7:7d:01:41:ae:40:21:f6:62:f4:f2:94:ca:d0:9e: 11:92:f9:00:fe:a1:ec:41:d1:84:4a:2d:bf:c9:07: d8:2d:17:39:e1:e2:b7:a2:4c:ad:15:da:c0:35:e5: 97:f6:c4:f9:89:03:50:d3:53:d9:61:43:46:58:bf: 2c:21:3f:75:84:80:17:58:fd:0d:48:e0:24:ed:ff: 8a:8e:40:30:da:d8:1e:f2:47:82:4e:2f:ce:7b:25: ca:4a:b5:be:c9:9e:d9:a5:5a:e4:98:a3:c1:e8:03: 65:34:a2:a2:f2:c4:17:a8:03:7d:82:b6:a2:da:bd: 20:a0:5e:c0:70:e1:bf:b6:49:3b:ff:d6:d7:36:f2: 4d:9a:43:fc:f6:5b:42:4a:94:e5:fe:aa:04:b6:ac: 22:c3:6d:65:4b:a1:f2:38:50:52:c7:33:55:3c:85: c2:57:b3:05:82:6c:3e:1c:48:89:b3:29:38:cc:20: 15:17:3c:24:ca:45:c4:67:f2:46:0c:24:49:de:25: 91:af:19:bf:4c:f3:98:5e:bf:32:33:c3:03:c0:39: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A4:07:DD:00:45:EE:0A:53:26:A5:9D:52:1C:05:C4:D7:E5:01:5A X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:d4:32:30:36:df:1b:b9:9c:df:a0:26:ec:16:e7:bb:06: ac:35:4e:12:5c:c7:67:d4:ad:b6:79:e2:ab:a5:41:70:11:b8: c0:1c:a8:c4:10:8f:56:16:4b:82:25:0f:74:93:ce:6a:29:fb: 64:15:f2:e0:76:e6:43:82:fa:69:ad:64:92:d9:2f:32:61:d2: 56:9b:33:8e:df:85:24:76:ed:4b:70:85:e1:b0:81:15:bf:b2: 83:35:e6:75:69:57:60:31:36:33:4d:1e:4e:59:cf:91:cb:01: e8:f1:22:f5:b4:45:38:30:3d:0b:48:ef:5f:36:c2:d3:63:47: 12:17:14:1c:e0:a6:9b:c8:d5:86:a1:6d:55:6d:d8:8b:22:4d: 45:8c:9d:f9:33:2e:e2:92:a2:ad:f8:c7:5c:dc:52:24:4a:5a: 9a:e7:a4:02:f4:eb:5d:a9:00:c8:1c:23:ec:4d:7d:e0:dc:0e: fa:67:f9:93:05:c7:a8:4b:fd:7c:da:d2:79:6b:7c:23:0b:13: b8:fa:a1:3a:37:7b:55:31:63:01:d9:23:9c:ac:f1:08:e9:83: ee:8f:d2:5d:9f:2d:18:fa:bd:1e:c3:95:48:ec:32:fd:4f:e0: 20:e6:b9:e9:5f:54:1c:d7:35:da:b8:b9:eb:84:5d:6d:21:0e: 4a:2d:b5:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUwNDI0MTgyODExWhcNMjUwNTAxMTgyODExWjAYMRYwFAYD VQQDEw02ODBhODJiYy1hZjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fbQobxq12RtSJ5ADTZ/gzOcdebngq9BZ3oHUfIV6IruU0uQXR6d6JpRENr3 fQFBrkAh9mL08pTK0J4RkvkA/qHsQdGESi2/yQfYLRc54eK3okytFdrANeWX9sT5 iQNQ01PZYUNGWL8sIT91hIAXWP0NSOAk7f+KjkAw2tge8keCTi/OeyXKSrW+yZ7Z pVrkmKPB6ANlNKKi8sQXqAN9grai2r0goF7AcOG/tkk7/9bXNvJNmkP89ltCSpTl /qoEtqwiw21lS6HyOFBSxzNVPIXCV7MFgmw+HEiJsyk4zCAVFzwkykXEZ/JGDCRJ 3iWRrxm/TPOYXr8yM8MDwDk7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2kB90A Re4KUyalnVIcBcTX5QFaMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQYdQyMDbfG7mc36Am7BbnuwasNU4SXMdn1K22eeKrpUFwEbjAHKjE EI9WFkuCJQ90k85qKftkFfLgduZDgvpprWSS2S8yYdJWmzOO34Ukdu1LcIXhsIEV v7KDNeZ1aVdgMTYzTR5OWc+RywHo8SL1tEU4MD0LSO9fNsLTY0cSFxQc4KabyNWG oW1VbdiLIk1FjJ35My7ikqKt+Mdc3FIkSlqa56QC9OtdqQDIHCPsTX3g3A76Z/mT BceoS/182tJ5a3wjCxO4+qE6N3tVMWMB2SOcrPEI6YPuj9Jdny0Y+r0ew5VI7DL9 T+Ag5rnpX1Qc1zXauLnrhF1tIQ5KLbUS -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:43 2025 by rpki-client