$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft File: t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json) Hash identifier: midSwIvqkRQCvPW+naAUfcR2Km4/VMORXc00Dn4wq8g= Subject key identifier: D7:8F:9D:53:F5:3D:82:69:73:3E:23:A9:DE:9B:04:93:23:A3:A3:86 Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 Certificate issuer: /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft Manifest number: 0200 Signing time: Tue 15 Apr 2025 01:43:00 +0000 Manifest this update: Tue 15 Apr 2025 01:43:00 +0000 Manifest next update: Tue 22 Apr 2025 01:43:00 +0000 Files and hashes: 1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: KgJaQnADM2OQdlRrhkv3sGLSQKRDugFTvdX/JhRsCdI=) 2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: 90Bhpdbkdnfedi3OPca5alDQUSOpnC2UaqisbVy8klY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Validity Not Before: Apr 15 01:43:00 2025 GMT Not After : Apr 22 01:43:00 2025 GMT Subject: CN=67fdb9a4-98e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:3d:e2:8d:23:64:78:70:34:87:98:7a:91: 66:63:28:15:dc:00:31:ba:61:cb:b7:d9:cc:fc:04: 4c:f3:ed:3c:5b:1c:45:5b:4e:73:df:d8:5a:27:34: 40:d7:9c:16:67:df:91:1d:41:5d:eb:18:a9:47:05: 6a:79:e1:a8:6f:94:fd:ca:32:1a:10:4b:8f:4b:80: cd:1a:88:1d:98:69:42:c8:cd:0d:fe:f4:8d:08:d8: 33:d9:5f:1a:9a:90:19:0f:52:c2:d7:b8:8c:3a:35: 2d:ba:44:ed:44:cf:9f:1e:77:d9:f4:c5:31:35:e8: 42:37:a7:fc:d7:db:f9:bd:e6:ec:35:94:5e:bb:97: 37:5d:19:7a:a9:14:52:61:be:94:95:04:78:50:d7: 4c:4e:54:40:c5:aa:38:11:fe:1e:be:b9:f6:1f:d1: c8:ad:59:cc:38:07:84:3f:8f:1c:42:8b:d1:60:84: 6d:4d:a3:6e:c9:0d:56:ff:7e:b1:96:14:3e:f7:21: 92:26:b5:9a:f4:09:ea:dc:61:47:04:71:3c:ca:d4: 5e:14:b4:a0:8e:d2:c4:87:c9:ea:d3:41:90:f6:b9: df:21:c2:7a:e3:e5:09:4b:5e:49:55:0d:5d:e5:bb: 9c:08:47:a4:b4:85:04:15:4d:a2:55:e9:ed:dd:17: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8F:9D:53:F5:3D:82:69:73:3E:23:A9:DE:9B:04:93:23:A3:A3:86 X509v3 Authority Key Identifier: keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:99:5b:cb:0b:92:79:5d:30:d2:d0:37:df:f9:1f:a5:15:32: 16:be:93:7a:3d:49:87:62:e9:28:bc:b2:1e:05:01:0a:3e:ea: e1:1c:c8:30:04:42:5b:13:b6:05:23:01:a2:c6:9b:91:62:c1: f1:3f:99:af:d2:04:e2:90:07:71:0f:ce:2c:ff:aa:20:51:e0: 37:3e:5c:30:96:b6:c2:4c:3e:e1:6e:0d:d9:8f:c8:38:74:19: f1:31:69:ac:97:6a:55:d1:91:12:22:6a:70:5e:e1:5a:f2:26: ca:57:1f:7e:63:3f:71:4f:f8:33:d2:a6:c1:b2:f0:07:94:8a: 17:68:7e:72:cb:f8:19:5d:dc:ad:6a:8d:bd:24:70:6d:6c:e1: 96:4e:d0:fd:56:3c:15:e0:ff:3d:93:a9:90:b4:c5:43:ba:bb: 02:d9:57:08:1c:a4:57:6d:96:d6:ce:7f:d4:8f:20:32:8a:42: f0:70:22:9e:fc:fe:03:0c:11:6e:b7:b1:42:a0:b0:2c:0f:25: 73:bf:38:d2:e1:25:c8:0f:21:88:c8:0e:43:b1:b0:86:04:df: 34:03:b5:e6:21:08:0a:7f:5a:59:71:b2:fe:ff:7c:5f:bb:b0: 50:7d:96:d0:aa:2e:0a:b2:5d:10:40:6e:32:6b:b6:63:7e:6d: ae:a7:17:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RjYxMTAvBgNVBAUTKEI3RDRBQTRGNUQ3MjMxQUY0RTc0N0Y3NzIyNDVBQzAz NzEwMjEwRjAwHhcNMjUwNDE1MDE0MzAwWhcNMjUwNDIyMDE0MzAwWjAYMRYwFAYD VQQDEw02N2ZkYjlhNC05OGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNk94o0jZHhwNIeYepFmYygV3AAxumHLt9nM/ARM8+08WxxFW05z39haJzRA 15wWZ9+RHUFd6xipRwVqeeGob5T9yjIaEEuPS4DNGogdmGlCyM0N/vSNCNgz2V8a mpAZD1LC17iMOjUtukTtRM+fHnfZ9MUxNehCN6f819v5vebsNZReu5c3XRl6qRRS Yb6UlQR4UNdMTlRAxao4Ef4evrn2H9HIrVnMOAeEP48cQovRYIRtTaNuyQ1W/36x lhQ+9yGSJrWa9Anq3GFHBHE8ytReFLSgjtLEh8nq00GQ9rnfIcJ64+UJS15JVQ1d 5bucCEektIUEFU2iVent3Rer4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNePnVP1 PYJpcz4jqd6bBJMjo6OGMB8GA1UdIwQYMBaAFLfUqk9dcjGvTnR/dyJFrANxAhDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGNi8xM0E0MjBBODM0 MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1hOU9kSDkzSWtXc0EzRUNF UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5U3FUMTF5TWE5T2RIOTNJa1dzQTNFQ0VQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGNi8xM0E0MjBBODM0MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1h OU9kSDkzSWtXc0EzRUNFUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5mVvLC5J5XTDS0Dff+R+lFTIWvpN6PUmHYukovLIeBQEKPurhHMgw BEJbE7YFIwGixpuRYsHxP5mv0gTikAdxD84s/6ogUeA3PlwwlrbCTD7hbg3Zj8g4 dBnxMWmsl2pV0ZESImpwXuFa8ibKVx9+Yz9xT/gz0qbBsvAHlIoXaH5yy/gZXdyt ao29JHBtbOGWTtD9VjwV4P89k6mQtMVDursC2VcIHKRXbZbWzn/UjyAyikLwcCKe /P4DDBFut7FCoLAsDyVzvzjS4SXIDyGIyA5DsbCGBN80A7XmIQgKf1pZcbL+/3xf u7BQfZbQqi4Ksl0QQG4ya7Zjfm2upxfv -----END CERTIFICATE-----Generated at Wed Apr 16 17:00:47 2025 by rpki-client