$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json) Hash identifier: XzU5vhYxJ1Y0N8MaRZLRRQ6MgluUluPgUsVMU0vVZIg= Subject key identifier: 33:13:89:EE:F4:AF:ED:D8:59:CE:97:0E:D8:CA:DD:E6:DC:F7:81:88 Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft Manifest number: 04C3 Signing time: Thu 24 Apr 2025 23:37:25 +0000 Manifest this update: Thu 24 Apr 2025 23:37:24 +0000 Manifest next update: Thu 01 May 2025 23:37:24 +0000 Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: GsOi37MH1X7ZYzwBlcgWP1aeB+CbBvZKeTTK0HERLQs=) 2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: F++NgZIbVXAu/P1iRFKH5as6NLrkIgPyr3KhQBuiQaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: Apr 24 23:37:24 2025 GMT Not After : May 1 23:37:24 2025 GMT Subject: CN=680acb35-43e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:c4:05:fd:72:3f:fe:30:ab:e0:b2:a6:cd: 88:17:25:a2:05:4d:3d:9a:23:42:f6:fa:78:c6:73: ed:f8:99:67:f6:d8:67:d5:78:af:6f:28:80:9a:88: 0f:c4:79:3a:b7:d8:a1:6d:2f:14:28:74:28:40:0b: 45:d7:9e:db:fe:19:7f:ec:1e:df:e2:6f:df:da:bd: 7c:4a:5b:db:e1:8e:c9:dd:cb:78:42:71:55:26:ad: b9:97:6f:df:2b:16:81:c1:40:45:5f:4e:68:ac:fa: c9:6d:fc:2f:83:c1:78:63:b5:06:31:f7:a7:1a:99: 72:ad:1b:c6:94:64:e1:f3:ec:aa:29:34:70:15:1c: 89:ce:df:b6:2c:42:58:5c:3c:f4:53:fe:1f:5a:d7: e1:44:6e:14:4b:b0:dd:a4:ed:16:37:e3:ce:60:98: 31:b6:99:9b:10:cf:b8:9b:8c:8f:8d:4b:14:ce:e3: bd:4e:81:ac:61:20:87:0f:55:58:52:df:1f:7c:45: 9a:94:6f:09:25:68:d3:be:c1:b9:d0:9b:be:c8:55: 2c:93:20:98:b1:dc:5a:54:e8:d2:9e:af:86:b1:c7: 69:a6:7e:68:b1:7b:f2:ce:77:ca:95:72:81:19:a4: a7:60:a7:ac:65:ee:ee:5a:ba:c4:98:d4:21:85:a4: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:13:89:EE:F4:AF:ED:D8:59:CE:97:0E:D8:CA:DD:E6:DC:F7:81:88 X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c1:33:a7:25:85:e5:ff:74:21:82:4a:ac:2a:d0:f1:32:7b: 97:dd:39:4d:04:55:a7:58:79:79:74:88:63:97:95:5c:4a:c9: a2:eb:a5:e2:49:9f:eb:cf:f4:d6:dc:a7:57:bc:fc:4c:d4:bd: 7e:0a:e4:83:3f:98:39:c1:79:61:09:a7:fe:66:21:f8:de:1f: e3:b5:2f:25:77:40:ca:67:d4:27:19:6d:fb:67:36:45:ca:7b: 2b:96:ba:5a:61:92:d4:80:e4:f3:f2:fd:01:60:bb:20:0d:ef: 2a:a6:d2:cc:60:30:af:e5:8b:5d:29:09:85:d9:e2:47:94:ee: 8f:1c:d6:8d:e4:c8:c0:7e:70:f8:03:dc:fe:04:7a:96:a0:93: 01:1d:ed:85:c5:0b:c0:c1:33:ec:3f:29:d9:75:3b:21:31:08: 7a:eb:ef:17:3f:dc:2f:ae:71:71:02:b7:0d:ff:de:48:f9:05: 50:07:c8:36:c9:66:d2:46:55:63:ff:ee:08:89:7d:b9:36:cf: ab:26:27:b9:46:ee:5e:7d:f3:a0:95:32:ae:32:e5:d6:17:cb: 43:15:99:14:2b:9e:53:25:f1:74:eb:98:6d:c4:7d:44:1d:02: cf:c7:61:62:36:17:a1:82:e5:58:20:0d:72:b8:93:d5:9d:ba: e1:b7:9b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjUwNDI0MjMzNzI0WhcNMjUwNTAxMjMzNzI0WjAYMRYwFAYD VQQDEw02ODBhY2IzNS00M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+7EBf1yP/4wq+Cyps2IFyWiBU09miNC9vp4xnPt+Jln9thn1XivbyiAmogP xHk6t9ihbS8UKHQoQAtF157b/hl/7B7f4m/f2r18Slvb4Y7J3ct4QnFVJq25l2/f KxaBwUBFX05orPrJbfwvg8F4Y7UGMfenGplyrRvGlGTh8+yqKTRwFRyJzt+2LEJY XDz0U/4fWtfhRG4US7DdpO0WN+POYJgxtpmbEM+4m4yPjUsUzuO9ToGsYSCHD1VY Ut8ffEWalG8JJWjTvsG50Ju+yFUskyCYsdxaVOjSnq+Gscdppn5osXvyznfKlXKB GaSnYKesZe7uWrrEmNQhhaTxyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMTie70 r+3YWc6XDtjK3ebc94GIMB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt NnVzYjkwQjJsTnRPM2ExVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOwTOnJYXl/3QhgkqsKtDxMnuX3TlNBFWnWHl5dIhjl5VcSsmi66Xi SZ/rz/TW3KdXvPxM1L1+CuSDP5g5wXlhCaf+ZiH43h/jtS8ld0DKZ9QnGW37ZzZF ynsrlrpaYZLUgOTz8v0BYLsgDe8qptLMYDCv5YtdKQmF2eJHlO6PHNaN5MjAfnD4 A9z+BHqWoJMBHe2FxQvAwTPsPynZdTshMQh66+8XP9wvrnFxArcN/95I+QVQB8g2 yWbSRlVj/+4IiX25Ns+rJie5Ru5effOglTKuMuXWF8tDFZkUK55TJfF065htxH1E HQLPx2FiNhehguVYIA1yuJPVnbrht5s+ -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:19 2025 by rpki-client