$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft File: L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json) Hash identifier: JigshrPUYXSvTzPp5tB+/pdoB6NQTSmo1JfyYSPi4fQ= Subject key identifier: 01:89:71:E6:DA:0F:C6:41:D1:F4:83:D1:6F:EB:A7:40:9C:FB:DF:F6 Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft Manifest number: 09 Signing time: Fri 25 Apr 2025 07:08:37 +0000 Manifest this update: Fri 25 Apr 2025 07:08:36 +0000 Manifest next update: Fri 02 May 2025 07:08:36 +0000 Files and hashes: 1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: RIR8oRp8MDPqlkMTcx9sm2IAGV1eYS5+gjXhRDd9pwk=) 2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: gTUMCdfGUWrs1q6ayMOBwf36vGkRjWbK2xqTfFcnmzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Validity Not Before: Apr 25 07:08:36 2025 GMT Not After : May 2 07:08:36 2025 GMT Subject: CN=680b34f4-fee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:c9:46:05:12:89:68:14:53:1b:55:f3:7e: 06:f6:76:44:98:69:e1:3c:ed:6a:16:0f:79:03:f3: 06:3c:d2:0c:11:5c:5a:ad:9f:c8:0e:1f:f9:26:d9: 20:21:92:eb:a3:45:f7:3f:b1:7c:d4:09:01:13:23: 74:5b:7d:38:e0:ac:a4:c1:a6:a9:d3:de:f3:6c:31: 66:e7:04:cf:4b:36:9c:96:04:f9:84:65:8c:af:7f: 8a:22:70:c9:cf:d0:f8:c4:bd:98:c4:51:4a:35:72: 46:44:c6:bc:05:f5:9a:ad:cd:82:c4:aa:0c:64:40: b1:5a:e0:a7:ac:82:21:93:4c:47:98:93:92:fc:4f: 5a:da:7b:bd:c7:36:3a:f6:7d:b6:b5:81:53:a7:95: 55:04:ee:fc:ec:98:bd:4f:91:d9:bd:26:dd:6d:9c: c9:9d:a8:e2:39:54:e7:43:98:9e:0c:7d:a3:74:5e: 19:51:a5:74:bb:b1:c8:e7:d1:f7:ab:39:a0:2d:03: b3:6b:d1:30:90:26:27:bd:25:be:a9:6e:a7:1f:02: 10:9f:7a:32:22:db:f8:75:47:60:2a:e3:cd:ac:c2: b7:c3:97:61:10:cf:0e:82:3c:a1:d0:21:83:9d:74: 3c:c6:4d:62:e4:83:b7:a4:68:8f:d1:30:79:54:96: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:71:E6:DA:0F:C6:41:D1:F4:83:D1:6F:EB:A7:40:9C:FB:DF:F6 X509v3 Authority Key Identifier: keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:3b:ab:13:a1:d8:70:24:1e:1e:e0:41:34:20:0a:fc:54:69: 9e:a9:8c:85:dd:77:08:7a:4e:2f:f3:f0:91:bc:cc:57:d2:75: 9a:98:21:0e:d2:d6:1d:1a:11:56:64:c6:d8:42:6b:af:73:f2: 9f:1c:7c:b2:90:30:64:db:b0:4a:a1:93:17:d4:fd:a9:04:72: ef:93:13:71:44:a0:cd:4e:38:0b:e0:98:64:fc:90:ce:4d:41: 52:6e:71:b4:da:c6:b4:38:2e:6f:0d:1c:c5:96:ea:dd:4f:a3: 6e:73:20:3f:95:5f:1e:cf:fd:ef:15:cc:fd:aa:a0:a0:e2:b2: 27:27:7f:d3:ba:93:49:a5:8b:f3:d5:d6:c2:fd:0f:32:ad:22: 59:b2:78:b4:b9:f6:05:18:2d:4f:6f:20:91:bf:dc:aa:b3:e7: 0d:cb:73:4e:92:a9:da:0d:88:7e:43:77:35:4f:ce:10:9b:8c: a4:7f:cb:89:15:1b:c6:b0:0f:af:7c:7e:f0:c4:1d:7d:cf:37: 8f:ba:03:09:b1:f3:62:d9:90:c3:3b:4d:a0:f0:24:86:7b:a4: 77:e4:3d:9d:c7:56:36:42:aa:7d:cb:7a:8f:5f:b4:b8:29:c0: 09:4f:ce:6c:59:43:2e:9c:da:03:fa:2b:0f:6d:55:5b:ae:83: 0c:53:bf:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjU1MTExMC8GA1UEBRMoMkZERDM4MDRENjQ1OEVBRjFDQjM5MTdCNUUzMzJGQkE1 QzcxNUY5MTAeFw0yNTA0MjUwNzA4MzZaFw0yNTA1MDIwNzA4MzZaMBgxFjAUBgNV BAMTDTY4MGIzNGY0LWZlZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/SslGBRKJaBRTG1Xzfgb2dkSYaeE87WoWD3kD8wY80gwRXFqtn8gOH/km2SAh kuujRfc/sXzUCQETI3RbfTjgrKTBpqnT3vNsMWbnBM9LNpyWBPmEZYyvf4oicMnP 0PjEvZjEUUo1ckZExrwF9ZqtzYLEqgxkQLFa4KesgiGTTEeYk5L8T1rae73HNjr2 fba1gVOnlVUE7vzsmL1Pkdm9Jt1tnMmdqOI5VOdDmJ4MfaN0XhlRpXS7scjn0fer OaAtA7Nr0TCQJie9Jb6pbqcfAhCfejIi2/h1R2Aq482swrfDl2EQzw6CPKHQIYOd dDzGTWLkg7ekaI/RMHlUlhV9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAYlx5toP xkHR9IPRb+unQJz73/YwHwYDVR0jBBgwFoAUL904BNZFjq8cs5F7XjMvulxxX5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTUxLzVBQjE5MjAyMTZD NTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDkwNEJOWkZqcThjczVGN1hqTXZ1bHh4WDVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTUxLzVBQjE5MjAyMTZDNTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4 Y3M1RjdYak12dWx4eFg1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFA7qxOh2HAkHh7gQTQgCvxUaZ6pjIXddwh6Ti/z8JG8zFfSdZqYIQ7S 1h0aEVZkxthCa69z8p8cfLKQMGTbsEqhkxfU/akEcu+TE3FEoM1OOAvgmGT8kM5N QVJucbTaxrQ4Lm8NHMWW6t1Po25zID+VXx7P/e8VzP2qoKDisicnf9O6k0mli/PV 1sL9DzKtIlmyeLS59gUYLU9vIJG/3Kqz5w3Lc06SqdoNiH5DdzVPzhCbjKR/y4kV G8awD698fvDEHX3PN4+6Awmx82LZkMM7TaDwJIZ7pHfkPZ3HVjZCqn3Leo9ftLgp wAlPzmxZQy6c2gP6Kw9tVVuugwxTvy0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:23 2025 by rpki-client