$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json) Hash identifier: GTz1qlXa810A/kKPjXtFb2YDGv02JRoHJ/uYhtjWMDg= Subject key identifier: 9A:C5:34:C9:6C:90:D0:84:D2:6F:21:4B:41:7E:26:F2:C7:F1:80:C6 Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Certificate serial: 19DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft Manifest number: 19A0 Signing time: Thu 24 Apr 2025 16:24:50 +0000 Manifest this update: Thu 24 Apr 2025 16:24:49 +0000 Manifest next update: Thu 01 May 2025 16:24:49 +0000 Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: Qn6fXBQX8/OlCGmswJZbs/2lkyF+scizfhmaGmz/PKU=) 2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: c2CgFARH3NGyjJVcgLSdMDavs6AC8B7rRi2PB+rzCh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6623 (0x19df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Validity Not Before: Apr 24 16:24:49 2025 GMT Not After : May 1 16:24:49 2025 GMT Subject: CN=680a65d1-a488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:6a:12:54:3b:8f:02:f1:f0:24:6b:46:a6: 0a:10:97:d5:3a:ba:5c:9a:03:fa:73:cd:fa:bc:ac: 92:ee:bf:c0:b2:70:8d:13:bb:eb:bf:29:fb:ef:e9: 43:3b:c6:d8:63:2b:8b:ec:98:2e:b0:9d:57:ff:b4: 92:45:86:ce:7b:b5:ed:c1:bb:8b:74:3d:25:03:f8: 21:7a:e0:a5:98:c8:74:be:5e:85:cb:40:ad:ed:4d: e9:c2:8e:65:40:34:d6:1c:fd:b9:e1:ac:28:26:ff: 95:0c:4c:a0:69:d4:4d:c2:11:9d:f4:63:f7:df:69: 97:84:f1:51:0c:07:0d:05:66:ea:b1:48:16:2a:1e: bb:40:e3:05:5c:6d:6c:c5:c6:03:dd:88:56:98:f9: af:fc:7e:6d:36:3f:ce:7f:88:d0:fc:fd:00:af:ed: 53:f3:f3:2b:16:17:9a:db:86:4a:53:cf:6a:e6:09: bc:ef:32:e4:e2:f3:10:e6:0a:e1:93:27:b5:b8:a9: f3:01:c3:09:29:ca:d7:77:c1:ba:b5:3e:e8:a7:11: ae:6e:82:db:11:95:67:e2:65:d8:94:19:a5:74:74: 2e:cb:4c:c8:76:3d:92:8c:9d:5d:80:b4:6a:33:18: 51:c3:e8:6b:71:5a:2e:1a:80:3e:3c:1c:9e:1e:01: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C5:34:C9:6C:90:D0:84:D2:6F:21:4B:41:7E:26:F2:C7:F1:80:C6 X509v3 Authority Key Identifier: keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d1:fd:ab:53:f0:8c:b3:fa:43:fe:b4:7e:34:99:0e:4b:48: b0:f5:f7:2b:67:50:78:30:b3:43:2e:a2:91:59:56:50:f0:88: a2:bc:b8:13:53:b8:47:ed:c3:d9:13:81:c5:48:89:4a:25:c0: aa:58:c7:cf:3e:0f:b2:3d:a7:1f:19:d6:93:3f:57:95:20:d0: 69:44:d5:3c:cf:0b:44:1d:8e:6c:3b:91:bd:1a:93:29:fb:21: b4:0d:f3:c4:f8:2b:44:86:c3:c6:2f:86:10:88:e8:28:c7:29: 1f:8e:de:1b:85:f6:44:e8:b2:4f:bb:c7:e3:72:5e:4f:8d:1d: 2e:44:0c:df:56:d9:68:d7:56:14:48:c5:9c:b6:60:81:5c:3a: 57:e2:dd:c6:6f:06:f3:25:51:43:32:8c:b4:f8:8b:7c:7b:2b: e6:ed:ee:1f:f6:c7:5f:21:cf:52:d2:31:86:28:58:8d:56:37: 14:f4:c5:d6:1b:e1:79:c4:4f:c6:0a:9c:ef:8a:9a:43:ef:c3: 39:2a:c7:0d:c0:3d:60:88:01:83:75:71:bc:cf:32:a1:c3:37: 89:ca:2b:95:2e:99:67:f6:9b:fb:3a:85:b2:09:58:0e:1b:24: d4:9f:79:8f:47:fc:83:39:aa:57:b8:6d:2f:db:9d:c0:85:81: 59:e3:22:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw OTQ2RUFCQzQwHhcNMjUwNDI0MTYyNDQ5WhcNMjUwNTAxMTYyNDQ5WjAYMRYwFAYD VQQDEw02ODBhNjVkMS1hNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5X5qElQ7jwLx8CRrRqYKEJfVOrpcmgP6c836vKyS7r/AsnCNE7vrvyn77+lD O8bYYyuL7JgusJ1X/7SSRYbOe7XtwbuLdD0lA/gheuClmMh0vl6Fy0Ct7U3pwo5l QDTWHP254awoJv+VDEygadRNwhGd9GP332mXhPFRDAcNBWbqsUgWKh67QOMFXG1s xcYD3YhWmPmv/H5tNj/Of4jQ/P0Ar+1T8/MrFhea24ZKU89q5gm87zLk4vMQ5grh kye1uKnzAcMJKcrXd8G6tT7opxGuboLbEZVn4mXYlBmldHQuy0zIdj2SjJ1dgLRq MxhRw+hrcVouGoA+PByeHgHCewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrFNMls kNCE0m8hS0F+JvLH8YDGMB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5 UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA00f2rU/CMs/pD/rR+NJkOS0iw9fcrZ1B4MLNDLqKRWVZQ8IiivLgT U7hH7cPZE4HFSIlKJcCqWMfPPg+yPacfGdaTP1eVINBpRNU8zwtEHY5sO5G9GpMp +yG0DfPE+CtEhsPGL4YQiOgoxykfjt4bhfZE6LJPu8fjcl5PjR0uRAzfVtlo11YU SMWctmCBXDpX4t3GbwbzJVFDMoy0+It8eyvm7e4f9sdfIc9S0jGGKFiNVjcU9MXW G+F5xE/GCpzvippD78M5KscNwD1giAGDdXG8zzKhwzeJyiuVLpln9pv7OoWyCVgO GyTUn3mPR/yDOapXuG0v253AhYFZ4yKW -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:42 2025 by rpki-client