$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: oJpRwlp2fjeHkprAp53P7lO2rvvHGjgYNLwKJHN82CU= Subject key identifier: C9:05:08:59:8C:C2:A1:79:5C:82:8C:73:BA:16:4A:E1:46:D0:BA:58 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 117E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 117A Signing time: Thu 10 Apr 2025 17:13:48 +0000 Manifest this update: Thu 10 Apr 2025 17:13:48 +0000 Manifest next update: Thu 17 Apr 2025 17:13:48 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: uZag199LF12DjpiDsCY+QSv+6KwftW73/Onr4S14DQk=) 2: FEA22F60A5F111EF9C230280C4F9AE02.roa (hash: Jbt7n2ZRFDuS80TPLIamwTYwNZ2fv7lYVuWS7NZ1xLU=) 3: 113E8FC0A5F111EFABB09F7DC4F9AE02.roa (hash: jK4kVBYkhuumATZBB1rJMfMRjn7ETtAHz010Y63PbKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4478 (0x117e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Apr 10 17:13:48 2025 GMT Not After : Apr 17 17:13:48 2025 GMT Subject: CN=67f7fc4c-573d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:d7:50:ba:46:2b:5e:fa:24:df:38:06:ee: f1:40:8b:89:16:d7:8c:52:c7:27:e6:3a:0f:f0:28: 6b:78:1f:e3:c9:ec:80:b0:48:f4:70:ac:03:49:3f: ea:fd:2c:79:5c:92:a4:36:c5:f1:20:e4:dd:9a:bd: d6:39:04:b1:d1:64:27:d5:19:ff:9a:ca:3e:02:a5: a7:46:d6:65:2b:60:e7:0e:ae:31:cc:77:f7:79:b3: c9:35:95:ec:1b:db:b5:29:5f:d4:06:7c:20:3b:28: 5c:2f:8d:5d:47:30:5e:90:38:ed:27:97:f5:0e:37: 8e:66:93:ec:cd:2b:c5:d2:a2:94:2f:3a:aa:a1:c1: ed:c6:38:ee:7d:4a:18:3a:36:76:60:ba:ca:c0:19: 3f:07:be:a8:68:a7:4a:6f:d1:b6:59:9b:a6:53:11: 66:6e:a2:e5:e7:4d:19:e9:a1:d5:6f:0a:b3:0a:b5: 26:56:dc:37:0b:6e:d7:51:68:a3:bf:e8:6e:c5:1b: 77:fe:33:67:83:55:81:1e:74:fc:62:80:4a:23:cb: a9:28:37:23:5f:47:10:31:15:1b:05:58:20:bd:83: 6b:fd:17:9f:73:33:71:f8:3e:2c:de:94:fe:22:2a: a4:71:5e:36:d5:1e:c4:7e:f3:b0:ca:59:46:8c:58: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:05:08:59:8C:C2:A1:79:5C:82:8C:73:BA:16:4A:E1:46:D0:BA:58 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:47:ef:4e:f2:f3:1f:95:f0:ef:44:85:2e:16:56:ac:5d:ff: 79:4f:e8:9e:c5:57:c0:9a:65:be:73:80:75:6e:88:05:41:15: d7:5a:37:1b:e3:ff:78:34:b9:a6:ee:0a:fb:60:fa:b6:23:8a: b8:f6:4f:ca:41:d5:42:d7:de:b0:54:a4:71:70:2f:5c:8a:54: 68:b2:7a:86:03:fb:20:f0:d8:f7:db:67:f8:80:3e:3b:d9:95: 0b:88:21:a4:dd:be:04:64:6c:c6:3e:d4:9f:8e:10:29:ff:57: 05:10:46:9b:80:72:49:7b:3b:0e:ee:3f:bc:49:76:f9:91:f1: 56:92:de:64:34:dc:ae:a1:09:e7:42:b6:62:2e:89:46:48:9a: 00:a4:ec:cc:0f:ee:74:ed:6f:c0:bb:8d:99:57:25:31:e2:ca: c8:11:e6:9b:9c:ef:fd:d0:22:60:b8:33:6a:02:48:f4:be:4f: 34:e8:d4:fc:df:1b:9d:e0:35:7a:6d:8c:a5:43:55:66:06:9f: 8b:0e:81:3d:64:d6:34:f1:74:ae:48:79:8f:fa:5f:6f:aa:d6: 5b:a4:75:f8:4c:0d:c2:e8:7c:7c:c0:15:c1:b6:0d:be:71:5a: 39:5d:f0:af:c9:ce:b4:fe:f6:16:8d:87:67:e0:12:a4:99:5a: 99:bf:d9:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNDEwMTcxMzQ4WhcNMjUwNDE3MTcxMzQ4WjAYMRYwFAYD VQQDEw02N2Y3ZmM0Yy01NzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA063XULpGK176JN84Bu7xQIuJFteMUscn5joP8ChreB/jyeyAsEj0cKwDST/q /Sx5XJKkNsXxIOTdmr3WOQSx0WQn1Rn/mso+AqWnRtZlK2DnDq4xzHf3ebPJNZXs G9u1KV/UBnwgOyhcL41dRzBekDjtJ5f1DjeOZpPszSvF0qKULzqqocHtxjjufUoY OjZ2YLrKwBk/B76oaKdKb9G2WZumUxFmbqLl500Z6aHVbwqzCrUmVtw3C27XUWij v+huxRt3/jNng1WBHnT8YoBKI8upKDcjX0cQMRUbBVggvYNr/RefczNx+D4s3pT+ IiqkcV421R7EfvOwyllGjFjbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkFCFmM wqF5XIKMc7oWSuFG0LpYMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPR+9O8vMflfDvRIUuFlasXf95T+iexVfAmmW+c4B1bogFQRXXWjcb 4/94NLmm7gr7YPq2I4q49k/KQdVC196wVKRxcC9cilRosnqGA/sg8Nj322f4gD47 2ZULiCGk3b4EZGzGPtSfjhAp/1cFEEabgHJJezsO7j+8SXb5kfFWkt5kNNyuoQnn QrZiLolGSJoApOzMD+507W/Au42ZVyUx4srIEeabnO/90CJguDNqAkj0vk806NT8 3xud4DV6bYylQ1VmBp+LDoE9ZNY08XSuSHmP+l9vqtZbpHX4TA3C6Hx8wBXBtg2+ cVo5XfCvyc60/vYWjYdn4BKkmVqZv9mM -----END CERTIFICATE-----Generated at Sat Apr 12 17:40:55 2025 by rpki-client