$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: PHfbBly0ir515KjPV+cEVrsl82Cs/zxrG+vXulPJHpY= Subject key identifier: 72:C2:7B:5C:91:40:32:49:74:7D:12:22:EA:C9:23:83:B0:FB:C2:55 Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0BF1 Signing time: Thu 24 Apr 2025 18:39:41 +0000 Manifest this update: Thu 24 Apr 2025 18:39:41 +0000 Manifest next update: Thu 01 May 2025 18:39:41 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: +3bIo0Ji7KMvW9iOhGey6W1AirGwUh2ci8X6zWnHqTY=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: OeGbR9lPmFx9F+KOx3DCweLM+ujmkz1n3pufF3R5HIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: Apr 24 18:39:41 2025 GMT Not After : May 1 18:39:41 2025 GMT Subject: CN=680a856d-dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:57:ae:49:0d:ab:be:0c:a9:12:68:6d:52: 06:fc:2f:53:f5:13:88:23:ca:dd:a8:3c:a6:20:98: 3d:89:db:09:47:fd:03:3f:de:70:34:ff:a2:68:36: 29:1a:00:1f:ed:97:c2:25:0b:af:e0:04:cc:64:94: 49:8d:16:83:af:ac:c4:78:64:d7:e9:ca:56:32:0b: df:67:52:65:14:32:e8:22:ef:93:e4:d4:0c:10:f6: 85:a8:07:f9:30:0f:1a:66:5b:20:f6:7d:eb:4d:b0: 43:1e:97:cf:df:36:46:fa:64:e0:3b:3d:a2:87:bb: 4a:56:aa:a0:02:3c:34:30:a2:91:71:0c:a6:e7:e5: be:fe:38:df:40:db:1c:c9:f8:3c:05:d3:38:86:0d: 85:a8:51:2a:a2:a4:02:1d:83:a8:a3:f7:04:81:d3: 08:2a:28:82:8e:e8:8b:1c:85:c6:80:08:0c:a4:2f: 84:4d:6a:5d:88:9c:1f:af:a4:de:4a:29:6d:54:23: f2:a5:19:09:6b:1b:7e:e7:82:e6:12:5b:67:2d:de: a6:e4:a6:5d:e6:30:ac:86:38:6e:8e:dc:d7:aa:6f: 6a:c2:68:a1:df:64:41:d5:0a:0f:bf:da:0a:47:b7: 09:64:0c:11:eb:6b:c6:5b:83:61:3c:df:f9:35:07: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C2:7B:5C:91:40:32:49:74:7D:12:22:EA:C9:23:83:B0:FB:C2:55 X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:ac:b9:05:6c:c6:5c:37:de:91:91:9e:33:3f:e6:98:b2: f5:a3:da:ca:cb:06:fd:59:cd:24:e5:b2:21:fb:e1:cd:2f:9f: cb:81:61:be:4b:bc:23:76:e9:d5:3f:71:0e:ad:33:5a:3a:c4: cb:f5:4c:a1:4e:18:5b:cc:73:34:15:46:07:86:5b:cb:75:40: 36:5e:4b:ac:c8:67:67:47:b0:90:96:ca:62:fa:bc:fb:af:9b: 13:fd:b6:c6:c0:1b:a8:78:a9:20:c5:e0:76:87:16:aa:2c:64: cc:a2:25:ec:5b:32:7f:ad:79:a9:3c:11:e4:22:c4:e6:4e:52: cb:c0:73:aa:11:7d:5a:fb:35:e2:29:42:7e:cc:9f:25:19:01: df:e2:fb:12:d6:c3:41:7f:12:bf:b0:3e:44:ba:82:b5:23:39: 64:fa:e8:43:be:d0:77:70:23:55:06:6a:d3:a1:c0:a4:ac:21: c0:e1:c3:d7:70:ac:a4:5e:d4:c8:29:0d:fa:65:76:33:5b:ef: bd:5e:58:0a:6b:f2:2e:e6:7d:c6:c9:72:b7:23:ec:58:c7:f8: 2b:77:ef:84:41:5f:b5:4b:79:70:dd:d0:cd:dd:d4:6c:a2:dd: 1f:0c:ff:32:57:60:7d:62:46:4f:d0:97:9d:cb:eb:c1:a7:90: 8c:e1:79:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjUwNDI0MTgzOTQxWhcNMjUwNTAxMTgzOTQxWjAYMRYwFAYD VQQDEw02ODBhODU2ZC1kYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtstXrkkNq74MqRJobVIG/C9T9ROII8rdqDymIJg9idsJR/0DP95wNP+iaDYp GgAf7ZfCJQuv4ATMZJRJjRaDr6zEeGTX6cpWMgvfZ1JlFDLoIu+T5NQMEPaFqAf5 MA8aZlsg9n3rTbBDHpfP3zZG+mTgOz2ih7tKVqqgAjw0MKKRcQym5+W+/jjfQNsc yfg8BdM4hg2FqFEqoqQCHYOoo/cEgdMIKiiCjuiLHIXGgAgMpC+ETWpdiJwfr6Te SiltVCPypRkJaxt+54LmEltnLd6m5KZd5jCshjhujtzXqm9qwmih32RB1QoPv9oK R7cJZAwR62vGW4NhPN/5NQdy7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLCe1yR QDJJdH0SIurJI4Ow+8JVMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBywKy5BWzGXDfekZGeMz/mmLL1o9rKywb9Wc0k5bIh++HNL5/LgWG+ S7wjdunVP3EOrTNaOsTL9UyhThhbzHM0FUYHhlvLdUA2XkusyGdnR7CQlspi+rz7 r5sT/bbGwBuoeKkgxeB2hxaqLGTMoiXsWzJ/rXmpPBHkIsTmTlLLwHOqEX1a+zXi KUJ+zJ8lGQHf4vsS1sNBfxK/sD5EuoK1Izlk+uhDvtB3cCNVBmrTocCkrCHA4cPX cKykXtTIKQ36ZXYzW++9XlgKa/Iu5n3GyXK3I+xYx/grd++EQV+1S3lw3dDN3dRs ot0fDP8yV2B9YkZP0Jedy+vBp5CM4Xnp -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:46 2025 by rpki-client