$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json) Hash identifier: 0id1OfDB40CbZe9KPAwFkquEtQ/jWxZIdiEEfdM2Ao0= Subject key identifier: 93:9E:CE:14:9D:26:ED:AC:18:B1:3D:05:CB:D2:E4:C9:14:33:C9:E5 Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft Manifest number: 01D9 Signing time: Fri 25 Apr 2025 01:55:46 +0000 Manifest this update: Fri 25 Apr 2025 01:55:45 +0000 Manifest next update: Fri 02 May 2025 01:55:45 +0000 Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: d7uWo8nBFCvpUdzqqp71nWMyX7dfbstgf1mcPHGGjII=) 2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: QhihCyN5bbG8v0q4aS9nZCy8ZGeOjrQ8K/ICbkjXPrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Apr 25 01:55:45 2025 GMT Not After : May 2 01:55:45 2025 GMT Subject: CN=680aeba2-a48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:6a:99:ee:3f:c7:50:fa:c5:7a:a1:5d:ad: fd:76:a7:86:00:7c:83:c0:0d:a9:5a:ba:d5:cc:9d: 49:24:4e:52:a0:4e:37:d4:ca:79:38:81:a7:39:14: 64:94:cf:de:b4:dd:61:2d:f0:39:a7:47:d6:76:25: 57:d2:21:d9:e1:d6:bc:e2:b5:4c:ff:fc:15:cd:e3: ba:9a:a1:44:11:69:25:e0:f4:9c:66:e3:63:ab:c1: 36:5c:b5:93:d7:43:87:d2:fc:0f:72:48:ad:29:be: b0:d2:ba:7a:48:1d:e0:26:46:9b:8e:d6:29:21:2a: 9a:cc:a4:af:06:5b:86:16:44:08:c9:9c:8f:47:20: 96:4f:5c:5f:5b:18:be:91:7e:e9:ce:f5:73:8b:e3: f4:3c:70:fd:dd:fa:d6:a7:24:bd:ad:3e:b8:f1:27: da:b3:b6:a7:ab:d8:8d:48:ce:e5:00:bd:63:48:f6: a0:d3:29:1f:24:79:34:81:3d:6c:cf:e0:b8:8b:43: b8:84:18:69:36:d7:87:1a:d1:2e:a1:04:98:aa:e1: a6:01:dc:9e:9a:81:c6:73:e9:4d:5e:47:d0:ed:77: 84:94:9e:79:e7:56:fb:e1:c3:dd:f8:ec:d0:8a:6d: a5:3b:ee:06:82:21:cf:ff:1b:3f:5b:e3:75:6f:30: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9E:CE:14:9D:26:ED:AC:18:B1:3D:05:CB:D2:E4:C9:14:33:C9:E5 X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d0:34:69:d1:0d:36:e4:24:f4:4b:ac:f9:da:0e:70:a9:ee: 59:e9:77:a1:85:2b:a9:5b:e5:ed:86:03:c9:70:d4:6a:14:1b: 47:d5:31:65:49:9a:43:95:05:90:c0:58:1a:ab:8c:ad:50:43: c5:fa:0f:60:ae:80:aa:ff:1a:1e:58:cd:15:b0:7c:71:34:70: 44:35:6b:57:1b:98:d9:a2:e9:f2:d4:dc:7e:97:83:13:69:08: 30:c6:59:ee:0d:01:41:f6:62:52:df:c2:d5:bd:3a:47:78:d3: cd:c0:99:6d:9f:ee:51:e1:ff:e2:5c:66:a0:fb:bc:86:14:f8: e0:1f:e0:21:d1:c1:7a:3b:00:41:dc:fa:5b:0b:fa:b3:3a:02: 59:58:39:e2:1e:7d:da:97:0c:dc:fb:b9:e3:8c:f7:a9:b5:59: 78:ea:68:92:d8:65:75:8c:21:19:b3:6b:a1:0a:c0:57:f9:55: 77:31:40:64:13:97:05:fa:85:37:2d:3f:e0:b3:56:63:47:2e: c9:8d:64:bf:c7:4f:72:b7:f9:7d:ed:11:5c:5b:7a:59:13:c3: b9:61:4c:8f:38:48:35:51:29:de:d7:51:20:ee:51:73:f3:d4: f2:be:24:f4:71:9b:16:9f:94:8c:21:60:0d:66:88:b8:2c:b9: f3:54:68:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUwNDI1MDE1NTQ1WhcNMjUwNTAyMDE1NTQ1WjAYMRYwFAYD VQQDEw02ODBhZWJhMi1hNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziVqme4/x1D6xXqhXa39dqeGAHyDwA2pWrrVzJ1JJE5SoE431Mp5OIGnORRk lM/etN1hLfA5p0fWdiVX0iHZ4da84rVM//wVzeO6mqFEEWkl4PScZuNjq8E2XLWT 10OH0vwPckitKb6w0rp6SB3gJkabjtYpISqazKSvBluGFkQIyZyPRyCWT1xfWxi+ kX7pzvVzi+P0PHD93frWpyS9rT648Sfas7anq9iNSM7lAL1jSPag0ykfJHk0gT1s z+C4i0O4hBhpNteHGtEuoQSYquGmAdyemoHGc+lNXkfQ7XeElJ5551b74cPd+OzQ im2lO+4GgiHP/xs/W+N1bzCLGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOezhSd Ju2sGLE9BcvS5MkUM8nlMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq0DRp0Q025CT0S6z52g5wqe5Z6XehhSupW+XthgPJcNRqFBtH1TFl SZpDlQWQwFgaq4ytUEPF+g9groCq/xoeWM0VsHxxNHBENWtXG5jZouny1Nx+l4MT aQgwxlnuDQFB9mJS38LVvTpHeNPNwJltn+5R4f/iXGag+7yGFPjgH+Ah0cF6OwBB 3PpbC/qzOgJZWDniHn3alwzc+7njjPeptVl46miS2GV1jCEZs2uhCsBX+VV3MUBk E5cF+oU3LT/gs1ZjRy7JjWS/x09yt/l97RFcW3pZE8O5YUyPOEg1USne11Eg7lFz 89TyviT0cZsWn5SMIWANZoi4LLnzVGja -----END CERTIFICATE-----Generated at Sat Apr 26 05:57:24 2025 by rpki-client