$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft File: 9bGvaeQg85sCMjAnVBm6VPjOGos.mft (raw, json) Hash identifier: DImGSvjgKXnIt+8WIf/+uJB7z1mQYopB5TjMPLxGp8k= Subject key identifier: E7:B1:7E:33:85:49:F2:A2:7E:F7:53:54:64:93:90:14:9D:F9:FC:FC Authority key identifier: F5:B1:AF:69:E4:20:F3:9B:02:32:30:27:54:19:BA:54:F8:CE:1A:8B Certificate issuer: /CN=A9117CE3/serialNumber=F5B1AF69E420F39B023230275419BA54F8CE1A8B Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bGvaeQg85sCMjAnVBm6VPjOGos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft Manifest number: 3E Signing time: Sat 05 Apr 2025 05:41:38 +0000 Manifest this update: Sat 05 Apr 2025 05:41:37 +0000 Manifest next update: Sat 12 Apr 2025 05:41:37 +0000 Files and hashes: 1: 9bGvaeQg85sCMjAnVBm6VPjOGos.crl (hash: mApQ99NAUcVRpcnbpK0zC67Ub8rQw2HfwCE0wWC2ioY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.crl rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bGvaeQg85sCMjAnVBm6VPjOGos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3 Validity Not Before: Apr 5 05:41:37 2025 GMT Not After : Apr 12 05:41:37 2025 GMT Subject: CN=67f0c291-af60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:d9:ae:d3:b2:5e:b3:5b:10:b2:0a:07:4f: f6:eb:f3:e1:f2:4c:14:5c:19:e0:78:eb:b8:b8:b8: 47:02:32:ad:98:a6:77:bb:ae:02:ff:47:6b:36:8a: 37:d4:01:e4:8f:09:14:d5:f6:c1:a8:bc:a9:b0:34: ac:08:e0:ef:9a:f3:f6:ce:54:c9:93:64:ea:a0:4b: 23:d6:8f:cb:ec:37:48:88:15:e2:75:00:ff:1e:ca: 8c:f2:6e:28:8b:19:6b:bf:26:30:47:b2:87:3a:9d: b3:12:34:ce:fb:ce:f4:94:45:54:a3:57:e9:c0:e3: df:2e:ee:ed:94:e0:e5:b6:aa:9d:b9:64:82:59:7d: 70:47:3c:6d:ae:3e:53:2a:cf:09:b9:2f:3d:68:1b: 0c:db:7c:32:3f:e8:62:b4:1f:36:42:15:64:fd:a2: 4a:7e:ea:83:3a:02:8f:88:ce:65:16:0f:91:a7:bd: 5f:5e:2b:3f:06:70:4d:d9:c4:91:d6:41:ea:c0:45: 87:a5:99:1c:bb:23:58:38:1b:5f:dc:be:b2:55:c5: e2:67:31:2f:84:45:3a:1a:4d:74:27:47:72:f0:50: 77:f3:f4:67:82:0a:02:1d:67:52:f0:1a:81:06:1a: 75:c4:39:57:0c:af:d7:39:32:65:d0:cf:38:dc:7b: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:7E:33:85:49:F2:A2:7E:F7:53:54:64:93:90:14:9D:F9:FC:FC X509v3 Authority Key Identifier: keyid:F5:B1:AF:69:E4:20:F3:9B:02:32:30:27:54:19:BA:54:F8:CE:1A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bGvaeQg85sCMjAnVBm6VPjOGos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/2FD45F78B45B11EF94E6745DC4F9AE02/9bGvaeQg85sCMjAnVBm6VPjOGos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e4:11:9b:c6:55:e2:8b:09:7e:96:62:5b:b4:bc:41:bc:be: 