$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: om62hu85v/SNiFb1HJqOu8W47yighwYomYYTNTVBO4Y= Subject key identifier: 04:72:CC:E8:24:7E:B3:64:9F:0B:89:D6:43:73:77:42:2A:26:B1:53 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 18BF Signing time: Thu 10 Apr 2025 17:18:30 +0000 Manifest this update: Thu 10 Apr 2025 17:18:30 +0000 Manifest next update: Thu 17 Apr 2025 17:18:29 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: XLD77Mu5TDV2rE8CMm96FNzMYZ52BbjAt76jThZsdO8=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: Fb8k8+AedY7WXxvThRoDU2Yv91zXaAiC2+Ql7v0J/eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Apr 10 17:18:30 2025 GMT Not After : Apr 17 17:18:29 2025 GMT Subject: CN=67f7fd66-5daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:91:f3:00:61:a0:b4:eb:cc:dc:e7:78:b1:df: f8:08:74:28:6f:cf:83:2c:b9:4c:2d:51:a5:f3:c5: 5b:3a:77:fe:af:a5:6d:b8:9f:84:20:b4:67:d4:d0: 18:f7:fb:b2:cf:19:a7:9f:44:8e:e3:be:cb:f7:6d: 9a:55:5a:e8:ed:2b:27:87:fc:5b:c5:8c:cf:6e:9c: 0e:7e:ae:b8:4b:73:82:72:bb:d3:e2:a9:87:de:00: 35:c8:3d:1a:08:56:26:97:59:ae:c7:6a:8a:0a:67: 8f:0d:9c:52:30:27:cc:25:fa:36:64:50:b4:df:5b: 10:e6:50:7a:df:33:35:18:00:9c:4b:5e:dc:f7:0f: 4a:bb:60:b2:7d:cd:e7:c4:5d:38:db:84:c5:09:83: 5e:3c:ee:66:3f:c6:b3:ce:7c:67:0a:5a:fc:22:4f: 62:36:c1:ef:dc:65:5f:a4:36:52:5a:c7:d2:42:3f: 77:53:21:ef:ae:0b:aa:61:b0:06:7a:f9:b3:1c:ac: 5a:9f:1d:12:23:3d:1a:d3:75:e5:15:e3:36:54:65: ef:a3:98:5a:4a:d9:43:3f:f1:63:9c:43:b9:ca:37: 81:f8:38:73:5d:06:70:0c:1c:ed:d2:c1:98:1b:82: ac:30:da:ad:7d:1b:2d:ce:c5:a4:f8:33:c5:19:1b: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:72:CC:E8:24:7E:B3:64:9F:0B:89:D6:43:73:77:42:2A:26:B1:53 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:12:80:b3:7f:1a:31:be:29:85:9b:56:71:a8:1e:85:1a:9a: 04:e1:d7:53:c0:c4:f3:36:0a:dc:67:82:61:19:04:4a:28:39: 34:df:61:83:69:8d:37:2b:bf:99:f1:c3:f7:f7:46:0e:ec:5b: 8c:4a:1b:f6:a7:95:cf:f9:81:41:4b:db:67:7d:b4:fa:41:7d: 5d:0b:90:95:84:cc:ba:0c:b9:6b:45:1c:84:86:ce:f0:ec:99: 5a:47:7f:9f:ad:aa:53:8a:ae:d7:63:70:1b:ad:1e:d9:e9:dd: 6b:e9:51:df:20:57:be:fc:36:09:77:e9:78:92:b5:e6:e9:35: ca:e7:57:33:28:b3:b8:a1:e0:8b:62:1e:2a:f2:79:a5:3b:f5: 21:33:43:b6:58:20:c3:66:8c:4c:02:32:66:4a:6d:d6:1d:93: f9:ec:b2:da:08:ae:0f:90:b1:ce:d7:d6:61:68:3a:12:b8:bc: 7e:f8:2d:ab:42:ef:1e:5c:8c:bd:a1:c0:5e:0f:64:5a:c4:b2: 6a:75:90:38:d9:98:80:50:a1:62:91:03:1a:f8:2d:40:1d:17: 92:a7:8c:98:4f:1b:95:06:3a:3a:83:58:ba:36:73:4d:01:3d: 06:f4:81:e7:81:74:34:24:b8:90:a9:f7:68:4d:df:0f:74:6c: 25:b0:ae:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwNDEwMTcxODMwWhcNMjUwNDE3MTcxODI5WjAYMRYwFAYD VQQDEw02N2Y3ZmQ2Ni01ZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JHzAGGgtOvM3Od4sd/4CHQob8+DLLlMLVGl88VbOnf+r6VtuJ+EILRn1NAY 9/uyzxmnn0SO477L922aVVro7Ssnh/xbxYzPbpwOfq64S3OCcrvT4qmH3gA1yD0a CFYml1mux2qKCmePDZxSMCfMJfo2ZFC031sQ5lB63zM1GACcS17c9w9Ku2Cyfc3n xF0424TFCYNePO5mP8azznxnClr8Ik9iNsHv3GVfpDZSWsfSQj93UyHvrguqYbAG evmzHKxanx0SIz0a03XlFeM2VGXvo5haStlDP/FjnEO5yjeB+DhzXQZwDBzt0sGY G4KsMNqtfRstzsWk+DPFGRvtkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARyzOgk frNknwuJ1kNzd0IqJrFTMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAEoCzfxoxvimFm1ZxqB6FGpoE4ddTwMTzNgrcZ4JhGQRKKDk032GD aY03K7+Z8cP390YO7FuMShv2p5XP+YFBS9tnfbT6QX1dC5CVhMy6DLlrRRyEhs7w 7JlaR3+frapTiq7XY3AbrR7Z6d1r6VHfIFe+/DYJd+l4krXm6TXK51czKLO4oeCL Yh4q8nmlO/UhM0O2WCDDZoxMAjJmSm3WHZP57LLaCK4PkLHO19ZhaDoSuLx++C2r Qu8eXIy9ocBeD2RaxLJqdZA42ZiAUKFikQMa+C1AHReSp4yYTxuVBjo6g1i6NnNN AT0G9IHngXQ0JLiQqfdoTd8PdGwlsK61 -----END CERTIFICATE-----Generated at Sat Apr 12 16:49:38 2025 by rpki-client