$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: tVmUAQglf7xgC8ArDyrSZu9fbqJJwTSWpXuSgT3ixrM= Subject key identifier: 74:D0:4A:C5:EE:1E:0D:DE:C5:FB:03:CA:84:D6:21:49:5C:16:A5:3B Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:53:44 +0000 Manifest this update: Fri 25 Apr 2025 04:53:43 +0000 Manifest next update: Fri 02 May 2025 04:53:43 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: TYB5pCeB32YGO2+GaTdvs5QYyBHxrgYaif2J2ZLzNL4=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Apr 25 04:53:43 2025 GMT Not After : May 2 04:53:43 2025 GMT Subject: CN=680b1557-0285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:86:dd:00:41:12:e2:8e:52:87:ea:d2:39: 4a:b0:97:ed:9c:0d:90:29:9b:01:09:2d:7b:a1:9a: d7:53:d3:61:ed:c6:b4:eb:3b:a2:9e:62:5a:47:df: de:01:03:eb:ff:01:e4:ef:2f:2d:14:58:8f:d6:1f: 00:bd:79:e0:b9:a1:16:aa:e3:50:24:e3:5f:db:26: 4f:38:0a:08:57:40:3c:01:e8:89:55:50:18:b6:9f: 0f:b6:85:83:ac:b9:af:19:76:e0:a8:f6:b0:40:5c: b6:fc:4a:82:68:61:84:96:61:54:2c:df:3c:a7:f8: 5b:6d:d0:ed:d1:3d:a4:bc:81:78:ce:74:70:50:60: f2:c0:75:65:33:13:a3:c8:92:fb:df:58:d2:98:3b: 9a:5e:08:c3:bd:f5:a1:45:b0:10:ce:81:f1:d8:63: ad:c0:1a:1b:d1:55:e8:32:b9:12:a1:8d:b6:91:12: 17:0d:99:b7:b4:08:85:4e:2b:09:f7:7d:26:6a:52: 79:c5:10:2b:82:51:c1:08:d1:e0:92:95:66:26:ad: f5:b5:50:fa:4b:ef:9a:26:f8:89:c0:7b:ef:1a:4b: 9e:eb:0d:4f:b3:10:7e:c8:f5:3c:61:3c:f7:fa:2f: 27:55:7a:e3:a0:72:16:e7:48:d1:5f:25:70:75:55: fa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D0:4A:C5:EE:1E:0D:DE:C5:FB:03:CA:84:D6:21:49:5C:16:A5:3B X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8b:49:89:cd:37:d1:e3:4a:d0:58:f5:fe:43:12:ff:92:da: 11:de:75:53:38:17:e0:e7:e3:15:db:b5:6d:13:9f:c7:3c:ee: 91:6e:d8:6e:11:eb:89:6f:9d:d0:82:f6:88:07:9c:85:8c:f4: 2e:fb:83:68:5a:11:ae:14:39:d4:53:fc:d9:18:c2:7b:9b:cb: e1:0f:7e:b7:97:53:74:8f:3d:46:f3:36:a8:23:3a:50:b0:14: 18:93:e6:91:89:76:37:31:19:87:0f:70:23:43:74:29:ba:d7: c8:a4:e0:a5:c3:b4:0a:56:c1:75:b8:0b:12:62:20:5c:5a:2f: 78:b6:c1:b4:1b:59:61:28:ee:80:2d:0b:8d:b0:d2:91:ee:4b: d7:be:cc:a9:17:6e:ac:50:c9:f7:80:05:8d:3d:ef:85:0d:26: 1d:30:3b:41:9d:47:32:ba:8f:c0:71:7b:d4:4d:9b:34:5b:e5: 11:12:01:91:0b:64:9b:5c:da:44:c1:28:3a:4e:9a:f7:de:13: 16:8d:f5:2d:5e:e3:6e:30:34:a1:77:25:e5:0d:c1:c1:0d:d4: 21:54:54:2d:b8:32:65:09:f2:f3:15:df:a6:ef:c4:81:91:b5: 2e:06:65:ee:de:03:1c:98:d9:5f:3f:b1:d2:a3:03:44:88:00: 14:f3:17:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwNDI1MDQ1MzQzWhcNMjUwNTAyMDQ1MzQzWjAYMRYwFAYD VQQDEw02ODBiMTU1Ny0wMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9eG3QBBEuKOUofq0jlKsJftnA2QKZsBCS17oZrXU9Nh7ca06zuinmJaR9/e AQPr/wHk7y8tFFiP1h8AvXnguaEWquNQJONf2yZPOAoIV0A8AeiJVVAYtp8PtoWD rLmvGXbgqPawQFy2/EqCaGGElmFULN88p/hbbdDt0T2kvIF4znRwUGDywHVlMxOj yJL731jSmDuaXgjDvfWhRbAQzoHx2GOtwBob0VXoMrkSoY22kRIXDZm3tAiFTisJ 930malJ5xRArglHBCNHgkpVmJq31tVD6S++aJviJwHvvGkue6w1PsxB+yPU8YTz3 +i8nVXrjoHIW50jRXyVwdVX6pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTQSsXu Hg3exfsDyoTWIUlcFqU7MB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUi0mJzTfR40rQWPX+QxL/ktoR3nVTOBfg5+MV27VtE5/HPO6Rbthu EeuJb53QgvaIB5yFjPQu+4NoWhGuFDnUU/zZGMJ7m8vhD363l1N0jz1G8zaoIzpQ sBQYk+aRiXY3MRmHD3AjQ3QputfIpOClw7QKVsF1uAsSYiBcWi94tsG0G1lhKO6A LQuNsNKR7kvXvsypF26sUMn3gAWNPe+FDSYdMDtBnUcyuo/AcXvUTZs0W+UREgGR C2SbXNpEwSg6Tpr33hMWjfUtXuNuMDShdyXlDcHBDdQhVFQtuDJlCfLzFd+m78SB kbUuBmXu3gMcmNlfP7HSowNEiAAU8xey -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:34 2025 by rpki-client