$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json) Hash identifier: 65VvoluVaidYJH20tE7SmWV8dh97vlLIrBwqTYnV/l0= Subject key identifier: 77:F3:EC:ED:70:8A:4F:49:D3:F8:C0:C1:22:52:F0:51:6B:BA:2C:85 Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft Manifest number: 9B Signing time: Fri 25 Apr 2025 05:20:22 +0000 Manifest this update: Fri 25 Apr 2025 05:20:21 +0000 Manifest next update: Fri 02 May 2025 05:20:21 +0000 Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: Wp4smENBuELMzFnb7LmOsC6bBfzTCyjRH7wBVYXeRB4=) 2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: q+bs+pmU+B7fJo6iymx9EUit+9N40A02etOl0mkXvRg=) 3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: bKtFSMRmBEl0oKGrwWVZYxuAEvHDipNsFv7Plkp3FeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Apr 25 05:20:21 2025 GMT Not After : May 2 05:20:21 2025 GMT Subject: CN=680b1b95-e795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:95:0a:9b:b0:7a:8a:7c:56:c9:c2:7e:cb:58: b0:4d:c4:b6:bc:02:b4:3d:58:22:86:9b:52:9e:c4: 6d:c9:b2:ea:77:ce:8c:66:60:82:32:ea:a5:e2:0f: 66:e3:dc:86:2b:8e:f2:fe:c8:1e:4c:72:86:f5:10: cb:32:9c:1b:af:71:a3:4c:81:bf:03:73:bc:5d:e1: 21:9a:4e:29:59:35:1b:51:79:99:e0:d6:f1:8d:db: 71:79:14:1d:99:6e:04:ad:72:da:46:df:9d:70:2e: 2e:18:66:3e:8e:7a:85:63:16:3f:86:3a:2b:d4:f7: 72:d1:2c:c6:d6:a1:4d:9c:61:c3:82:c2:7c:ca:5a: 45:7a:76:ec:89:88:30:84:75:9e:e6:3a:62:b9:50: 9f:27:35:3e:85:e2:9d:2a:89:47:c1:2f:12:79:07: f7:a6:32:21:fa:3d:45:55:e0:eb:dd:c7:f1:02:28: 15:f0:9a:ce:6b:c2:3e:16:c6:5a:48:90:eb:69:b6: da:e6:68:d3:df:ee:1c:38:6b:8b:07:20:9c:41:6c: 8e:7e:9b:06:c6:1f:af:94:ef:4b:aa:69:54:cd:a2: 60:11:3a:b5:7c:22:e6:14:ae:e0:9b:7b:b2:0a:e1: 62:85:a1:44:26:7e:0f:81:d2:2b:6d:2b:4a:08:ac: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:EC:ED:70:8A:4F:49:D3:F8:C0:C1:22:52:F0:51:6B:BA:2C:85 X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3a:3b:ce:df:a4:36:47:85:60:ea:29:23:7b:af:44:a1:65: 80:51:4e:f7:63:51:19:d2:fa:bb:5b:aa:c5:3c:3b:93:2c:bb: 69:3f:7b:f0:4a:56:e1:ae:ae:25:8e:ef:98:a0:b7:5e:8c:04: 80:95:0b:65:27:71:7b:97:1d:b4:2a:1f:86:f9:40:a6:ac:b1: 8b:34:d2:63:e6:d6:81:db:14:3c:6e:4d:19:51:33:20:d1:8e: d9:d7:5a:7d:1e:8e:cb:90:b2:82:d2:15:f7:b0:0a:c9:6e:5d: 31:96:bd:92:df:22:0c:ed:5e:4d:c3:4f:09:f7:66:f4:2d:6d: 14:6d:31:67:3e:fb:0a:78:87:ad:03:ba:38:2a:fa:97:b1:94: 6e:f7:d4:87:b0:60:b9:3f:fe:7e:ba:a8:fa:51:43:af:cf:ee: 04:95:ad:95:f2:4d:9b:08:f0:61:a6:d9:57:fb:96:ce:79:de: ed:89:8e:1e:29:ac:1b:51:77:65:75:d6:20:71:ff:47:7b:3e: 77:c6:12:71:fc:eb:29:77:5b:df:ce:c5:da:7b:b8:e7:7b:30: 88:7b:da:8a:08:39:71:f7:eb:42:1e:58:ac:89:5d:5e:87:56: 89:a4:9e:8f:c0:a1:1c:fd:16:ab:fb:79:ee:74:ee:39:e5:7a: 65:54:ce:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF RThFQjRDMkQwHhcNMjUwNDI1MDUyMDIxWhcNMjUwNTAyMDUyMDIxWjAYMRYwFAYD VQQDEw02ODBiMWI5NS1lNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZUKm7B6inxWycJ+y1iwTcS2vAK0PVgihptSnsRtybLqd86MZmCCMuql4g9m 49yGK47y/sgeTHKG9RDLMpwbr3GjTIG/A3O8XeEhmk4pWTUbUXmZ4NbxjdtxeRQd mW4ErXLaRt+dcC4uGGY+jnqFYxY/hjor1Pdy0SzG1qFNnGHDgsJ8ylpFenbsiYgw hHWe5jpiuVCfJzU+heKdKolHwS8SeQf3pjIh+j1FVeDr3cfxAigV8JrOa8I+FsZa SJDrabba5mjT3+4cOGuLByCcQWyOfpsGxh+vlO9LqmlUzaJgETq1fCLmFK7gm3uy CuFihaFEJn4PgdIrbStKCKx91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfz7O1w ik9J0/jAwSJS8FFruiyFMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG ODJmWk1Fdno5eHJ1anJUQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/OjvO36Q2R4Vg6ikje69EoWWAUU73Y1EZ0vq7W6rFPDuTLLtpP3vw Slbhrq4lju+YoLdejASAlQtlJ3F7lx20Kh+G+UCmrLGLNNJj5taB2xQ8bk0ZUTMg 0Y7Z11p9Ho7LkLKC0hX3sArJbl0xlr2S3yIM7V5Nw08J92b0LW0UbTFnPvsKeIet A7o4KvqXsZRu99SHsGC5P/5+uqj6UUOvz+4Ela2V8k2bCPBhptlX+5bOed7tiY4e KawbUXdlddYgcf9Hez53xhJx/Ospd1vfzsXae7jnezCIe9qKCDlx9+tCHlisiV1e h1aJpJ6PwKEc/Rar+3nudO455XplVM6u -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:51 2025 by rpki-client