$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: bW8R9dUAC2zKEckiTCtal7kolqtaucISSbovE50W6Vo= Subject key identifier: B3:22:34:8F:60:D3:94:22:B0:2E:3E:76:BF:D6:82:7D:EB:93:6E:C6 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: C7 Signing time: Fri 25 Apr 2025 04:47:37 +0000 Manifest this update: Fri 25 Apr 2025 04:47:37 +0000 Manifest next update: Fri 02 May 2025 04:47:37 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: B8Ak+QaiShCTslOhBDyReoM8HWVbzpJPn5nywb0ypyg=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: CY+0lVCE8pyV/yuqoYwTYIt3uyuTBJHx9OgX18w8m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: Apr 25 04:47:37 2025 GMT Not After : May 2 04:47:37 2025 GMT Subject: CN=680b13e9-dea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:89:9d:b2:db:89:be:4d:c3:50:09:6a:da:d1: f3:fd:b4:c9:9e:8a:0e:5d:36:a5:d7:94:1d:d5:c6: db:d6:ee:64:72:eb:a8:5f:4f:13:cb:c9:fd:72:d8: d5:3a:5d:df:fb:eb:1a:19:a4:fa:07:ec:17:bd:81: 1a:b0:8f:98:3f:0a:17:e6:54:4f:bd:a7:2c:28:74: f4:95:ea:81:b3:0c:cb:07:44:78:eb:6f:94:33:c7: e9:61:e3:42:4e:65:94:de:3b:70:53:3b:8f:ca:dc: 34:45:96:0b:e1:5f:3d:65:4d:fa:70:52:0b:aa:1b: 74:70:8b:79:c9:f6:44:60:a4:18:cb:ae:fd:bb:40: ad:fb:01:7c:1f:3f:c6:51:e7:d1:b6:fa:65:f8:4c: fe:9a:43:e8:c7:f1:7f:2e:4d:e8:75:a1:d1:31:cf: a0:c3:b8:87:30:25:f3:d5:98:19:e0:55:6b:ed:5b: 85:ad:d0:17:99:b2:af:71:7a:51:cb:19:1f:48:c5: 9e:ea:4a:58:1f:28:59:97:d7:b2:08:be:f4:31:27: 8c:4a:28:c5:d3:48:8e:58:3d:a4:cf:e0:48:da:ac: 21:de:53:d1:2b:3e:50:89:ad:c5:d0:17:83:32:19: 2e:50:91:44:d2:40:77:ce:54:8e:15:47:26:83:9c: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:22:34:8F:60:D3:94:22:B0:2E:3E:76:BF:D6:82:7D:EB:93:6E:C6 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ea:dc:56:48:f6:1f:b8:51:62:e3:ab:0f:84:50:f9:9b:bc: 5e:b1:f6:ad:c3:df:be:dc:c4:52:80:97:5f:b5:a3:0c:23:ea: 24:e9:01:ea:d1:95:c4:cf:92:f2:91:ca:79:30:5f:83:ee:43: 62:af:06:63:75:62:65:8a:3f:7b:6a:72:62:65:a8:6c:d2:2c: e4:53:b6:46:36:3a:c5:89:37:c2:99:56:5e:2d:18:78:6e:26: db:e7:2e:e3:bf:be:12:d8:dc:b6:92:73:1e:1c:c6:48:38:c5: 77:e0:40:21:a0:bf:fa:0c:aa:d0:87:9b:9a:3a:51:c4:cf:4b: 8a:df:5b:93:ce:26:b9:9a:b9:fb:d3:65:94:28:45:0d:e4:f4: 5e:be:9f:3e:2c:5d:b4:3d:24:c4:69:de:3f:b1:ec:00:c1:be: 98:53:08:60:19:a1:9d:38:30:93:76:2f:26:9b:0a:a9:7f:1e: 7e:c8:b7:55:85:5a:f1:15:42:55:e7:e6:60:2c:3d:37:69:05: 90:07:ef:95:e3:f8:14:38:32:13:40:c3:ec:a8:48:27:de:d1: 75:74:56:ee:21:cf:a8:b4:bd:54:37:c9:7a:88:24:08:45:86: 9a:fd:d7:7d:8a:93:22:54:c4:57:55:d4:ad:d4:ef:80:db:e1: 83:4d:e6:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjUwNDI1MDQ0NzM3WhcNMjUwNTAyMDQ0NzM3WjAYMRYwFAYD VQQDEw02ODBiMTNlOS1kZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64mdstuJvk3DUAlq2tHz/bTJnooOXTal15Qd1cbb1u5kcuuoX08Ty8n9ctjV Ol3f++saGaT6B+wXvYEasI+YPwoX5lRPvacsKHT0leqBswzLB0R462+UM8fpYeNC TmWU3jtwUzuPytw0RZYL4V89ZU36cFILqht0cIt5yfZEYKQYy679u0Ct+wF8Hz/G UefRtvpl+Ez+mkPox/F/Lk3odaHRMc+gw7iHMCXz1ZgZ4FVr7VuFrdAXmbKvcXpR yxkfSMWe6kpYHyhZl9eyCL70MSeMSijF00iOWD2kz+BI2qwh3lPRKz5Qia3F0BeD MhkuUJFE0kB3zlSOFUcmg5wo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMiNI9g 05QisC4+dr/Wgn3rk27GMB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDMy8yNEI4RTI1OEVFN0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18w c0tRUWNoaDBkdXZnZlRZYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD6txWSPYfuFFi46sPhFD5m7xesfatw9++3MRSgJdftaMMI+ok6QHq 0ZXEz5Lykcp5MF+D7kNirwZjdWJlij97anJiZahs0izkU7ZGNjrFiTfCmVZeLRh4 bibb5y7jv74S2Ny2knMeHMZIOMV34EAhoL/6DKrQh5uaOlHEz0uK31uTzia5mrn7 02WUKEUN5PRevp8+LF20PSTEad4/sewAwb6YUwhgGaGdODCTdi8mmwqpfx5+yLdV hVrxFUJV5+ZgLD03aQWQB++V4/gUODITQMPsqEgn3tF1dFbuIc+otL1UN8l6iCQI RYaa/dd9ipMiVMRXVdSt1O+A2+GDTeax -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:56 2025 by rpki-client