23:d5:1e:a4:d2:89:d1:5d:0e:d1:cc:70:3b:ff:2f:d4:dd:7d: 9c:c2:e9:67:18:c3:6a:6f:e9:eb:4d:64:28:34:0b:35:a4:49: ef:73:41:8b:ac:97:47:74:90:a1:bc:d0:d3:4f:08:f0:1a:0a: 90:87:7a:3b:c6:f2:43:e3:52:4c:7d:bc:ae:85:01:9a:3c:eb: 9a:f0:49:4c:66:47:93:1c:f5:ae:b3:37:7c:8a:d3:50:b4:bf: e4:24:18:b6:ac:a7:31:0d:e7:e4:ad:c7:fe:19:87:55:19:db: b5:0f:95:e9:a9:47:6b:a9:da:89:cb:9c:b4:6d:d6:6d:4a:c5: c4:7d:20:2c:57:1f:06:4d:47:02:22:a8:78:5a:7f:b9:78:29: 88:69:13:2e:8f:03:d2:f1:ed:50:7b:8f:26:af:4c:e5:50:90: a9:8b:76:1e:2f:ec:40:a8:4e:3d:8e:0e:e3:4f:0b:85:7c:5a: b2:24:7a:05:b1:35:80:3b:7d:55:d2:d1:d3:34:f3:c3:3e:12: b3:f1:23:51:fe:3e:99:f9:a6:84:d9:e0:5f:07:0c:6b:49:e1: 62:e3:58:82:65:7e:ea:98:b4:57:16:a7:dc:ae:fa:13:79:dd: fb:df:b9:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NFMzExMC8GA1UEBRMoRjVCMUFGNjlFNDIwRjM5QjAyMzIzMDI3NTQxOUJBNTRG OENFMUE4QjAeFw0yNTA0MDUwNTQxMzdaFw0yNTA0MTIwNTQxMzdaMBgxFjAUBgNV BAMTDTY3ZjBjMjkxLWFmNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSU9mu07Jes1sQsgoHT/br8+HyTBRcGeB467i4uEcCMq2Ypne7rgL/R2s2ijfU AeSPCRTV9sGovKmwNKwI4O+a8/bOVMmTZOqgSyPWj8vsN0iIFeJ1AP8eyozybiiL GWu/JjBHsoc6nbMSNM77zvSURVSjV+nA498u7u2U4OW2qp25ZIJZfXBHPG2uPlMq zwm5Lz1oGwzbfDI/6GK0HzZCFWT9okp+6oM6Ao+IzmUWD5GnvV9eKz8GcE3ZxJHW QerARYelmRy7I1g4G1/cvrJVxeJnMS+ERToaTXQnR3LwUHfz9GeCCgIdZ1LwGoEG GnXEOVcMr9c5MmXQzzjce7gpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU57F+M4VJ 8qJ+91NUZJOQFJ35/PwwHwYDVR0jBBgwFoAU9bGvaeQg85sCMjAnVBm6VPjOGosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0UzLzJGRDQ1Rjc4QjQ1 QjExRUY5NEU2NzQ1REM0RjlBRTAyLzliR3ZhZVFnODVzQ01qQW5WQm02VlBqT0dv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWJHdmFlUWc4NXNDTWpBblZCbTZWUGpPR29zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0UzLzJGRDQ1Rjc4QjQ1QjExRUY5NEU2NzQ1REM0RjlBRTAyLzliR3ZhZVFnODVz Q01qQW5WQm02VlBqT0dvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrkEZvGVeKLCX6WYlu0vEG8viPVHqTSidFdDtHMcDv/L9TdfZzC6WcY w2pv6etNZCg0CzWkSe9zQYusl0d0kKG80NNPCPAaCpCHejvG8kPjUkx9vK6FAZo8 65rwSUxmR5Mc9a6zN3yK01C0v+QkGLaspzEN5+Stx/4Zh1UZ27UPlempR2up2onL nLRt1m1KxcR9ICxXHwZNRwIiqHhaf7l4KYhpEy6PA9Lx7VB7jyavTOVQkKmLdh4v 7ECoTj2ODuNPC4V8WrIkegWxNYA7fVXS0dM088M+ErPxI1H+Ppn5poTZ4F8HDGtJ 4WLjWIJlfuqYtFcWp9yu+hN53fvfuZY= -----END CERTIFICATE-----Generated at Sun Apr 6 02:04:23 2025 by rpki-client