$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json) Hash identifier: +sTFfioQ94J3Kdph71kQY+t360nc3IMZe3zxUEBGyaU= Subject key identifier: F8:87:47:76:33:A9:6F:C8:61:D4:90:67:EB:17:11:EF:BF:DE:4B:67 Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft Manifest number: 0198 Signing time: Fri 25 Apr 2025 02:37:01 +0000 Manifest this update: Fri 25 Apr 2025 02:37:00 +0000 Manifest next update: Fri 02 May 2025 02:37:00 +0000 Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: R+hOLQBBA1WWWA493XsNTUJOefpOQI6iFEcSiu0ytbQ=) 2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Validity Not Before: Apr 25 02:37:00 2025 GMT Not After : May 2 02:37:00 2025 GMT Subject: CN=680af54c-d2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:1c:10:5f:32:5b:c1:08:8f:0f:15:89:ef: 83:c9:2c:c4:e5:9c:de:14:d8:bd:de:7e:39:e6:6c: 82:af:da:ad:af:d2:88:cb:0d:fd:b7:cc:1c:88:f2: 20:aa:98:2c:63:9e:9b:36:3b:66:ba:55:23:f2:fe: 66:f1:c0:c6:dc:b4:09:1a:e3:b0:46:b4:e6:63:99: c7:a4:26:c1:bb:cb:90:91:f2:a0:07:79:8a:4d:02: f0:6b:58:44:4c:ae:ac:fd:9b:f2:76:5b:4e:0e:1e: bc:99:f7:ef:ce:33:42:8d:5e:4b:d6:c9:03:d9:c8: ee:23:0c:5f:c8:cc:4d:da:aa:8e:06:93:d4:16:ea: 3d:80:ac:31:81:fa:8b:72:f4:9e:92:92:1e:a2:f9: d2:fc:3b:bd:c4:83:fc:b4:e9:d6:4f:a0:81:29:33: 63:ef:ca:1b:0a:62:05:87:e7:a4:87:fb:e1:62:95: a7:15:4d:90:4b:06:c6:2f:36:b3:25:0e:c5:15:27: 6d:08:8a:58:af:26:3f:1f:62:6c:34:8a:35:e0:f3: 40:da:7c:51:b9:5c:de:bc:0e:32:40:74:88:fa:80: 8b:26:cc:a5:d4:a4:1a:bf:65:c6:18:47:7b:0e:a1: 9d:ff:6c:20:c6:8a:75:10:b6:67:96:90:37:8c:f6: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:47:76:33:A9:6F:C8:61:D4:90:67:EB:17:11:EF:BF:DE:4B:67 X509v3 Authority Key Identifier: keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:cb:23:53:0c:dc:d3:fb:51:6e:d8:02:53:57:cc:dc:ff:0d: 80:3e:1e:e5:44:72:4b:00:95:81:6c:72:a7:09:28:c2:a0:23: af:71:4a:32:6f:d2:1b:5a:5f:0e:23:01:55:9d:7a:0a:7f:8c: 2e:69:66:b3:06:42:98:56:05:34:40:ac:98:74:27:8c:e8:40: 54:56:0d:bc:fa:3e:3b:e7:1c:64:aa:f8:9d:27:c9:0d:b5:de: 3b:00:47:e0:ab:53:1f:3a:d2:0f:b4:17:ba:35:c5:a7:3b:4e: dc:1d:ca:1c:8a:d9:81:65:55:cd:70:13:02:87:85:08:23:75: 29:40:9c:9f:14:38:cf:b0:16:c4:6b:f4:68:2d:ce:a7:ae:62: 60:db:50:a2:36:46:39:d4:26:12:b2:fb:04:23:cf:f3:e0:4f: d6:2b:55:d9:1a:c4:d0:8d:1d:9e:be:86:a2:3b:a0:89:c7:7b: 7c:e9:ce:27:9b:ce:2e:63:09:47:06:85:a3:a9:99:0b:1c:f8: 16:b4:a9:03:62:d7:85:d6:97:99:9c:80:15:28:36:15:1f:b2: ee:b5:5b:88:8d:9b:cf:c9:d8:ad:cf:b8:17:aa:0b:42:d2:5b: 6a:03:68:4f:88:24:28:93:52:b8:66:ab:18:5c:b6:6f:7d:fd: 3c:8c:fe:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5 ODEyRTZGNjUwHhcNMjUwNDI1MDIzNzAwWhcNMjUwNTAyMDIzNzAwWjAYMRYwFAYD VQQDEw02ODBhZjU0Yy1kMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nMcEF8yW8EIjw8Vie+DySzE5ZzeFNi93n455myCr9qtr9KIyw39t8wciPIg qpgsY56bNjtmulUj8v5m8cDG3LQJGuOwRrTmY5nHpCbBu8uQkfKgB3mKTQLwa1hE TK6s/ZvydltODh68mffvzjNCjV5L1skD2cjuIwxfyMxN2qqOBpPUFuo9gKwxgfqL cvSekpIeovnS/Du9xIP8tOnWT6CBKTNj78obCmIFh+ekh/vhYpWnFU2QSwbGLzaz JQ7FFSdtCIpYryY/H2JsNIo14PNA2nxRuVzevA4yQHSI+oCLJsyl1KQav2XGGEd7 DqGd/2wgxop1ELZnlpA3jPaQbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiHR3Yz qW/IYdSQZ+sXEe+/3ktnMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x S29ObWRmb1BQektZRXViMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIyyNTDNzT+1Fu2AJTV8zc/w2APh7lRHJLAJWBbHKnCSjCoCOvcUoy b9IbWl8OIwFVnXoKf4wuaWazBkKYVgU0QKyYdCeM6EBUVg28+j475xxkqvidJ8kN td47AEfgq1MfOtIPtBe6NcWnO07cHcocitmBZVXNcBMCh4UII3UpQJyfFDjPsBbE a/RoLc6nrmJg21CiNkY51CYSsvsEI8/z4E/WK1XZGsTQjR2evoaiO6CJx3t86c4n m84uYwlHBoWjqZkLHPgWtKkDYteF1peZnIAVKDYVH7LutVuIjZvPyditz7gXqgtC 0ltqA2hPiCQok1K4ZqsYXLZvff08jP7Y -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:37 2025 by rpki-client