$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: iG5FrvuwbJZuWdSd5c0zLfCxh9htnAkbMcES5TzHwBA= Subject key identifier: AF:46:88:DB:49:35:17:57:2C:62:01:67:83:65:42:D4:25:FE:9E:91 Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: 9C Signing time: Fri 25 Apr 2025 05:17:22 +0000 Manifest this update: Fri 25 Apr 2025 05:17:21 +0000 Manifest next update: Fri 02 May 2025 05:17:21 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: VlIbapuA4uCD2cvWfD5NUpl/h7ooNuuLwQ2QvawfKa8=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Apr 25 05:17:21 2025 GMT Not After : May 2 05:17:21 2025 GMT Subject: CN=680b1ae2-24ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:a0:9a:24:8d:e6:24:54:1c:7b:7e:6b:a2: 0b:a0:0e:9d:03:6c:17:9b:ad:b1:b4:89:57:27:ee: af:90:38:4c:ef:1b:24:f6:87:42:59:b7:13:0d:f4: b9:3d:63:a4:05:6b:d7:24:96:62:a1:a2:ce:dc:93: 17:e8:b3:c1:68:e0:05:e0:c4:f3:66:d8:9a:b3:97: b5:81:f9:7f:f5:8b:ec:97:d0:48:7b:d0:03:32:ea: 51:39:25:19:65:ba:66:a3:f0:9d:85:71:a3:55:cb: 04:0c:4b:d2:80:a8:05:fc:69:f3:33:a8:b5:46:ec: ab:03:06:f6:13:45:d9:af:f2:22:42:4e:4e:59:8f: 07:ea:16:7d:94:3d:a8:d9:c4:30:c7:8f:f6:9e:a0: ea:f3:18:fe:f5:94:f3:4e:a1:33:0e:3d:21:d5:6b: 15:a2:81:25:68:f3:9e:fd:66:ea:0f:9a:2d:cc:ee: 8f:00:11:49:bf:ff:c6:49:d5:cb:21:29:8f:20:9e: 70:91:70:2e:e5:3a:e7:35:da:50:ce:67:eb:41:27: a6:ba:6b:d3:da:e3:cb:9f:79:c9:f9:c5:86:9d:9a: 89:83:8d:98:b5:94:b1:db:3f:d6:29:a1:25:3e:1e: dd:2a:76:5d:a5:d8:66:60:de:fb:08:b1:72:3c:3c: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:88:DB:49:35:17:57:2C:62:01:67:83:65:42:D4:25:FE:9E:91 X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0e:40:5c:d8:f6:95:a7:82:cb:fe:e2:6e:01:72:c0:70:5d: 3e:02:fe:ef:c3:3a:d4:71:7f:74:40:c1:e7:eb:24:27:5c:97: 94:a0:c7:3b:42:a2:24:35:38:8b:aa:17:3e:7c:1a:90:7f:11: 3a:ac:0c:e8:57:3b:ab:ef:a1:e5:3b:7a:27:64:1a:b4:85:62: 70:b1:90:23:5a:f2:77:6f:0c:29:db:cc:05:a5:22:18:05:2f: 5c:f2:ca:64:ac:0f:be:9a:16:3c:33:33:e0:7c:1a:2e:31:62: ec:79:cd:26:bb:fa:04:e7:37:cd:ec:55:fe:33:67:58:c4:be: 61:f1:83:cb:00:a9:19:d4:13:5c:8b:d5:7f:69:0c:30:be:ee: eb:25:f7:70:af:ce:0f:d5:ba:e3:7e:e7:8c:10:33:fb:68:34: 0e:d8:76:64:8f:49:98:fd:e7:cd:d8:38:dc:23:2c:35:84:fc: 33:75:92:d3:18:f8:35:80:9c:7c:68:b1:4e:f6:55:d5:b4:3b: 00:2f:f8:81:6e:2c:e4:75:e8:00:11:22:6d:1e:55:f5:8e:66: b8:78:d3:5f:0d:50:9c:ff:32:cf:3b:f7:2b:f6:2c:42:46:fe: 12:48:98:d1:f1:59:aa:5b:2b:15:06:7e:b2:b2:fb:5c:ed:46: 2c:4b:d5:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUwNDI1MDUxNzIxWhcNMjUwNTAyMDUxNzIxWjAYMRYwFAYD VQQDEw02ODBiMWFlMi0yNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre+gmiSN5iRUHHt+a6ILoA6dA2wXm62xtIlXJ+6vkDhM7xsk9odCWbcTDfS5 PWOkBWvXJJZioaLO3JMX6LPBaOAF4MTzZtias5e1gfl/9Yvsl9BIe9ADMupROSUZ Zbpmo/CdhXGjVcsEDEvSgKgF/GnzM6i1RuyrAwb2E0XZr/IiQk5OWY8H6hZ9lD2o 2cQwx4/2nqDq8xj+9ZTzTqEzDj0h1WsVooElaPOe/WbqD5otzO6PABFJv//GSdXL ISmPIJ5wkXAu5TrnNdpQzmfrQSemumvT2uPLn3nJ+cWGnZqJg42YtZSx2z/WKaEl Ph7dKnZdpdhmYN77CLFyPDyQtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9GiNtJ NRdXLGIBZ4NlQtQl/p6RMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbDkBc2PaVp4LL/uJuAXLAcF0+Av7vwzrUcX90QMHn6yQnXJeUoMc7 QqIkNTiLqhc+fBqQfxE6rAzoVzur76HlO3onZBq0hWJwsZAjWvJ3bwwp28wFpSIY BS9c8spkrA++mhY8MzPgfBouMWLsec0mu/oE5zfN7FX+M2dYxL5h8YPLAKkZ1BNc i9V/aQwwvu7rJfdwr84P1brjfueMEDP7aDQO2HZkj0mY/efN2DjcIyw1hPwzdZLT GPg1gJx8aLFO9lXVtDsAL/iBbizkdegAESJtHlX1jma4eNNfDVCc/zLPO/cr9ixC Rv4SSJjR8VmqWysVBn6ysvtc7UYsS9WB -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:49 2025 by rpki-client