$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: M9J+MWKMzPyuvRJAeGqMxfyyksV/WlW3SBpLC1tk+8c= Subject key identifier: A8:86:22:6F:D7:32:F6:C4:39:12:16:EB:9C:9C:0B:E0:AE:1E:66:31 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 047E Signing time: Thu 24 Apr 2025 23:51:15 +0000 Manifest this update: Thu 24 Apr 2025 23:51:14 +0000 Manifest next update: Thu 01 May 2025 23:51:14 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 6/RsYSI5NRS4nMcKtYYX+IpZUVN2vxz2Mvi3nWjRdNM=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Apr 24 23:51:14 2025 GMT Not After : May 1 23:51:14 2025 GMT Subject: CN=680ace72-ef90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:80:9e:bf:b4:7b:eb:3a:1e:3b:c2:8d:33: 75:ba:c9:18:6e:b7:16:86:22:89:3b:28:94:4c:93: 2c:f0:2f:7d:22:35:5c:1d:26:9e:1d:ec:f1:c8:4d: 0e:ff:5b:d3:d6:0c:43:5a:07:76:49:a6:39:c2:f6: 63:52:6d:75:1e:fe:72:a3:db:3d:65:c1:86:9a:d9: a2:1a:82:23:16:83:61:b8:91:67:fe:2b:d0:64:81: 08:48:49:3f:c6:0a:e4:a1:ea:1f:d2:a8:6d:54:0b: 90:6e:09:fb:11:42:7d:5a:92:0d:69:30:2c:3a:1b: 71:96:71:c9:77:e0:e8:df:57:78:e2:01:bb:60:eb: 55:43:62:0e:1e:54:9d:a1:90:27:6f:cf:11:f1:73: d2:62:25:ae:fc:b2:b8:0a:96:7b:04:8b:7a:89:88: 5b:5b:b8:13:0f:ef:1d:06:35:ef:e2:45:d8:cb:17: 7f:07:f0:14:74:77:a9:a5:94:5d:f4:74:c7:31:95: 64:5c:00:6e:69:6f:ff:9f:24:fe:6c:bd:a2:18:93: d1:f3:74:28:cb:30:f4:fc:49:87:25:24:e0:bb:a3: f7:75:49:04:10:d5:34:50:37:ee:04:54:d1:82:bc: be:7f:ee:68:12:fc:52:98:54:48:97:54:f6:d1:9f: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:86:22:6F:D7:32:F6:C4:39:12:16:EB:9C:9C:0B:E0:AE:1E:66:31 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:9e:eb:bf:b9:45:25:02:b0:c3:89:95:63:64:ac:f3:c4:bc: ad:1f:8f:d9:5d:56:40:83:92:58:31:ad:75:e8:b7:c0:a1:e5: a0:ca:86:22:ae:2f:b3:3c:0a:81:71:0b:7c:4f:d3:2b:f2:e3: d3:10:c2:49:ce:e9:42:25:36:62:e2:2c:8e:59:b4:7e:72:f4: 0e:37:c9:ae:25:f9:c4:d4:c9:71:ca:31:b2:24:9e:34:32:2d: cf:a6:02:a6:eb:0b:dd:0e:54:71:2a:05:29:17:03:cd:dd:5c: 72:2d:f3:b5:41:07:28:08:25:a7:7f:ca:da:56:40:b5:88:4f: 36:40:98:b7:17:64:be:e8:1e:b3:d1:77:cb:1c:fe:5c:0a:c7: 2b:17:00:18:93:31:b5:42:db:60:1a:8a:17:27:7e:f0:0e:f9: 25:85:68:35:19:10:c3:31:40:5b:f8:84:24:bd:6d:09:ba:3e: 99:f0:ac:1f:68:7f:1c:43:fd:85:0f:0f:cd:f6:2d:eb:9d:67: 51:53:f1:b6:56:28:10:90:ec:7f:45:ec:0e:84:ea:67:ae:4c: a9:31:69:e8:5d:42:9c:40:9b:f7:24:ea:4d:5e:c2:ea:9b:b1: 04:7e:30:d8:f9:2f:ef:dd:db:de:00:85:7b:36:89:b7:62:73: c9:76:3e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNDI0MjM1MTE0WhcNMjUwNTAxMjM1MTE0WjAYMRYwFAYD VQQDEw02ODBhY2U3Mi1lZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m2Anr+0e+s6HjvCjTN1uskYbrcWhiKJOyiUTJMs8C99IjVcHSaeHezxyE0O /1vT1gxDWgd2SaY5wvZjUm11Hv5yo9s9ZcGGmtmiGoIjFoNhuJFn/ivQZIEISEk/ xgrkoeof0qhtVAuQbgn7EUJ9WpINaTAsOhtxlnHJd+Do31d44gG7YOtVQ2IOHlSd oZAnb88R8XPSYiWu/LK4CpZ7BIt6iYhbW7gTD+8dBjXv4kXYyxd/B/AUdHeppZRd 9HTHMZVkXABuaW//nyT+bL2iGJPR83QoyzD0/EmHJSTgu6P3dUkEENU0UDfuBFTR gry+f+5oEvxSmFRIl1T20Z+j/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiGIm/X MvbEORIW65ycC+CuHmYxMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQnuu/uUUlArDDiZVjZKzzxLytH4/ZXVZAg5JYMa116LfAoeWgyoYi ri+zPAqBcQt8T9Mr8uPTEMJJzulCJTZi4iyOWbR+cvQON8muJfnE1MlxyjGyJJ40 Mi3PpgKm6wvdDlRxKgUpFwPN3VxyLfO1QQcoCCWnf8raVkC1iE82QJi3F2S+6B6z 0XfLHP5cCscrFwAYkzG1QttgGooXJ37wDvklhWg1GRDDMUBb+IQkvW0Juj6Z8Kwf aH8cQ/2FDw/N9i3rnWdRU/G2VigQkOx/RewOhOpnrkypMWnoXUKcQJv3JOpNXsLq m7EEfjDY+S/v3dveAIV7Nom3YnPJdj5M -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:21 2025 by rpki-client