$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft File: 9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json) Hash identifier: 0jRiJ0H0HBRX7ZTun0rdtTI64HpiizDAstvEDoodMaE= Subject key identifier: 46:CB:41:A1:95:2B:FF:30:9D:4E:70:CC:22:AC:98:38:7B:0A:9F:D9 Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 Certificate issuer: /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft Manifest number: 0A98 Signing time: Thu 24 Apr 2025 19:27:16 +0000 Manifest this update: Thu 24 Apr 2025 19:27:15 +0000 Manifest next update: Thu 01 May 2025 19:27:15 +0000 Files and hashes: 1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: gxGGsQlNo/HjMDz9ue7WyFf6VvP90gYh4OAXgy0EAEM=) 2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=) 3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: uIlmxyBkIRVTtfqtlVJMMghD2D4RDYW/jdv8jycrnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EAFB, serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Validity Not Before: Apr 24 19:27:15 2025 GMT Not After : May 1 19:27:15 2025 GMT Subject: CN=680a9094-046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:e4:a4:f5:0d:f8:53:65:44:09:c7:8d:c9: df:a2:6a:6d:45:07:43:6d:6a:b8:f5:15:28:a5:5f: b7:ff:e7:7b:98:26:51:30:e4:a5:a2:42:25:b4:89: 6f:fc:4d:03:21:b5:fa:1b:ab:db:0a:f8:89:4c:a2: a7:ee:f7:83:af:d6:29:13:ff:4f:3f:ea:72:6a:38: 3d:fa:b5:dc:7d:71:7a:30:ee:d4:34:ba:19:2d:ed: 2b:44:35:b1:f6:22:19:e0:96:15:6c:ef:76:60:ce: 04:1d:68:4c:25:d5:1b:c1:b6:d9:36:a3:ce:e2:fb: 3d:b3:d9:a3:83:a3:e7:b0:37:25:82:e6:fe:fe:f6: ec:81:ba:4f:4f:b9:e3:a9:a0:3e:88:28:e3:cb:11: 1c:7c:d7:65:8b:45:15:97:28:4a:e6:cc:07:8e:b0: fd:0c:fe:b3:2b:26:7d:86:94:9c:91:a5:87:5a:32: a9:28:b9:6e:4f:78:8a:0a:c4:9d:99:72:76:e8:06: e4:41:c7:f0:6c:76:f4:36:49:6a:1a:67:23:ff:55: 7e:d4:65:77:25:19:57:7e:27:be:3f:c5:5b:9c:b7: b5:8b:c0:74:b7:ab:36:46:d2:f7:03:96:f1:37:50: 4d:d4:14:8f:a0:ca:a9:ac:75:06:44:ab:1d:45:ae: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CB:41:A1:95:2B:FF:30:9D:4E:70:CC:22:AC:98:38:7B:0A:9F:D9 X509v3 Authority Key Identifier: keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e6:b1:8a:83:3d:2b:20:ff:f0:25:1f:c3:a8:41:38:80:13: 2a:a5:99:9b:a3:34:2d:0e:59:08:52:8e:4b:9f:1c:2a:b4:6c: 61:ad:6a:ed:13:79:3c:2d:63:77:64:cf:2b:64:b9:15:59:d3: 4d:df:76:12:cb:25:38:0e:89:a5:9d:b1:cc:b5:d8:6a:5c:9b: bc:26:c1:16:eb:9f:8e:b5:42:ac:07:d6:69:80:1f:7c:88:43: d9:44:42:50:eb:51:35:9f:bf:a7:12:03:40:c8:53:a5:83:46: 69:6a:1b:61:29:95:7d:fd:ab:4b:78:8e:45:96:43:1d:df:8e: bd:bc:76:6d:b9:1f:7d:55:0a:70:45:22:1d:55:e5:fd:07:ec: 2f:3c:93:ad:22:32:a1:16:a0:98:4f:fc:bb:90:bb:16:0d:b5: a4:93:5b:a4:70:d9:9d:bb:7d:2b:9c:17:a9:5f:88:3c:d8:af: 31:d0:12:15:7c:fc:6c:16:c0:00:f2:e8:d2:0e:32:a1:6f:74: 4d:29:09:58:b6:54:38:10:91:28:a9:3d:74:ab:8e:94:7f:33: a4:57:2f:63:9a:1d:e0:45:6a:c3:fb:ca:5c:68:bb:5f:22:8e: 30:57:2e:17:55:b8:3a:db:04:19:3c:80:49:f7:00:89:0b:1d: 8b:6c:09:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD NEVFNzNGRjEwHhcNMjUwNDI0MTkyNzE1WhcNMjUwNTAxMTkyNzE1WjAYMRYwFAYD VQQDEw02ODBhOTA5NC0wNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqXkpPUN+FNlRAnHjcnfomptRQdDbWq49RUopV+3/+d7mCZRMOSlokIltIlv /E0DIbX6G6vbCviJTKKn7veDr9YpE/9PP+pyajg9+rXcfXF6MO7UNLoZLe0rRDWx 9iIZ4JYVbO92YM4EHWhMJdUbwbbZNqPO4vs9s9mjg6PnsDclgub+/vbsgbpPT7nj qaA+iCjjyxEcfNdli0UVlyhK5swHjrD9DP6zKyZ9hpSckaWHWjKpKLluT3iKCsSd mXJ26AbkQcfwbHb0NklqGmcj/1V+1GV3JRlXfie+P8VbnLe1i8B0t6s2RtL3A5bx N1BN1BSPoMqprHUGRKsdRa5OxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbLQaGV K/8wnU5wzCKsmDh7Cp/ZMB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0 RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUFGQi8wOTRGNzQ2RTU0RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBR RDZtZHZVZ002TUxFN25QX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx5rGKgz0rIP/wJR/DqEE4gBMqpZmbozQtDlkIUo5LnxwqtGxhrWrt E3k8LWN3ZM8rZLkVWdNN33YSyyU4DomlnbHMtdhqXJu8JsEW65+OtUKsB9ZpgB98 iEPZREJQ61E1n7+nEgNAyFOlg0ZpahthKZV9/atLeI5FlkMd3469vHZtuR99VQpw RSIdVeX9B+wvPJOtIjKhFqCYT/y7kLsWDbWkk1ukcNmdu30rnBepX4g82K8x0BIV fPxsFsAA8ujSDjKhb3RNKQlYtlQ4EJEoqT10q46UfzOkVy9jmh3gRWrD+8pcaLtf Io4wVy4XVbg62wQZPIBJ9wCJCx2LbAna -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:56 2025 by rpki-client