$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: hUvVKF7rTpgg7NMwq9/6ZI9ayG2cFPOVnS/Cijhqz78= Subject key identifier: 46:49:F3:93:90:CB:55:4E:36:69:81:AD:01:FE:D6:DC:C4:7A:9C:84 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 235C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 233B Signing time: Thu 24 Apr 2025 15:51:41 +0000 Manifest this update: Thu 24 Apr 2025 15:51:41 +0000 Manifest next update: Thu 01 May 2025 15:51:41 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: 6TV2+UdF8cnIG5qg6bqc098IA1UBMdDrqh4NRDKWics=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9052 (0x235c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Apr 24 15:51:41 2025 GMT Not After : May 1 15:51:41 2025 GMT Subject: CN=680a5e0d-0f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:f4:8c:ef:95:e6:5b:3e:a6:aa:e7:ee:3a: f4:27:5f:3e:da:90:e2:af:39:7d:6f:60:ec:b4:3e: 1b:7f:bf:62:a8:77:42:dc:20:27:d0:04:9e:d6:1d: ee:df:6e:79:0a:43:ab:f1:8a:30:7d:21:57:e4:22: f3:75:ae:5a:87:69:53:8b:3b:e3:73:da:7b:4c:0b: 5f:df:7f:c4:24:d0:65:51:cf:c2:01:d9:a0:35:6b: 65:1f:a6:14:37:47:59:cd:17:8f:48:76:f1:9d:d1: 16:46:49:17:65:da:95:be:e3:1c:a4:65:c2:bc:47: 75:be:79:38:f3:f0:2f:20:9a:50:20:61:eb:82:2c: 0a:4f:a2:2e:ac:94:8f:4e:29:5a:3b:13:87:63:ea: c2:37:e9:0e:78:ba:1c:ab:5f:a1:eb:43:15:a8:b3: 2e:b5:a5:82:b6:5d:4f:a2:e4:0e:ce:0e:af:01:44: 08:09:a3:21:4f:8b:72:03:d3:3a:56:7b:be:32:ca: 0d:8a:b9:53:ce:b9:8b:14:53:a3:49:bf:07:5f:5b: 1d:60:10:ff:43:21:57:eb:47:98:00:4a:8c:34:93: 47:d2:bb:69:0f:18:e3:71:7a:cd:af:ee:43:56:73: 21:7c:17:7d:9d:76:9e:f7:7d:ed:0a:6a:5c:7e:aa: 0e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:49:F3:93:90:CB:55:4E:36:69:81:AD:01:FE:D6:DC:C4:7A:9C:84 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:0f:b8:22:22:08:89:74:f0:07:f6:e9:af:c3:ee:6a:15: 6b:db:0c:17:59:27:66:c6:c7:76:a6:d8:75:ac:bb:56:fe:49: 30:50:36:e8:77:fa:56:5e:11:a9:b6:6b:44:da:8f:3b:9f:7f: 72:6e:86:60:a4:ea:57:f8:49:d1:b4:16:2a:d3:76:76:0a:6e: 24:5d:34:50:3d:0f:9b:c1:03:26:61:c8:52:63:03:60:86:88: b3:5f:a0:c4:16:6d:6b:42:a9:28:62:86:53:09:e2:ab:86:9e: f2:a7:8e:69:c9:6e:3c:5c:0b:4f:c8:aa:91:cd:e7:e7:97:c3: 88:65:85:e9:be:bf:7e:37:28:ec:81:9f:5f:28:26:46:50:06: 9e:e2:89:06:8e:4d:ac:1e:15:9e:33:47:69:96:30:f6:7b:d9: 09:eb:21:21:32:ea:c3:1b:09:31:cc:61:df:67:8e:74:fd:80: 05:74:5c:ec:74:3e:28:86:f1:3a:fd:00:e9:82:e1:89:14:ef: 70:98:e2:86:29:78:41:a0:99:74:0d:31:56:19:34:ed:67:28: 42:5d:ab:98:75:1d:ac:e0:0e:dc:84:35:2b:0d:c1:31:c6:b6: 70:9c:e7:98:56:c4:a9:d3:e6:b7:e3:bf:9b:32:9a:24:ed:7d: 51:9b:73:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwNDI0MTU1MTQxWhcNMjUwNTAxMTU1MTQxWjAYMRYwFAYD VQQDEw02ODBhNWUwZC0wZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS70jO+V5ls+pqrn7jr0J18+2pDirzl9b2DstD4bf79iqHdC3CAn0ASe1h3u 3255CkOr8YowfSFX5CLzda5ah2lTizvjc9p7TAtf33/EJNBlUc/CAdmgNWtlH6YU N0dZzRePSHbxndEWRkkXZdqVvuMcpGXCvEd1vnk48/AvIJpQIGHrgiwKT6IurJSP TilaOxOHY+rCN+kOeLocq1+h60MVqLMutaWCtl1PouQOzg6vAUQICaMhT4tyA9M6 Vnu+MsoNirlTzrmLFFOjSb8HX1sdYBD/QyFX60eYAEqMNJNH0rtpDxjjcXrNr+5D VnMhfBd9nXae933tCmpcfqoOZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZJ85OQ y1VONmmBrQH+1tzEepyEMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4g+4IiIIiXTwB/bpr8PuahVr2wwXWSdmxsd2pth1rLtW/kkwUDbo d/pWXhGptmtE2o87n39yboZgpOpX+EnRtBYq03Z2Cm4kXTRQPQ+bwQMmYchSYwNg hoizX6DEFm1rQqkoYoZTCeKrhp7yp45pyW48XAtPyKqRzefnl8OIZYXpvr9+Nyjs gZ9fKCZGUAae4okGjk2sHhWeM0dpljD2e9kJ6yEhMurDGwkxzGHfZ450/YAFdFzs dD4ohvE6/QDpguGJFO9wmOKGKXhBoJl0DTFWGTTtZyhCXauYdR2s4A7chDUrDcEx xrZwnOeYVsSp0+a347+bMpok7X1Rm3PM -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:44 2025 by rpki-client