$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft File: 95uku76tPercmtRWS_qe8QpqorI.mft (raw, json) Hash identifier: nyh4TxJeDQMqADVWbcVP27KoIqnvAN82CoNcdfT/FjE= Subject key identifier: DD:F5:94:97:A6:E3:D1:EF:B5:B4:E0:9D:F3:34:81:FE:57:63:02:D8 Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2 Certificate issuer: /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft Manifest number: 03B4 Signing time: Fri 25 Apr 2025 00:27:59 +0000 Manifest this update: Fri 25 Apr 2025 00:27:59 +0000 Manifest next update: Fri 02 May 2025 00:27:59 +0000 Files and hashes: 1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: G12JCUolJdJ7lPyAj7vsHvNKzqLI9zW+j6QhFPIV5pI=) 2: E966D7528A9411ECA50F3F2CC4F9AE02.roa (hash: Xzb8IT5Uqo9ZdC2yTg4RbM+dXXOtLp1/V8NChuUy/RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2 Validity Not Before: Apr 25 00:27:59 2025 GMT Not After : May 2 00:27:59 2025 GMT Subject: CN=680ad70f-205e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:90:4d:89:60:8d:4d:b0:f6:0a:8c:1d:db: 5a:df:fa:f7:27:76:cc:19:7c:c6:e8:8f:49:e0:2d: 18:f8:e9:d2:4f:8f:9b:e2:a0:3a:e7:21:07:9d:5a: 3f:34:5a:91:58:15:57:38:26:59:f8:22:14:aa:63: 78:0f:f3:b1:25:18:50:51:e7:e4:3f:1e:dc:8b:76: 9e:17:7b:17:05:ae:c7:38:64:a1:c8:da:75:01:94: 32:dc:ba:91:8a:f0:75:40:2a:13:d9:af:1c:65:e7: 17:2c:6d:4b:f6:35:46:3b:36:62:3d:58:45:59:c8: 55:9a:6a:81:f6:47:49:a2:30:81:93:b8:44:4e:f6: 68:23:62:9d:b7:38:54:84:9a:22:85:f2:3e:e3:73: e3:31:b7:aa:52:90:82:91:ef:f7:26:0c:b4:07:9e: 6b:2f:fe:92:17:62:1e:48:39:8c:bd:1d:6b:d9:fb: b6:d6:5c:38:54:77:7b:ef:da:0e:f3:93:29:4b:89: cb:4e:a0:68:05:38:76:91:7e:06:4f:65:92:43:ae: e4:2d:d1:cb:0b:41:52:c3:dd:eb:d8:f0:1e:68:d9: d0:21:75:3c:f4:cc:17:32:9e:57:8f:6b:eb:ba:ef: d7:fe:c9:45:27:1c:0f:80:9b:1f:0a:b8:f0:d2:54: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F5:94:97:A6:E3:D1:EF:B5:B4:E0:9D:F3:34:81:FE:57:63:02:D8 X509v3 Authority Key Identifier: keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:aa:3e:24:7b:bd:b8:d4:f5:df:eb:fc:f5:b1:4d:e7:85:eb: 48:a6:9e:6d:34:b6:91:5b:1a:ec:f6:34:f9:fe:f5:85:31:32: 91:2c:a5:e8:76:fe:4a:d4:22:53:e5:3b:4b:97:32:13:23:d1: 38:06:a2:e5:63:66:6a:f0:2f:0f:46:5c:b5:c8:24:3a:2f:12: 98:f4:12:6d:3e:7a:0b:40:2b:43:79:68:8f:e6:e6:76:3e:ef: 04:0a:12:1e:a8:24:5b:35:14:1e:53:39:19:18:24:d0:de:01: 56:75:b7:75:7f:65:26:b3:93:7d:d0:1c:97:56:97:12:be:c4: dc:62:2c:a1:cc:7b:4a:ac:ec:29:ee:53:f2:1e:50:5a:21:e4: a7:9c:73:3b:ee:50:1b:0b:4e:bc:b8:86:d1:6a:6e:3e:4c:81: a4:aa:5c:06:d9:c4:9d:04:5c:c8:b4:18:fc:93:bf:9e:5b:b0: 6a:7b:30:70:51:37:22:10:94:0d:16:d7:20:a3:6f:89:af:0c: 1c:fb:11:ad:0f:c3:bc:4e:d5:4b:fb:e9:ce:93:91:15:ac:af: 34:8a:b9:ce:77:86:82:8e:41:98:d4:7f:94:65:7a:27:52:c6: d4:84:d8:cf:b3:21:71:5e:85:bf:bc:77:e8:1f:f8:3e:2a:ac: 9c:2e:74:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlBOUYxMTAvBgNVBAUTKEY3OUJBNEJCQkVBRDNERUFEQzlBRDQ1NjRCRkE5RUYx MEE2QUEyQjIwHhcNMjUwNDI1MDAyNzU5WhcNMjUwNTAyMDAyNzU5WjAYMRYwFAYD VQQDEw02ODBhZDcwZi0yMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4uQTYlgjU2w9gqMHdta3/r3J3bMGXzG6I9J4C0Y+OnST4+b4qA65yEHnVo/ NFqRWBVXOCZZ+CIUqmN4D/OxJRhQUefkPx7ci3aeF3sXBa7HOGShyNp1AZQy3LqR ivB1QCoT2a8cZecXLG1L9jVGOzZiPVhFWchVmmqB9kdJojCBk7hETvZoI2KdtzhU hJoihfI+43PjMbeqUpCCke/3Jgy0B55rL/6SF2IeSDmMvR1r2fu21lw4VHd779oO 85MpS4nLTqBoBTh2kX4GT2WSQ67kLdHLC0FSw93r2PAeaNnQIXU89MwXMp5Xj2vr uu/X/slFJxwPgJsfCrjw0lTK5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN31lJem 49HvtbTgnfM0gf5XYwLYMB8GA1UdIwQYMBaAFPebpLu+rT3q3JrUVkv6nvEKaqKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBlcmNtdFJXU19xZThRcHFv ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk1dWt1NzZ0UGVyY210UldTX3FlOFFwcW9ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUE5Ri84MDU2QkE1NjhBOTAxMUVDOEMxQjBEMjJDNEY5QUUwMi85NXVrdTc2dFBl cmNtdFJXU19xZThRcHFvckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3qj4ke7241PXf6/z1sU3nhetIpp5tNLaRWxrs9jT5/vWFMTKRLKXo dv5K1CJT5TtLlzITI9E4BqLlY2Zq8C8PRly1yCQ6LxKY9BJtPnoLQCtDeWiP5uZ2 Pu8EChIeqCRbNRQeUzkZGCTQ3gFWdbd1f2Ums5N90ByXVpcSvsTcYiyhzHtKrOwp 7lPyHlBaIeSnnHM77lAbC068uIbRam4+TIGkqlwG2cSdBFzItBj8k7+eW7BqezBw UTciEJQNFtcgo2+Jrwwc+xGtD8O8TtVL++nOk5EVrK80irnOd4aCjkGY1H+UZXon UsbUhNjPsyFxXoW/vHfoH/g+KqycLnQS -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:37 2025 by rpki-client