$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: dhRA+9+RC0Wtq2DuqxegN900q/x7WJ6uRgciI1RhV6E= Subject key identifier: 26:58:38:E5:93:4B:C3:9B:04:89:23:7A:AC:EC:C9:2E:24:B3:59:BF Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 05:12:56 +0000 Manifest this update: Fri 25 Apr 2025 05:12:55 +0000 Manifest next update: Fri 02 May 2025 05:12:55 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: bJztviDcDLmbSvSNQIjeNrhjbR+JHtJQzsCXFouoEQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Apr 25 05:12:55 2025 GMT Not After : May 2 05:12:55 2025 GMT Subject: CN=680b19d8-3d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ca:06:3b:48:25:54:9e:cf:20:11:f5:c1:a6: a7:06:d4:79:d7:58:c6:d4:3d:b0:46:6d:e1:09:0e: 19:53:8c:cd:e4:db:f1:c8:61:f7:a4:2b:2d:f8:9d: 77:82:00:1e:3d:43:c1:d6:3c:64:23:c6:41:bd:d7: 89:3b:85:c6:5b:be:1c:29:e6:dc:ef:bf:8b:f4:37: 3a:20:14:cc:2b:e9:e3:04:26:24:35:22:05:83:36: 64:bb:c2:1d:8f:5d:71:b2:3a:5b:e5:e3:15:b3:dd: 66:f8:72:77:16:c1:7a:f8:af:77:71:a4:4d:22:69: 94:f3:6b:72:3b:26:52:ee:32:f0:36:d3:27:3f:e4: 17:61:79:d0:39:12:4c:50:20:02:9d:ba:f5:c8:ba: cb:e3:ac:91:c1:8b:08:d5:ab:94:f2:59:08:1a:3f: a5:a6:d9:43:17:1c:11:d4:67:b1:b8:5f:d4:de:a7: 1a:de:10:f7:49:22:44:b6:56:4c:1e:19:e3:da:af: 7c:50:2c:2e:01:d5:b6:b6:50:7b:d5:fd:c9:de:cb: 72:db:9c:3b:4d:30:1b:33:65:1a:a2:0f:e3:ba:05: f8:d9:22:c0:48:24:a1:8e:0e:ee:60:2f:f3:71:9e: bc:88:17:24:de:79:50:f3:04:b7:ac:8e:dc:ff:b2: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:58:38:E5:93:4B:C3:9B:04:89:23:7A:AC:EC:C9:2E:24:B3:59:BF X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3e:89:45:3d:d7:85:8b:f4:fa:01:30:7f:47:15:a8:50:43: 84:26:b0:2a:ee:f6:f9:34:3c:16:0e:30:af:43:ff:e7:51:1d: 96:a8:f7:65:7d:d1:92:4f:e5:01:b5:3f:43:03:da:59:63:c7: 73:8f:6a:0b:14:95:33:ce:e6:b7:a6:b4:1b:48:03:f2:c0:11: c8:55:cf:47:b9:63:4a:73:87:5b:99:e7:d4:fe:ca:a7:50:2a: 0e:a8:42:d4:dd:c9:88:0a:db:8d:0a:bc:d8:99:e1:70:24:1a: eb:c2:6b:45:fa:47:36:13:55:e5:8f:55:f6:2c:98:ce:b3:77: 30:15:ae:59:02:b6:e2:39:76:b6:77:e8:7d:7e:e5:aa:a1:e0: 8b:10:ae:83:1a:ac:94:e3:62:c1:13:94:61:bb:a9:85:35:02: 0a:e9:82:30:cf:a3:27:3b:59:df:f7:80:56:ab:b0:39:20:cd: 91:72:65:9d:9f:f9:3c:8f:56:22:8e:4c:f2:30:4f:7f:23:85: 15:a3:0d:43:26:49:ec:e7:19:3d:59:70:24:34:44:c1:48:de: f1:50:92:6f:d7:42:1f:84:87:ff:18:d2:ce:34:bc:54:32:b6: f7:90:19:8a:1c:78:ed:46:94:a4:61:26:17:7e:18:da:46:39: 36:e1:0a:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjUwNDI1MDUxMjU1WhcNMjUwNTAyMDUxMjU1WjAYMRYwFAYD VQQDEw02ODBiMTlkOC0zZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88oGO0glVJ7PIBH1waanBtR511jG1D2wRm3hCQ4ZU4zN5NvxyGH3pCst+J13 ggAePUPB1jxkI8ZBvdeJO4XGW74cKebc77+L9Dc6IBTMK+njBCYkNSIFgzZku8Id j11xsjpb5eMVs91m+HJ3FsF6+K93caRNImmU82tyOyZS7jLwNtMnP+QXYXnQORJM UCACnbr1yLrL46yRwYsI1auU8lkIGj+lptlDFxwR1GexuF/U3qca3hD3SSJEtlZM Hhnj2q98UCwuAdW2tlB71f3J3sty25w7TTAbM2Uaog/jugX42SLASCShjg7uYC/z cZ68iBck3nlQ8wS3rI7c/7KkIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZYOOWT S8ObBIkjeqzsyS4ks1m/MB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACPolFPdeFi/T6ATB/RxWoUEOEJrAq7vb5NDwWDjCvQ//nUR2WqPdl fdGST+UBtT9DA9pZY8dzj2oLFJUzzua3prQbSAPywBHIVc9HuWNKc4dbmefU/sqn UCoOqELU3cmICtuNCrzYmeFwJBrrwmtF+kc2E1Xlj1X2LJjOs3cwFa5ZArbiOXa2 d+h9fuWqoeCLEK6DGqyU42LBE5Rhu6mFNQIK6YIwz6MnO1nf94BWq7A5IM2RcmWd n/k8j1YijkzyME9/I4UVow1DJkns5xk9WXAkNETBSN7xUJJv10IfhIf/GNLONLxU Mrb3kBmKHHjtRpSkYSYXfhjaRjk24Qpc -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:37 2025 by rpki-client