$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft File: X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json) Hash identifier: 7dnJThuawKAeP1G7+OJWmESu5xO7F59Tad1keNmP070= Subject key identifier: 8F:6F:7B:AB:E2:32:AB:1D:A7:1B:6C:2A:FF:C0:87:C0:51:75:FC:C4 Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft Manifest number: F3 Signing time: Fri 25 Apr 2025 04:18:27 +0000 Manifest this update: Fri 25 Apr 2025 04:18:27 +0000 Manifest next update: Fri 02 May 2025 04:18:26 +0000 Files and hashes: 1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: nGGMDmRwkKZQ+PwuCgvFBu+IYjNOmVJUWOn2Oiy0JGc=) 2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: ZtCY4of0oNZSmT+bU0NNMOI3a0wB7P9BZQfRH7MJK3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Validity Not Before: Apr 25 04:18:27 2025 GMT Not After : May 2 04:18:26 2025 GMT Subject: CN=680b0d13-f4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:4c:cf:d8:a9:00:11:f9:3e:c4:d8:15:45: 7d:98:df:20:05:b8:ec:df:21:a4:7b:4f:ec:d8:74: d7:72:b0:25:cd:9e:31:43:e4:e9:96:1c:e8:ee:5f: cf:94:0c:4c:a6:5f:c9:a7:43:ed:86:42:0d:6e:ba: ff:62:93:39:4d:77:fa:18:52:a9:bb:be:3f:c7:87: 30:4c:68:b5:29:1c:1b:80:59:85:2b:6a:60:97:cf: 55:c2:f9:a1:1f:de:49:1f:62:13:58:8d:25:50:0e: 83:c1:ea:17:d0:ec:de:83:21:db:95:e2:d6:9f:08: 69:16:bd:13:fb:ce:df:d3:9c:25:86:fa:71:9c:b4: 62:2c:cf:7c:34:22:dd:61:3c:8a:52:d9:54:67:3a: 9a:d0:dd:ce:73:43:e7:73:69:a9:2c:4d:c3:5f:0e: c0:3f:5b:00:ff:0d:b7:68:5b:b9:10:0a:45:5b:c7: 6d:b9:65:eb:41:7f:05:1c:cd:a5:52:5d:93:9f:b7: 6f:e9:1b:7a:e7:a6:2f:7f:a9:2e:fa:17:a2:38:4a: c4:92:0b:1b:cd:0d:3e:e5:66:e3:e7:4d:be:ca:a5: e2:a0:74:06:71:c4:6d:46:2f:78:e0:18:1a:e0:bd: 79:2f:eb:26:4d:df:fc:5f:b1:9f:21:19:5f:3c:06: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6F:7B:AB:E2:32:AB:1D:A7:1B:6C:2A:FF:C0:87:C0:51:75:FC:C4 X509v3 Authority Key Identifier: keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:31:8b:6a:36:4d:aa:01:a9:31:22:80:c0:92:7f:e8:fb: de:61:ae:a0:14:5b:6c:3f:df:e6:e0:b1:c5:00:0b:65:6d:e1: f5:76:82:17:b1:62:53:3d:43:08:cd:e6:f7:af:55:eb:85:e4: 3c:db:a3:c1:41:2a:0a:f4:ad:98:3e:1c:bd:5e:8b:ee:3b:8d: 65:ee:7d:38:8b:9e:04:04:14:2b:b9:7f:54:7d:93:75:98:48: a4:94:9e:27:5f:d1:46:83:7e:75:9c:65:c1:14:6f:cb:ac:a9: ea:d7:a5:c5:53:9e:50:f4:d1:f5:78:2f:c4:e3:7b:46:f3:14: 9c:a4:fb:56:e0:ee:a7:9c:78:3f:d0:9c:74:52:57:72:b9:63: ee:da:13:f5:e2:5c:40:2a:c4:27:b5:ce:a5:9b:42:d5:44:d4: 99:19:96:99:03:bf:c4:a9:78:3b:b1:d7:1b:96:db:ad:71:93: 4a:65:6c:54:65:f2:d2:5a:80:95:71:d6:ee:18:cf:01:ea:0f: cb:32:4b:ce:ed:36:ad:37:28:18:76:27:95:0d:66:9c:d2:a4: 68:3f:3b:43:ec:8f:bb:81:a9:05:b3:22:cd:e5:50:c1:2a:bb: 7d:b5:e7:2b:f8:6d:f7:48:d6:53:5d:83:62:a4:7a:d2:19:00: eb:f1:01:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYyOTYxMTAvBgNVBAUTKDVGREJENURGNTMyRDJDNTYyMDZGN0IxMTJFN0JCQjMw NTdBMzk5OTAwHhcNMjUwNDI1MDQxODI3WhcNMjUwNTAyMDQxODI2WjAYMRYwFAYD VQQDEw02ODBiMGQxMy1mNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3JMz9ipABH5PsTYFUV9mN8gBbjs3yGke0/s2HTXcrAlzZ4xQ+Tplhzo7l/P lAxMpl/Jp0PthkINbrr/YpM5TXf6GFKpu74/x4cwTGi1KRwbgFmFK2pgl89Vwvmh H95JH2ITWI0lUA6DweoX0OzegyHbleLWnwhpFr0T+87f05wlhvpxnLRiLM98NCLd YTyKUtlUZzqa0N3Oc0Pnc2mpLE3DXw7AP1sA/w23aFu5EApFW8dtuWXrQX8FHM2l Ul2Tn7dv6Rt656Yvf6ku+heiOErEkgsbzQ0+5Wbj502+yqXioHQGccRtRi944Bga 4L15L+smTd/8X7GfIRlfPAZwqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9ve6vi MqsdpxtsKv/Ah8BRdfzEMB8GA1UdIwQYMBaAFF/b1d9TLSxWIG97ES57uzBXo5mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI5Ni80MkEwQjcxQUFG NUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExGWWdiM3NSTG51N01GZWpt WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g5dlYzMU10TEZZZ2Izc1JMbnU3TUZlam1aQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjI5Ni80MkEwQjcxQUFGNUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExG WWdiM3NSTG51N01GZWptWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GjGLajZNqgGpMSKAwJJ/6PveYa6gFFtsP9/m4LHFAAtlbeH1doIX sWJTPUMIzeb3r1XrheQ826PBQSoK9K2YPhy9XovuO41l7n04i54EBBQruX9UfZN1 mEiklJ4nX9FGg351nGXBFG/LrKnq16XFU55Q9NH1eC/E43tG8xScpPtW4O6nnHg/ 0Jx0UldyuWPu2hP14lxAKsQntc6lm0LVRNSZGZaZA7/EqXg7sdcbltutcZNKZWxU ZfLSWoCVcdbuGM8B6g/LMkvO7TatNygYdieVDWac0qRoPztD7I+7gakFsyLN5VDB Krt9tecr+G33SNZTXYNipHrSGQDr8QHO -----END CERTIFICATE-----Generated at Sat Apr 26 14:31:15 2025 by rpki-client