$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: 3utWPXKTSOI1n3x3SRmgloF4N8GWH3JWWAKI2gP/BQw= Subject key identifier: 9A:A7:AD:EE:B7:3E:90:0A:A7:93:07:70:51:2F:07:C8:A7:A0:C3:3D Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0128 Signing time: Fri 25 Apr 2025 03:42:47 +0000 Manifest this update: Fri 25 Apr 2025 03:42:47 +0000 Manifest next update: Fri 02 May 2025 03:42:47 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: 4v8wV8M/Dk8Uc/ma145ZsafLMMJlK9HkrSQvX6VOXtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Apr 25 03:42:47 2025 GMT Not After : May 2 03:42:47 2025 GMT Subject: CN=680b04b7-203f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:c7:d0:e9:11:d1:b7:5b:1e:c3:a3:6f:53: 92:db:83:55:cc:62:3d:ea:e7:95:53:36:f4:51:23: 8c:bd:34:c2:68:f3:74:0d:ef:10:f8:d3:0d:48:bc: b8:22:35:fd:c4:2f:e2:0d:12:e6:06:6c:88:f2:fb: 2d:b3:06:d9:e3:d3:98:07:6f:b4:e1:45:30:3c:9d: dc:73:16:3e:08:85:4e:d3:3d:5a:fd:f6:d4:dd:13: a1:b4:d1:23:9f:00:05:64:be:b0:98:bf:24:d3:cf: 66:99:8e:7d:eb:8b:59:6b:27:14:35:e1:48:1d:26: 88:2c:43:19:80:47:cd:85:cb:fb:0f:4d:0a:b1:96: 32:bb:8b:0a:1e:8c:f6:29:ca:a6:fb:66:ac:e5:5f: ad:a1:80:cd:f9:11:09:65:04:e4:5e:6e:d5:52:db: 61:ea:c4:ac:d2:40:cb:c2:33:0f:e4:b6:50:cb:f0: 54:f2:6e:89:73:72:91:19:c9:cd:ff:10:05:37:e8: 79:bb:a1:92:d4:cb:fa:e9:7b:e2:fa:4d:98:6e:f1: f0:c4:d0:40:1b:08:e0:66:bf:43:ec:1f:ae:33:0f: 23:0d:7b:ec:26:66:a6:90:fe:69:76:cc:9f:6c:31: 48:85:36:eb:64:e6:85:cf:f4:00:46:ae:6f:fd:56: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A7:AD:EE:B7:3E:90:0A:A7:93:07:70:51:2F:07:C8:A7:A0:C3:3D X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:14:85:01:57:58:2c:82:23:90:96:be:5b:b8:7c:58:d2:e9: fa:4b:8e:d0:b9:ff:1b:16:4e:05:12:a2:bf:af:d5:41:3e:52: 42:25:0b:2f:1f:4c:b4:85:23:9c:cf:31:f4:68:e2:81:2e:0d: ae:43:fe:a8:b0:b2:f8:be:84:ac:f6:b3:c7:36:1c:36:30:07: ec:fa:40:c1:fd:09:82:f3:88:77:0a:5e:39:c0:46:f0:53:6c: d0:4a:80:2f:7f:68:df:da:b5:2d:50:53:da:e8:69:18:65:e7: 19:a9:fb:98:87:8a:e0:b4:a7:32:81:82:dc:d3:d5:2c:60:38: b2:17:52:ea:59:74:6f:40:bb:fd:bb:e8:5e:cb:e0:2a:46:d9: d5:06:e3:51:14:e2:09:67:35:d5:41:56:de:c5:fa:eb:b2:17: eb:a9:06:32:63:df:22:93:9f:f3:6e:0d:7b:2c:0b:04:c7:c3: 9a:ae:8e:b9:26:bc:48:b1:ef:49:9d:83:71:28:a5:7d:b3:11: 41:08:c8:f2:d0:00:82:8c:51:5e:c9:cc:c3:a3:f8:10:88:57: f8:07:45:0d:a0:b6:7f:5a:98:d4:e7:1b:d7:87:ca:bf:3e:a2: a4:52:89:14:1f:f6:22:c1:04:d7:1d:ab:a9:c8:28:ba:67:1a: 1f:dc:4d:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUwNDI1MDM0MjQ3WhcNMjUwNTAyMDM0MjQ3WjAYMRYwFAYD VQQDEw02ODBiMDRiNy0yMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyrH0OkR0bdbHsOjb1OS24NVzGI96ueVUzb0USOMvTTCaPN0De8Q+NMNSLy4 IjX9xC/iDRLmBmyI8vstswbZ49OYB2+04UUwPJ3ccxY+CIVO0z1a/fbU3ROhtNEj nwAFZL6wmL8k089mmY5964tZaycUNeFIHSaILEMZgEfNhcv7D00KsZYyu4sKHoz2 Kcqm+2as5V+toYDN+REJZQTkXm7VUtth6sSs0kDLwjMP5LZQy/BU8m6Jc3KRGcnN /xAFN+h5u6GS1Mv66Xvi+k2YbvHwxNBAGwjgZr9D7B+uMw8jDXvsJmamkP5pdsyf bDFIhTbrZOaFz/QARq5v/ValFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqnre63 PpAKp5MHcFEvB8inoMM9MB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkFIUBV1gsgiOQlr5buHxY0un6S47Quf8bFk4FEqK/r9VBPlJCJQsv H0y0hSOczzH0aOKBLg2uQ/6osLL4voSs9rPHNhw2MAfs+kDB/QmC84h3Cl45wEbw U2zQSoAvf2jf2rUtUFPa6GkYZecZqfuYh4rgtKcygYLc09UsYDiyF1LqWXRvQLv9 u+hey+AqRtnVBuNRFOIJZzXVQVbexfrrshfrqQYyY98ik5/zbg17LAsEx8Oaro65 JrxIse9JnYNxKKV9sxFBCMjy0ACCjFFeyczDo/gQiFf4B0UNoLZ/WpjU5xvXh8q/ PqKkUokUH/YiwQTXHaupyCi6Zxof3E3s -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:35 2025 by rpki-client