$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: B7IxBCKyjZmBlF1nh2jS+iqZ9GO8s9yOceefcR7oJ5c= Subject key identifier: 4C:C7:69:D1:74:EB:21:56:F1:EF:AE:B7:6E:05:FB:A3:D9:E8:F4:36 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0C92 Signing time: Thu 24 Apr 2025 18:08:36 +0000 Manifest this update: Thu 24 Apr 2025 18:08:35 +0000 Manifest next update: Thu 01 May 2025 18:08:35 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: mvSCT8kOx5OJZtnCAVwW3BeYmpZBsUvl/j78i1jVvFE=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Apr 24 18:08:35 2025 GMT Not After : May 1 18:08:35 2025 GMT Subject: CN=680a7e24-b141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:84:96:6c:f9:01:85:01:94:2c:be:9c:63: 0f:a8:4d:f1:08:9e:b9:1a:60:d1:f9:0d:73:4d:0b: 59:76:e9:e2:3c:b4:bc:5f:63:ba:03:01:df:5b:5c: f2:aa:35:d1:db:93:ab:04:22:00:4b:6b:2f:1d:42: 8f:d5:c9:a3:e1:97:ee:96:1f:64:d2:15:34:f7:b7: bc:8a:bc:9b:a5:d4:63:ef:ce:0f:79:e8:13:3c:d2: 09:75:11:76:8c:41:21:ee:8d:2a:ab:ad:ca:3c:48: a2:92:56:ef:ab:e7:cf:c7:98:49:44:f2:ab:a1:a4: eb:b2:70:f4:65:00:cb:e6:64:f2:02:7f:55:05:e5: 2c:56:f9:65:aa:1a:2e:a0:d9:fc:f7:99:23:e6:10: 37:d5:55:29:4b:1b:36:56:a4:4a:5e:4f:a8:32:ab: 9c:e7:15:2d:2d:2e:c1:d8:b5:1c:e6:17:64:48:c9: a2:24:85:11:4f:2d:1e:f8:93:93:30:41:ed:a1:ed: b2:0d:7f:67:ba:81:5b:c8:0f:8e:55:61:2e:14:aa: 56:54:24:7f:11:3f:b6:0b:51:31:10:de:92:69:5e: 5a:17:64:2b:c5:a8:6c:fa:e1:0f:20:f1:0d:1f:af: be:24:16:cf:05:cd:fb:8a:18:fd:20:1a:01:36:37: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C7:69:D1:74:EB:21:56:F1:EF:AE:B7:6E:05:FB:A3:D9:E8:F4:36 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7a:82:13:a8:9b:02:0f:86:51:fd:49:57:14:0d:6b:ae:0e: fe:06:36:ff:6e:d6:f0:2b:fa:89:89:bc:5e:37:73:6b:4a:3c: 1c:b8:6f:9e:b7:85:7b:46:45:dd:91:d9:e6:a7:51:e8:c7:2f: c5:08:6a:80:07:e7:47:79:7b:c8:f1:63:b1:9e:66:08:99:ab: 03:12:cb:9e:fd:c2:cf:2e:bd:b4:4b:96:6f:86:68:05:ed:30: 9a:8d:7d:2c:2f:51:77:48:b9:b2:34:ab:6a:3e:6a:3c:cc:5e: a4:5a:5c:28:33:42:43:c1:71:e6:83:e8:65:68:83:2d:e1:9d: 52:11:c4:c2:49:df:26:70:4a:8e:bd:d3:31:d9:35:61:c6:0f: c4:2b:6a:f0:10:66:f9:64:bc:e2:88:ee:de:61:5b:c0:43:9b: 69:fd:95:d4:8e:f7:fe:aa:3d:30:87:16:0a:fe:69:07:31:e7: 25:58:9d:f5:2b:e0:e3:1b:eb:c1:69:6d:2e:5d:cf:25:2d:0f: 3d:f3:91:f1:cc:4c:39:90:33:64:95:ba:2a:ed:4a:7f:8d:34: 84:45:25:41:b7:63:2b:e5:86:c1:c1:9d:da:12:3b:d8:2d:72: 3b:be:85:28:cd:dc:88:fd:dd:1d:04:76:85:63:f3:c1:fc:30: b5:f9:fa:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjUwNDI0MTgwODM1WhcNMjUwNTAxMTgwODM1WjAYMRYwFAYD VQQDEw02ODBhN2UyNC1iMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGeElmz5AYUBlCy+nGMPqE3xCJ65GmDR+Q1zTQtZduniPLS8X2O6AwHfW1zy qjXR25OrBCIAS2svHUKP1cmj4Zfulh9k0hU097e8irybpdRj784PeegTPNIJdRF2 jEEh7o0qq63KPEiiklbvq+fPx5hJRPKroaTrsnD0ZQDL5mTyAn9VBeUsVvllqhou oNn895kj5hA31VUpSxs2VqRKXk+oMquc5xUtLS7B2LUc5hdkSMmiJIURTy0e+JOT MEHtoe2yDX9nuoFbyA+OVWEuFKpWVCR/ET+2C1ExEN6SaV5aF2Qrxahs+uEPIPEN H6++JBbPBc37ihj9IBoBNjchDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzHadF0 6yFW8e+ut24F+6PZ6PQ2MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVeoITqJsCD4ZR/UlXFA1rrg7+Bjb/btbwK/qJibxeN3NrSjwcuG+e t4V7RkXdkdnmp1Hoxy/FCGqAB+dHeXvI8WOxnmYImasDEsue/cLPLr20S5ZvhmgF 7TCajX0sL1F3SLmyNKtqPmo8zF6kWlwoM0JDwXHmg+hlaIMt4Z1SEcTCSd8mcEqO vdMx2TVhxg/EK2rwEGb5ZLziiO7eYVvAQ5tp/ZXUjvf+qj0whxYK/mkHMeclWJ31 K+DjG+vBaW0uXc8lLQ8985HxzEw5kDNklboq7Up/jTSERSVBt2Mr5YbBwZ3aEjvY LXI7voUozdyI/d0dBHaFY/PB/DC1+fpo -----END CERTIFICATE-----Generated at Sat Apr 26 13:13:28 2025 by rpki-client