$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: xrbgK2/T7SxKWoDdXzw12KP2ZBRgQfb2Ar7tDe1mLV0= Subject key identifier: 55:05:5A:0E:A9:E0:C5:D5:4F:2F:13:F3:13:11:E6:F1:17:51:CC:8E Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0DEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0DE2 Signing time: Thu 24 Apr 2025 17:50:53 +0000 Manifest this update: Thu 24 Apr 2025 17:50:52 +0000 Manifest next update: Thu 01 May 2025 17:50:52 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: TaZzv9BGLq2S7PrI5qsI36q2Ka5RsJOCzODJxL1WfOI=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: mx4Am+cBFSXiPddaACrFcI512PsDACEUWWDSLjunmeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: Apr 24 17:50:52 2025 GMT Not After : May 1 17:50:52 2025 GMT Subject: CN=680a79fc-ed65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:01:59:96:83:1d:bf:2f:39:3e:fc:e5:e3: cf:5f:7e:3a:24:ba:18:3f:dd:cf:ee:1f:19:cd:98: 71:d4:a7:aa:cc:38:20:c7:27:ce:1e:be:31:b6:81: 08:19:8b:c0:04:11:0f:e2:98:46:40:04:0a:a2:c6: 2f:f7:01:42:b0:46:ee:86:51:b2:16:8e:5c:c0:02: 8a:e0:d4:50:c4:04:63:85:a5:b5:fc:43:f7:39:ac: 39:d4:b2:a7:31:bf:4b:67:9a:38:ee:a7:5d:09:d6: 9b:e6:c3:9a:fe:2b:8c:17:81:1a:e8:aa:17:13:0d: 3f:90:6d:10:68:4d:fb:3a:d3:93:dd:a4:ba:f8:5a: 14:ea:06:09:bd:ba:c0:57:42:4d:7e:17:e0:3b:6e: fa:f6:f1:61:dc:69:6e:94:89:53:20:0d:43:fb:8f: 03:58:19:08:c8:e5:89:20:18:2e:dc:fc:86:49:c7: 3b:c6:4c:25:a3:eb:16:5f:14:f2:02:b9:c7:f8:01: 0b:71:34:1e:33:11:02:67:67:6e:6b:7c:64:ea:00: 95:7e:58:8e:12:27:31:75:4f:9d:ef:8a:94:65:be: 5a:c8:71:32:09:ea:89:7d:d4:2a:25:5e:22:5f:03: 6b:ab:c2:32:5f:1c:1a:5c:99:9c:0e:2b:28:22:27: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:05:5A:0E:A9:E0:C5:D5:4F:2F:13:F3:13:11:E6:F1:17:51:CC:8E X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:4f:4c:31:af:40:f9:7d:b0:84:59:75:a5:ab:64:83:0c:4e: 83:85:7c:f2:25:80:d2:c9:cb:be:96:7a:d6:90:10:44:37:14: b1:19:9a:6a:d7:94:6a:2f:2c:e3:18:c9:2f:64:04:9a:ae:28: d6:b3:4e:a9:12:04:ea:02:22:77:3e:77:1f:73:66:5a:8d:1c: 56:84:77:51:1e:4b:ab:01:0e:74:88:50:d4:16:57:b0:ac:52: e0:85:c0:d3:b3:d7:93:e5:3a:66:80:24:ac:90:b3:99:87:07: 37:59:5a:ab:db:90:ed:18:4a:bb:83:3e:b4:de:93:c5:4e:d8: 3e:cc:fa:c7:c5:62:1b:b2:95:3b:29:c5:7e:d9:a7:4b:e8:7c: 3f:db:65:02:30:c4:b2:ab:9e:4e:33:ac:2b:8e:a5:96:2d:4c: c1:54:b9:dd:d3:d0:d3:51:ef:31:23:bd:90:e3:1a:17:2c:a6: 23:72:9a:bc:1b:c8:db:de:f6:f6:a4:e1:fe:f0:60:c9:6c:42: 6f:00:de:ec:eb:60:63:ce:f8:e0:6a:da:05:58:9f:30:4d:f0: f3:60:26:d5:ef:f5:ef:f4:d5:41:a9:8a:f1:3f:7b:e2:7a:3a: 97:f6:13:5a:d2:b6:36:1f:8c:31:5d:5f:b8:bb:79:71:1d:c8: 36:f4:85:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjUwNDI0MTc1MDUyWhcNMjUwNTAxMTc1MDUyWjAYMRYwFAYD VQQDEw02ODBhNzlmYy1lZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBkBWZaDHb8vOT785ePPX346JLoYP93P7h8ZzZhx1KeqzDggxyfOHr4xtoEI GYvABBEP4phGQAQKosYv9wFCsEbuhlGyFo5cwAKK4NRQxARjhaW1/EP3Oaw51LKn Mb9LZ5o47qddCdab5sOa/iuMF4Ea6KoXEw0/kG0QaE37OtOT3aS6+FoU6gYJvbrA V0JNfhfgO2769vFh3GlulIlTIA1D+48DWBkIyOWJIBgu3PyGScc7xkwlo+sWXxTy ArnH+AELcTQeMxECZ2dua3xk6gCVfliOEicxdU+d74qUZb5ayHEyCeqJfdQqJV4i XwNrq8IyXxwaXJmcDisoIidVBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUFWg6p 4MXVTy8T8xMR5vEXUcyOMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/T0wxr0D5fbCEWXWlq2SDDE6DhXzyJYDSycu+lnrWkBBENxSxGZpq 15RqLyzjGMkvZASarijWs06pEgTqAiJ3Pncfc2ZajRxWhHdRHkurAQ50iFDUFlew rFLghcDTs9eT5TpmgCSskLOZhwc3WVqr25DtGEq7gz603pPFTtg+zPrHxWIbspU7 KcV+2adL6Hw/22UCMMSyq55OM6wrjqWWLUzBVLnd09DTUe8xI72Q4xoXLKYjcpq8 G8jb3vb2pOH+8GDJbEJvAN7s62BjzvjgatoFWJ8wTfDzYCbV7/Xv9NVBqYrxP3vi ejqX9hNa0rY2H4wxXV+4u3lxHcg29IX6 -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:13 2025 by rpki-client