$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: NbDiySX5Z3WvQOxXRyZieapr8YZgtP7owZo051v5BVU= Subject key identifier: 99:E7:39:96:5C:A2:30:A0:00:30:EF:11:75:1E:0F:71:A8:5E:81:AB Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 0775 Signing time: Wed 02 Apr 2025 21:23:41 +0000 Manifest this update: Wed 02 Apr 2025 21:23:41 +0000 Manifest next update: Wed 09 Apr 2025 21:23:41 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: 1YAmo7867tgARAl0rJi/iXR6HgYGgjGhhNAeW1Ju0ac=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: TvcOHSsYCyXpnMLRDhy2fSmnr1T+wVns1s4NPPpAH1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9 Validity Not Before: Apr 2 21:23:41 2025 GMT Not After : Apr 9 21:23:41 2025 GMT Subject: CN=67edaadd-a061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0c:5f:80:47:a5:ab:fa:bd:d9:ab:26:61:59: a0:41:9a:45:22:48:e4:83:7f:7f:34:12:28:93:80: 20:4f:f9:6b:6f:7b:d8:3c:ff:b8:67:0d:20:3d:ea: 3c:c1:9a:e8:84:36:89:d6:d1:66:a7:c8:fe:b5:c6: a3:ca:a2:89:2e:81:d3:1f:93:55:64:bf:be:fb:c0: 4c:6e:24:2c:90:e2:a4:f2:30:40:88:e6:de:40:c6: a8:24:cb:c8:01:10:ce:30:5d:11:ca:63:34:ca:49: 88:28:7c:a7:03:72:68:57:96:55:f5:c2:d1:f0:ed: 67:c1:9d:7d:aa:f1:81:55:71:95:62:69:29:6e:a1: c0:83:55:cd:29:07:53:49:83:13:13:d8:37:36:a5: 7f:6c:60:03:dc:27:53:9f:3e:13:b5:61:a4:63:4d: 22:7b:54:e1:5f:ee:aa:5b:f9:99:dd:5c:8a:00:9f: f5:f7:36:28:5b:4c:54:b5:eb:5b:09:58:d2:b9:2b: d5:6f:f6:d5:24:1d:f5:a8:bd:2b:32:31:fc:9c:a8: 6e:57:58:0f:f1:ba:c1:8f:9f:9b:46:e7:8f:1b:7c: 94:fc:d9:e3:ef:5d:c0:c5:63:86:af:a3:17:a0:75: 99:f0:c6:59:99:2d:10:89:02:ab:61:d9:04:77:2d: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E7:39:96:5C:A2:30:A0:00:30:EF:11:75:1E:0F:71:A8:5E:81:AB X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:97:d7:a5:13:73:0e:b6:34:21:97:a6:07:8c:82:28:13:62: 30:4e:84:48:e5:9c:46:ed:2f:86:db:3b:4b:a8:58:a8:08:b4: fd:2c:39:9d:d4:81:e7:ea:2d:35:71:85:61:af:0d:2d:51:9c: 62:4b:37:d6:eb:60:9d:e2:71:3e:83:08:44:85:86:f8:06:f2: c1:1a:44:63:e1:87:62:5d:b1:3c:95:da:ad:78:de:fc:24:95: ea:08:20:36:3a:ac:59:11:ac:45:07:ba:f9:96:6e:c8:aa:a7: 33:1c:2b:22:0f:78:57:47:dc:16:ed:82:35:8f:42:b2:d7:76: c0:9b:89:9c:57:33:b2:1f:26:2d:87:8f:c2:ce:81:d4:14:7d: 38:d5:d1:99:d8:38:54:70:19:11:49:d0:ef:2b:77:31:d7:22: 91:19:2a:bd:60:85:96:c0:e2:96:38:e6:43:c2:78:97:be:61: a2:0a:f7:67:ef:b6:95:7f:08:71:d8:b3:9c:75:06:fd:7e:e5: 64:87:52:6b:e3:05:fa:f2:42:80:be:ca:ee:5f:2a:47:0e:f1: e3:4e:1f:46:6e:fb:fd:2d:80:71:34:94:98:82:74:92:3c:3c: 8c:08:79:16:ee:86:27:4c:7c:3c:54:3d:2f:a9:19:be:b8:7c: f5:d5:c0:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwNDAyMjEyMzQxWhcNMjUwNDA5MjEyMzQxWjAYMRYwFAYD VQQDEw02N2VkYWFkZC1hMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AxfgEelq/q92asmYVmgQZpFIkjkg39/NBIok4AgT/lrb3vYPP+4Zw0gPeo8 wZrohDaJ1tFmp8j+tcajyqKJLoHTH5NVZL+++8BMbiQskOKk8jBAiObeQMaoJMvI ARDOMF0RymM0ykmIKHynA3JoV5ZV9cLR8O1nwZ19qvGBVXGVYmkpbqHAg1XNKQdT SYMTE9g3NqV/bGAD3CdTnz4TtWGkY00ie1ThX+6qW/mZ3VyKAJ/19zYoW0xUtetb CVjSuSvVb/bVJB31qL0rMjH8nKhuV1gP8brBj5+bRuePG3yU/Nnj713AxWOGr6MX oHWZ8MZZmS0QiQKrYdkEdy20iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnnOZZc ojCgADDvEXUeD3GoXoGrMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABl9elE3MOtjQhl6YHjIIoE2IwToRI5ZxG7S+G2ztLqFioCLT9LDmd 1IHn6i01cYVhrw0tUZxiSzfW62Cd4nE+gwhEhYb4BvLBGkRj4YdiXbE8ldqteN78 JJXqCCA2OqxZEaxFB7r5lm7IqqczHCsiD3hXR9wW7YI1j0Ky13bAm4mcVzOyHyYt h4/CzoHUFH041dGZ2DhUcBkRSdDvK3cx1yKRGSq9YIWWwOKWOOZDwniXvmGiCvdn 77aVfwhx2LOcdQb9fuVkh1Jr4wX68kKAvsruXypHDvHjTh9Gbvv9LYBxNJSYgnSS PDyMCHkW7oYnTHw8VD0vqRm+uHz11cDy -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:39 2025 by rpki-client