$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: jP6VmdvMuBXpEmjIAYlDSpBj+4E7yT2uCN6hMT5OXlU= Subject key identifier: 03:F3:1F:2C:D3:4A:0C:35:5E:3A:65:F5:21:BB:FD:B4:3B:1A:48:CD Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: C9 Signing time: Sat 03 May 2025 05:04:30 +0000 Manifest this update: Sat 03 May 2025 05:04:30 +0000 Manifest next update: Sat 10 May 2025 05:04:30 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: ra5bboW3/vtk9dKxKjli4hgl/DC8+VC5VxGbUoYAjUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: May 3 05:04:30 2025 GMT Not After : May 10 05:04:30 2025 GMT Subject: CN=6815a3de-58f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:50:eb:9c:d3:2e:56:7e:eb:fe:02:4c:75: a1:37:89:bc:1c:86:7d:7c:84:86:aa:ff:96:a2:4e: 6e:75:bc:c1:be:8f:d6:f2:01:4a:e6:c5:02:13:1d: 0e:97:2f:ad:4a:d6:7e:d9:3d:64:1a:b1:56:70:52: 6d:af:2b:8a:62:41:9b:10:51:cb:1f:94:e2:c7:34: f7:91:df:1c:66:7c:6b:09:1b:19:cd:00:e5:f3:15: 18:3f:aa:70:e2:59:e7:98:e2:a3:d3:dc:2e:96:b2: c5:32:12:38:b8:40:f7:85:df:cf:90:9e:3f:8d:42: 34:64:da:ae:6f:ba:57:5c:d3:33:ab:73:96:ab:40: 5f:ce:1f:85:a3:ae:b0:32:73:64:0c:ef:1a:d0:5c: cf:3c:e0:8c:0a:26:66:90:09:64:0b:aa:d8:04:ff: e0:49:87:ad:1e:c3:c9:40:e0:59:f8:d2:c5:ab:74: d6:05:5b:52:00:82:38:7f:1e:e1:4e:48:1c:f3:62: fa:0b:f3:61:99:97:e2:b8:27:95:75:d7:a5:08:4b: dc:9d:43:96:69:7f:6d:81:76:a7:8c:67:58:b5:c8: 58:9e:a4:8e:9b:a6:83:0f:48:f5:ba:26:d7:46:bb: e4:9c:f4:d3:32:07:cc:77:31:16:33:cc:57:1c:6d: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:1F:2C:D3:4A:0C:35:5E:3A:65:F5:21:BB:FD:B4:3B:1A:48:CD X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:43:03:40:cd:d2:c9:ba:96:ae:9d:0a:c2:85:2a:65:de:73: 62:4c:ed:ef:78:17:32:c5:88:1c:db:41:b9:98:79:2b:57:11: 06:8f:b2:d3:12:46:9d:eb:cc:3b:cf:d2:e5:1a:b1:10:a0:8a: ff:91:fd:fd:6a:3f:c2:6e:7e:67:f0:27:5c:65:32:5a:48:b8: c0:a0:64:b8:86:b5:99:80:89:a4:fe:75:03:ee:17:b5:c0:bc: 35:01:63:fc:e9:36:89:7d:21:49:01:81:7c:32:9e:5d:55:81: 0e:8d:96:69:6b:77:4c:82:d0:e5:cf:f9:e3:27:71:76:17:9a: ce:b9:ff:7e:5e:38:29:ba:b3:30:6b:7c:c4:ce:ac:0d:6c:e7: 44:5f:c1:7b:0c:06:51:69:fc:5a:da:c6:5e:a2:c2:16:86:18: c6:aa:b7:be:dd:4d:33:41:8c:10:d7:5e:c1:c8:d9:75:e1:c3: 28:44:93:8b:11:dc:60:c8:11:f6:55:6d:43:da:3b:e2:93:e4: 00:d3:b2:ce:48:f5:ba:fc:55:d5:45:ef:76:04:c8:00:e3:da: 9e:f6:0f:69:6c:5e:38:d6:c4:11:4e:be:bd:d7:e6:94:b1:0d: 99:44:fa:b4:c9:3c:a4:e8:f1:4a:46:f1:21:f1:b1:95:0e:6d: 7f:44:79:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUwNTAzMDUwNDMwWhcNMjUwNTEwMDUwNDMwWjAYMRYwFAYD VQQDEw02ODE1YTNkZS01OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBRQ65zTLlZ+6/4CTHWhN4m8HIZ9fISGqv+Wok5udbzBvo/W8gFK5sUCEx0O ly+tStZ+2T1kGrFWcFJtryuKYkGbEFHLH5TixzT3kd8cZnxrCRsZzQDl8xUYP6pw 4lnnmOKj09wulrLFMhI4uED3hd/PkJ4/jUI0ZNqub7pXXNMzq3OWq0Bfzh+Fo66w MnNkDO8a0FzPPOCMCiZmkAlkC6rYBP/gSYetHsPJQOBZ+NLFq3TWBVtSAII4fx7h Tkgc82L6C/NhmZfiuCeVddelCEvcnUOWaX9tgXanjGdYtchYnqSOm6aDD0j1uibX RrvknPTTMgfMdzEWM8xXHG1BUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPzHyzT Sgw1Xjpl9SG7/bQ7GkjNMB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQwNAzdLJupaunQrChSpl3nNiTO3veBcyxYgc20G5mHkrVxEGj7LT Ekad68w7z9LlGrEQoIr/kf39aj/Cbn5n8CdcZTJaSLjAoGS4hrWZgImk/nUD7he1 wLw1AWP86TaJfSFJAYF8Mp5dVYEOjZZpa3dMgtDlz/njJ3F2F5rOuf9+XjgpurMw a3zEzqwNbOdEX8F7DAZRafxa2sZeosIWhhjGqre+3U0zQYwQ117ByNl14cMoRJOL EdxgyBH2VW1D2jvik+QA07LOSPW6/FXVRe92BMgA49qe9g9pbF441sQRTr691+aU sQ2ZRPq0yTyk6PFKRvEh8bGVDm1/RHmm -----END CERTIFICATE-----Generated at Sat May 3 15:49:51 2025 by rpki-client