$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: jg+qGVWSnIExZ64URKQXCsMhFWLQniiNGhb7DUhYfms= Subject key identifier: 64:45:36:80:66:4F:E6:F7:AB:46:3C:88:09:B6:0E:2F:2E:44:B2:95 Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 0379 Signing time: Sat 29 Mar 2025 01:07:44 +0000 Manifest this update: Sat 29 Mar 2025 01:07:44 +0000 Manifest next update: Sat 05 Apr 2025 01:07:44 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: 8alfGfO4zVZRWEkafZDHMmr2lTnv6/tvyNo5gICaH50=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: guTq71O2LSxBtq9wp1j3np+TPnuYZq23yDrd9yyvAgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32 Validity Not Before: Mar 29 01:07:44 2025 GMT Not After : Apr 5 01:07:44 2025 GMT Subject: CN=67e747e0-dbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:f0:06:73:c3:51:c7:b0:1d:49:c5:ce:04: 56:52:f7:7b:20:65:dd:de:03:47:f2:84:bd:28:1a: 1f:90:ac:bb:69:23:44:15:5b:37:32:c4:70:25:67: 61:32:2d:c4:fd:12:e1:f1:08:0a:eb:58:34:df:4e: 7f:0a:af:05:0f:6d:a9:72:21:6f:ea:51:4d:22:1a: 76:03:0d:9f:7f:c7:83:56:86:3d:03:8e:89:ff:3d: 2a:6e:dc:bb:be:21:e6:5b:2a:72:61:70:5a:b0:1a: ed:df:9d:a8:d9:04:b7:15:0f:5d:96:e7:4e:47:db: e4:87:84:53:28:7b:73:60:1b:d8:54:bc:d5:ea:24: da:0a:b3:54:07:a2:0d:d6:62:55:c9:8a:b9:80:3e: 07:ac:ce:45:23:09:be:f1:98:64:94:38:1d:17:4b: 1d:e3:06:60:88:4d:a4:24:e0:f2:6a:e2:21:81:1a: e9:3b:35:2b:6a:a2:21:79:d1:b4:1b:0b:b5:3a:e7: 29:ae:e8:3a:03:21:67:d6:1c:1a:9f:b8:9c:b3:a8: f8:b2:58:b3:3b:f7:05:49:6b:6d:61:de:40:4a:44: 9f:c7:4c:a0:14:db:82:83:9e:1a:e2:86:23:69:43: 1f:ce:ac:4a:e3:36:d6:c0:ee:36:63:cc:0a:65:d0: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:45:36:80:66:4F:E6:F7:AB:46:3C:88:09:B6:0E:2F:2E:44:B2:95 X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:18:e4:50:03:d1:5c:ae:44:5b:e5:b4:21:d9:f8:d0:29:9d: 03:3f:b5:b2:13:28:5c:bc:64:00:73:c5:cf:54:c7:7a:1c:dc: a2:ad:12:69:b6:91:6b:fc:62:8b:ad:4e:5f:c9:e4:64:b4:45: 8e:4d:ff:38:0c:6e:eb:74:9c:61:1e:56:7b:12:62:f5:c6:b7: d5:01:73:89:14:14:e7:5a:19:b3:98:73:97:74:e4:5e:e1:eb: 55:b2:28:b3:6d:0e:a1:b0:c1:5d:7f:83:da:fb:8b:10:c4:c1: dd:ca:5b:70:7c:9d:11:e2:f1:ee:46:ac:9a:89:18:16:92:8d: 0f:7f:7e:b5:b7:32:13:d2:94:31:79:f5:a5:44:2b:87:60:6a: e0:6b:79:1d:72:66:10:52:58:df:72:6e:df:ec:0e:2d:75:8e: e1:16:85:41:22:95:a2:c5:d0:49:7e:07:6a:60:f3:8b:f5:32: 3a:ee:11:48:29:6d:de:66:bd:e4:96:d8:6d:6c:2d:20:7a:b6: 18:8d:04:94:2e:1c:08:a2:28:86:b1:f6:a0:aa:b4:c9:01:a2: d7:16:18:68:3e:36:02:bb:ce:66:74:c5:11:70:1c:7b:3b:7d: 10:e9:6a:c6:a9:1e:8a:a1:bd:7b:32:04:47:ff:cf:a9:09:be: 48:e8:03:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjUwMzI5MDEwNzQ0WhcNMjUwNDA1MDEwNzQ0WjAYMRYwFAYD VQQDEw02N2U3NDdlMC1kYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnfwBnPDUcewHUnFzgRWUvd7IGXd3gNH8oS9KBofkKy7aSNEFVs3MsRwJWdh Mi3E/RLh8QgK61g0305/Cq8FD22pciFv6lFNIhp2Aw2ff8eDVoY9A46J/z0qbty7 viHmWypyYXBasBrt352o2QS3FQ9dludOR9vkh4RTKHtzYBvYVLzV6iTaCrNUB6IN 1mJVyYq5gD4HrM5FIwm+8ZhklDgdF0sd4wZgiE2kJODyauIhgRrpOzUraqIhedG0 Gwu1Oucprug6AyFn1hwan7ics6j4slizO/cFSWttYd5ASkSfx0ygFNuCg54a4oYj aUMfzqxK4zbWwO42Y8wKZdBtxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRFNoBm T+b3q0Y8iAm2Di8uRLKVMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATGORQA9FcrkRb5bQh2fjQKZ0DP7WyEyhcvGQAc8XPVMd6HNyirRJp tpFr/GKLrU5fyeRktEWOTf84DG7rdJxhHlZ7EmL1xrfVAXOJFBTnWhmzmHOXdORe 4etVsiizbQ6hsMFdf4Pa+4sQxMHdyltwfJ0R4vHuRqyaiRgWko0Pf361tzIT0pQx efWlRCuHYGrga3kdcmYQUljfcm7f7A4tdY7hFoVBIpWixdBJfgdqYPOL9TI67hFI KW3eZr3klthtbC0gerYYjQSULhwIoiiGsfagqrTJAaLXFhhoPjYCu85mdMURcBx7 O30Q6WrGqR6Kob17MgRH/8+pCb5I6AOX -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:18 2025 by rpki-client