$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: E1ZKFl3/9HQUCedAV6gcHA+mcHkC3M+WJSb+APdgLbk= Subject key identifier: 95:AC:56:A3:0F:4F:F5:61:E6:D9:42:0C:BA:0D:FB:8E:AB:62:3B:A8 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: F6 Signing time: Fri 25 Apr 2025 04:16:19 +0000 Manifest this update: Fri 25 Apr 2025 04:16:18 +0000 Manifest next update: Fri 02 May 2025 04:16:18 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: eDacC8CQ25YAT8lricuPL+nwC8UkkHAe0oiqF20F0Qc=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: avXsfjELw9kpDvws2JPtdoH0HM/yAF3dKj0UAvRbtj0=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: EikgtLBFZ+GcMX0vibVaRvnZCJfkspVWoQB1eoPQJJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Apr 25 04:16:18 2025 GMT Not After : May 2 04:16:18 2025 GMT Subject: CN=680b0c93-d965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:28:44:10:f2:54:c8:cb:d6:79:85:9a:ed: 6b:7c:b9:04:c8:93:61:c6:ba:93:98:b7:fb:63:a5: 14:f6:8c:af:30:bf:0f:13:98:79:23:f4:e4:f7:9b: d7:75:e4:f0:7d:67:c8:a3:31:fa:0c:5e:bc:83:d3: be:72:c1:12:0e:d6:19:ca:17:10:2f:e5:7d:6d:c4: 99:56:a0:f9:da:5d:ae:19:8b:c3:30:58:2e:42:dc: c4:60:9b:05:b5:8c:7f:a0:ec:9c:36:42:3d:2f:2a: 3f:c1:a3:6e:46:58:97:1f:2b:ab:d1:fd:53:c9:7e: 83:6c:2f:ff:49:56:67:93:33:64:c9:6e:57:54:9b: e7:f3:82:25:8a:de:c0:d5:05:95:f4:5f:6f:a3:fd: 73:12:87:50:f9:4a:96:d3:18:8d:8e:4f:76:95:09: e2:92:34:f6:73:11:0c:a7:89:03:84:59:57:94:65: 11:0d:07:f4:ac:fa:79:b0:6c:e2:c3:4e:d2:ee:78: 54:de:9f:d3:44:77:59:52:2d:63:5a:fd:c4:59:fc: 59:a6:56:1a:75:64:12:c3:f4:04:f2:89:49:72:4d: 71:e5:5a:d0:f8:85:e5:4b:d9:48:9e:8e:22:2b:fd: 85:81:71:78:6c:b6:ec:af:15:7c:0f:47:54:6d:b4: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AC:56:A3:0F:4F:F5:61:E6:D9:42:0C:BA:0D:FB:8E:AB:62:3B:A8 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d1:99:8d:2d:7e:14:45:5a:df:39:f5:b6:e2:0b:58:bf:d4: f9:ac:eb:2c:78:76:0d:24:bd:36:2b:e3:ee:81:be:a8:03:be: 88:4e:ae:0a:1a:9b:36:99:c1:9d:fd:2e:ab:b9:66:b1:5f:ad: 9d:b8:46:45:dc:6c:9f:eb:4b:96:d2:8d:07:ee:94:f7:a0:5e: f7:59:e5:8a:c2:3e:f0:e4:18:cd:5e:fb:a2:e4:64:75:11:fa: 1c:56:02:61:4d:20:c8:ba:ca:d1:c0:dd:f7:59:8a:98:0f:1f: b8:dc:68:22:18:8c:c6:c1:c7:4a:0a:cc:e6:c1:3d:f3:c3:85: df:cd:0b:5d:61:af:26:c3:b9:ee:4e:46:5c:33:7f:05:ed:31: 5f:06:53:fd:69:c2:c3:97:f2:a8:3b:f5:a4:88:72:c2:5d:eb: 5b:44:ec:ce:98:12:f6:6b:93:e2:f4:f9:6b:47:e5:2b:d8:57: 7c:02:26:5d:30:cb:f8:90:fc:1b:ca:00:99:26:6c:5d:26:e5: d8:a8:c7:61:41:63:b9:e0:6a:98:c8:e6:73:97:3b:b6:1e:66: f9:9f:74:78:59:60:ac:85:9c:04:27:c2:72:4c:d4:c4:ff:ab: 04:41:ce:6e:3e:cf:76:cf:1d:bb:4a:cb:2d:ea:f7:6b:07:ff: c2:68:22:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUwNDI1MDQxNjE4WhcNMjUwNTAyMDQxNjE4WjAYMRYwFAYD VQQDEw02ODBiMGM5My1kOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j0oRBDyVMjL1nmFmu1rfLkEyJNhxrqTmLf7Y6UU9oyvML8PE5h5I/Tk95vX deTwfWfIozH6DF68g9O+csESDtYZyhcQL+V9bcSZVqD52l2uGYvDMFguQtzEYJsF tYx/oOycNkI9Lyo/waNuRliXHyur0f1TyX6DbC//SVZnkzNkyW5XVJvn84Ilit7A 1QWV9F9vo/1zEodQ+UqW0xiNjk92lQnikjT2cxEMp4kDhFlXlGURDQf0rPp5sGzi w07S7nhU3p/TRHdZUi1jWv3EWfxZplYadWQSw/QE8olJck1x5VrQ+IXlS9lIno4i K/2FgXF4bLbsrxV8D0dUbbRYbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWsVqMP T/Vh5tlCDLoN+46rYjuoMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu0ZmNLX4URVrfOfW24gtYv9T5rOsseHYNJL02K+Pugb6oA76ITq4K Gps2mcGd/S6ruWaxX62duEZF3Gyf60uW0o0H7pT3oF73WeWKwj7w5BjNXvui5GR1 EfocVgJhTSDIusrRwN33WYqYDx+43GgiGIzGwcdKCszmwT3zw4XfzQtdYa8mw7nu TkZcM38F7TFfBlP9acLDl/KoO/WkiHLCXetbROzOmBL2a5Pi9PlrR+Ur2Fd8AiZd MMv4kPwbygCZJmxdJuXYqMdhQWO54GqYyOZzlzu2Hmb5n3R4WWCshZwEJ8JyTNTE /6sEQc5uPs92zx27Ssst6vdrB//CaCKn -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:12 2025 by rpki-client