$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: 0mpqKNcbB1AebFjBomu6QWQYFbgiD66KoPe4L+sNtnM= Subject key identifier: E8:18:51:37:18:47:E4:67:24:67:DD:4D:79:F3:02:B0:8D:C5:B9:F7 Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: 0C Signing time: Fri 25 Apr 2025 07:06:10 +0000 Manifest this update: Fri 25 Apr 2025 07:06:10 +0000 Manifest next update: Fri 02 May 2025 07:06:10 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: FKmmP0OwzKRBvzhmo47vTPAVr8NwmnYV1VmBLXyibis=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: nWJb2TOdNfidjE1SHRuynXCmHmrpn3hOAOJLdCekIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: Apr 25 07:06:10 2025 GMT Not After : May 2 07:06:10 2025 GMT Subject: CN=680b3462-3d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:21:fc:f2:b5:cf:e2:d1:75:71:aa:c2:9d: fd:45:96:28:a2:d8:9b:f1:8c:2c:1c:ea:97:6c:36: 55:19:f0:7c:89:66:9d:10:85:dc:49:9a:16:04:07: ce:f0:03:1b:a4:17:f5:f3:c7:70:fe:1e:15:13:78: 43:ab:f6:cd:f1:b5:9a:08:72:43:f3:30:db:95:23: 21:12:bc:f3:93:38:a9:08:df:e0:de:70:b0:b0:bb: f4:19:cc:5c:04:e0:7a:f1:03:fe:e4:c8:a9:cd:aa: c1:d1:d5:8c:d6:4c:19:b0:8c:45:79:02:5e:7b:9a: 8d:46:bd:76:b0:d9:8f:ea:e2:e7:7a:c0:90:53:b8: 0e:2c:83:49:b0:32:51:e3:c9:58:e6:ea:ba:56:b9: 09:fe:70:dd:6f:83:fa:53:82:63:bb:4a:75:bd:f8: e8:d3:66:a2:d8:70:39:a8:52:13:8f:90:59:aa:cb: f6:6c:49:0d:43:88:ad:35:c0:45:c0:36:37:5c:cb: 43:9d:9d:2a:96:e1:e6:10:c0:a7:25:af:9e:a5:f8: ea:70:99:79:06:db:84:91:53:eb:df:50:85:64:83: 8b:9f:a3:bc:89:69:93:c1:f4:56:c3:84:3a:35:0e: cf:32:76:65:b8:36:14:e0:cd:14:53:3e:9e:e5:8c: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:18:51:37:18:47:E4:67:24:67:DD:4D:79:F3:02:B0:8D:C5:B9:F7 X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bd:7d:c5:0d:6d:35:38:9a:b7:33:97:2a:1e:7c:aa:a0:28: a9:bc:30:01:74:a1:6d:19:dd:f9:37:f9:ff:3d:20:27:ce:f3: 1a:e3:27:6d:58:b9:99:45:3b:86:ff:46:24:6d:9f:15:73:c5: f8:c9:64:db:b7:01:0c:15:ee:2b:d2:4b:22:bb:1c:92:15:76: fa:70:67:00:37:db:3a:0a:92:2e:12:fb:bf:12:36:0b:13:6c: ea:65:17:e1:5e:f5:b8:fe:58:69:68:03:f2:eb:13:f8:2d:bd: 11:a4:13:c8:07:0a:b8:cb:f8:de:68:e2:6b:bf:1a:ee:aa:a8: 1e:47:37:1d:4d:15:8f:d4:1b:f6:8e:89:3c:cc:7c:66:d2:ad: 57:47:92:e6:05:b3:b7:36:ae:cd:19:cc:37:a0:d4:df:eb:42: 3e:01:e1:6c:bf:d1:a5:7b:86:5a:08:ca:f1:8b:5b:43:cd:2b: 29:66:3f:f5:1a:00:9f:f5:2e:ee:8a:2b:61:16:36:dd:a5:4a: e8:18:eb:a0:db:11:85:f8:de:dc:13:9d:b4:49:6a:1a:d4:e1: 32:d3:4e:44:73:3e:04:3b:c5:c3:68:f0:c5:8d:56:0f:e6:08: b6:8d:ff:48:ea:d0:dd:94:84:3f:a5:28:d3:da:f2:9c:fd:85: c7:de:83:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0MwODExMC8GA1UEBRMoMzIxRUVGQjgwODUxRkY4MkZFQjdDQjZDMDhBOTRGNURE MkQ5MjcwRDAeFw0yNTA0MjUwNzA2MTBaFw0yNTA1MDIwNzA2MTBaMBgxFjAUBgNV BAMTDTY4MGIzNDYyLTNkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYLiH88rXP4tF1carCnf1Fliii2JvxjCwc6pdsNlUZ8HyJZp0QhdxJmhYEB87w AxukF/Xzx3D+HhUTeEOr9s3xtZoIckPzMNuVIyESvPOTOKkI3+DecLCwu/QZzFwE 4HrxA/7kyKnNqsHR1YzWTBmwjEV5Al57mo1GvXaw2Y/q4ud6wJBTuA4sg0mwMlHj yVjm6rpWuQn+cN1vg/pTgmO7SnW9+OjTZqLYcDmoUhOPkFmqy/ZsSQ1DiK01wEXA Njdcy0OdnSqW4eYQwKclr56l+OpwmXkG24SRU+vfUIVkg4ufo7yJaZPB9FbDhDo1 Ds8ydmW4NhTgzRRTPp7ljBC7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6BhRNxhH 5GckZ91NefMCsI3FufcwHwYDVR0jBBgwFoAUMh7vuAhR/4L+t8tsCKlPXdLZJw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQzA4L0FGRkMwREU0MTE3 QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWg3dnVBaFJfNEwtdDh0c0NLbFBYZExaSncwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz QzA4L0FGRkMwREU0MTE3QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRM LXQ4dHNDS2xQWGRMWkp3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIy9fcUNbTU4mrczlyoefKqgKKm8MAF0oW0Z3fk3+f89ICfO8xrjJ21Y uZlFO4b/RiRtnxVzxfjJZNu3AQwV7ivSSyK7HJIVdvpwZwA32zoKki4S+78SNgsT bOplF+Fe9bj+WGloA/LrE/gtvRGkE8gHCrjL+N5o4mu/Gu6qqB5HNx1NFY/UG/aO iTzMfGbSrVdHkuYFs7c2rs0ZzDeg1N/rQj4B4Wy/0aV7hloIyvGLW0PNKylmP/Ua AJ/1Lu6KK2EWNt2lSugY66DbEYX43twTnbRJahrU4TLTTkRzPgQ7xcNo8MWNVg/m CLaN/0jq0N2UhD+lKNPa8pz9hcfeg5Q= -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:37 2025 by rpki-client