$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft File: Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json) Hash identifier: oQSUv+cxXyzeFAQmX/ffYY5IS5O7GxAou4lVd1omv9Y= Subject key identifier: 06:4D:ED:36:11:0F:61:74:D8:AF:CB:46:7C:6D:17:60:07:D7:CA:E9 Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8 Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft Manifest number: 1C Signing time: Fri 25 Apr 2025 07:01:10 +0000 Manifest this update: Fri 25 Apr 2025 07:01:09 +0000 Manifest next update: Fri 02 May 2025 07:01:09 +0000 Files and hashes: 1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: 71npQyoxZXevv6BDBhzq3yzLzlHaZ/x4FPtlHbrQL6w=) 2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=) 3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8 Validity Not Before: Apr 25 07:01:09 2025 GMT Not After : May 2 07:01:09 2025 GMT Subject: CN=680b3335-a317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:f6:ca:eb:c5:2c:c2:7f:94:a8:8b:90:0c: ea:e7:c1:bf:ba:9f:5c:40:2a:91:d0:4a:4f:53:1f: 45:b1:c3:b3:0c:28:df:2a:9a:ee:3f:5d:60:e3:c8: 8f:be:93:30:e5:28:3c:e2:4f:3e:bc:19:01:c0:39: 17:fe:27:25:18:0d:1b:2c:03:03:a6:38:d9:04:27: d4:7a:cb:21:6f:e9:0a:7d:13:cf:f9:5d:86:ab:92: 41:e3:6c:03:5c:1e:7d:66:6a:16:24:e4:c2:33:89: 86:27:c7:b7:6e:1c:42:86:8f:c1:21:c0:86:57:cb: 82:04:8a:c2:27:a0:a1:bb:1f:ea:36:62:1f:16:93: 53:57:0b:9b:37:e6:66:a7:76:ff:82:18:f8:4b:b9: 32:28:e7:13:4a:a2:46:7e:07:ca:e5:21:46:9f:89: 04:9e:ce:93:6a:e9:48:67:46:dd:cd:cd:db:fd:2b: 36:b2:e2:5e:8e:56:67:ae:20:2d:42:6a:59:f2:0d: 69:a4:65:85:22:14:d3:d7:81:58:39:ee:9f:f7:ce: ef:87:de:9c:41:a8:16:8b:2d:5d:47:0c:00:a7:78: e4:e0:46:54:e8:5f:ec:33:2a:52:c2:cb:14:22:38: 81:af:f8:93:25:50:4e:10:09:bb:33:23:ad:8e:1c: 23:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4D:ED:36:11:0F:61:74:D8:AF:CB:46:7C:6D:17:60:07:D7:CA:E9 X509v3 Authority Key Identifier: keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a1:e5:53:a2:0c:7e:11:5a:40:fa:b9:db:22:91:cc:62:c7: fd:b9:30:aa:53:b5:3f:3a:9f:02:77:3b:f9:b1:4e:3c:8e:de: 76:a5:06:68:c5:3b:16:87:07:db:85:e4:12:9f:33:ac:54:ce: 5e:b3:7b:0b:ea:d2:41:3c:c8:b8:da:bf:fa:38:37:a7:9c:da: f4:9f:f2:f8:0b:19:47:f1:ac:c9:d6:e7:32:e9:79:b1:eb:f4: 97:3a:e7:43:62:85:46:0c:5b:95:06:b5:d7:e8:c4:99:f8:85: a5:f6:af:f4:38:fa:69:6a:0b:a8:66:fc:46:4d:d3:f2:22:63: 02:34:f2:52:15:f9:9a:ca:9c:d2:52:f1:1f:d5:21:3c:4c:27: ab:7f:39:65:78:0b:f9:08:6e:ea:bb:64:8d:37:20:30:69:79: 09:c0:57:28:f7:e4:2c:55:8f:42:74:86:1b:0d:72:59:57:87: 5b:c3:b2:3c:8c:7c:5c:f8:cb:b6:d5:df:90:3f:aa:32:de:c2: c7:c4:c0:30:aa:9b:56:35:62:87:61:f0:d4:00:e1:3b:6e:d1: 4f:99:df:9b:27:05:08:71:a7:19:39:4c:7c:f1:76:00:40:02: 3e:7a:6f:92:50:2b:25:39:3a:79:4c:66:71:0a:35:33:3f:f0: 00:1d:e4:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0ZDOTExMC8GA1UEBRMoMDZCRDQ0MTU0NzlEMkM3NTA4MzdDNUM5NDMzNjEzQkIy NTg4QUVCODAeFw0yNTA0MjUwNzAxMDlaFw0yNTA1MDIwNzAxMDlaMBgxFjAUBgNV BAMTDTY4MGIzMzM1LWEzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfzfbK68Uswn+UqIuQDOrnwb+6n1xAKpHQSk9TH0Wxw7MMKN8qmu4/XWDjyI++ kzDlKDziTz68GQHAORf+JyUYDRssAwOmONkEJ9R6yyFv6Qp9E8/5XYarkkHjbANc Hn1mahYk5MIziYYnx7duHEKGj8EhwIZXy4IEisInoKG7H+o2Yh8Wk1NXC5s35man dv+CGPhLuTIo5xNKokZ+B8rlIUafiQSezpNq6UhnRt3Nzdv9Kzay4l6OVmeuIC1C alnyDWmkZYUiFNPXgVg57p/3zu+H3pxBqBaLLV1HDACneOTgRlToX+wzKlLCyxQi OIGv+JMlUE4QCbszI62OHCNLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBk3tNhEP YXTYr8tGfG0XYAfXyukwHwYDVR0jBBgwFoAUBr1EFUedLHUIN8XJQzYTuyWIrrgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3RkM5L0YzQ0JGNTUwMDc1 MTExRjA4MThBNTQzM0M0RjlBRTAyL0JyMUVGVWVkTEhVSU44WEpRellUdXlXSXJy Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQnIxRUZVZWRMSFVJTjhYSlF6WVR1eVdJcnJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 RkM5L0YzQ0JGNTUwMDc1MTExRjA4MThBNTQzM0M0RjlBRTAyL0JyMUVGVWVkTEhV SU44WEpRellUdXlXSXJyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACih5VOiDH4RWkD6udsikcxix/25MKpTtT86nwJ3O/mxTjyO3nalBmjF OxaHB9uF5BKfM6xUzl6zewvq0kE8yLjav/o4N6ec2vSf8vgLGUfxrMnW5zLpebHr 9Jc650NihUYMW5UGtdfoxJn4haX2r/Q4+mlqC6hm/EZN0/IiYwI08lIV+ZrKnNJS 8R/VITxMJ6t/OWV4C/kIbuq7ZI03IDBpeQnAVyj35CxVj0J0hhsNcllXh1vDsjyM fFz4y7bV35A/qjLewsfEwDCqm1Y1Yodh8NQA4Ttu0U+Z35snBQhxpxk5THzxdgBA Aj56b5JQKyU5OnlMZnEKNTM/8AAd5Jk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:33 2025 by rpki-client