$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: Q11Xy4fUNmBYVamGKbd8BNgUhDDeKXDlZ2S1+lOrh0o= Subject key identifier: 3A:8E:B9:64:72:3A:75:60:66:43:87:34:84:3D:E8:78:EE:4E:11:34 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01B4 Signing time: Sat 05 Apr 2025 02:43:00 +0000 Manifest this update: Sat 05 Apr 2025 02:42:59 +0000 Manifest next update: Sat 12 Apr 2025 02:42:59 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: 83c/9ENORdqCek6+BQPHn1vT5J+6qmek3W16I0Gw2nc=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071 Validity Not Before: Apr 5 02:42:59 2025 GMT Not After : Apr 12 02:42:59 2025 GMT Subject: CN=67f098b4-af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:56:16:f9:4c:93:90:0b:81:7d:9c:fb:cf: 7d:da:4f:7f:22:c3:36:10:2f:2e:e6:d0:83:82:7d: 64:86:95:e4:af:b8:02:ea:7c:ed:91:14:fe:ce:e7: 5c:fd:43:2d:4e:3d:b2:ac:ec:64:85:94:af:aa:44: 84:fb:a7:2a:de:c6:b9:e7:86:80:b6:4b:08:2a:52: 79:5f:2b:87:e1:95:01:ee:5b:dd:b6:db:b3:40:1c: 05:20:1c:3e:79:e0:be:34:5f:5c:37:8c:2f:38:a8: fc:db:63:6a:65:09:7d:6c:c9:fe:45:f7:a9:87:56: 4e:f1:df:31:d4:a9:36:af:98:7d:97:e2:7f:80:61: e5:f4:62:d4:cb:e8:ba:08:50:9f:de:6c:c2:e6:6a: 26:59:17:32:28:a5:7e:9e:c5:9a:57:d2:3b:04:f7: 20:d5:48:4d:28:ee:33:69:5f:88:da:7f:d3:88:d9: 24:21:21:a2:9a:3c:0d:9d:94:ef:21:ec:7b:13:3f: bf:0f:fd:4c:d0:58:65:27:a8:18:b8:00:75:a7:a5: c8:90:3b:8a:19:0a:23:e1:ef:c2:35:0c:ab:cb:81: 12:21:db:2a:33:99:d2:73:59:41:da:53:20:f6:fb: c9:e4:60:c2:90:7d:8d:ae:f0:3c:20:bd:af:c6:e1: 69:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8E:B9:64:72:3A:75:60:66:43:87:34:84:3D:E8:78:EE:4E:11:34 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c4:79:3f:37:7c:fd:e4:66:d8:74:d5:e3:c8:f1:a3:af:fd: fb:60:0e:4f:ab:d7:cf:ea:e9:19:88:36:cf:4c:e9:d3:94:44: 34:61:17:da:ce:7f:7b:90:62:68:b9:e5:4a:49:22:87:59:fb: ab:24:fd:5b:1f:12:d1:ab:5f:c8:4d:c3:03:b1:fa:95:08:27: 43:1d:f6:96:4a:5c:51:6c:c3:4b:4b:06:9a:27:c0:a4:91:42: db:90:2c:73:09:08:04:eb:97:79:08:d6:7e:a7:b3:11:26:2e: d7:9e:8a:6e:84:24:3e:6b:9a:5c:07:26:6f:73:ee:01:96:f5: 28:34:cf:e4:32:af:6e:f5:f4:63:ca:c4:e6:8f:d9:2e:4d:53: 79:a2:5c:1a:13:c3:3b:3e:8b:7e:74:e2:12:a7:da:d9:46:59: b1:db:b7:a1:6a:e1:09:bc:81:f0:d7:3a:5f:4e:10:f1:38:be: be:f7:40:ec:86:11:40:c7:66:35:42:36:62:63:bc:db:32:e8: b0:a7:fa:49:94:bb:ed:58:c1:3e:eb:14:4c:3e:d7:bc:dd:2f: 21:4c:8e:7c:38:26:97:5a:f6:e1:9a:52:25:2c:50:e2:0f:97: 12:d9:6b:83:66:e8:e4:f8:6d:02:3f:87:f5:53:3a:b8:17:ef: 3a:2b:f1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNDA1MDI0MjU5WhcNMjUwNDEyMDI0MjU5WjAYMRYwFAYD VQQDEw02N2YwOThiNC1hZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBdWFvlMk5ALgX2c+8992k9/IsM2EC8u5tCDgn1khpXkr7gC6nztkRT+zudc /UMtTj2yrOxkhZSvqkSE+6cq3sa554aAtksIKlJ5XyuH4ZUB7lvdttuzQBwFIBw+ eeC+NF9cN4wvOKj822NqZQl9bMn+Rfeph1ZO8d8x1Kk2r5h9l+J/gGHl9GLUy+i6 CFCf3mzC5momWRcyKKV+nsWaV9I7BPcg1UhNKO4zaV+I2n/TiNkkISGimjwNnZTv Iex7Ez+/D/1M0FhlJ6gYuAB1p6XIkDuKGQoj4e/CNQyry4ESIdsqM5nSc1lB2lMg 9vvJ5GDCkH2NrvA8IL2vxuFp3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqOuWRy OnVgZkOHNIQ96HjuThE0MB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPxHk/N3z95GbYdNXjyPGjr/37YA5Pq9fP6ukZiDbPTOnTlEQ0YRfa zn97kGJoueVKSSKHWfurJP1bHxLRq1/ITcMDsfqVCCdDHfaWSlxRbMNLSwaaJ8Ck kULbkCxzCQgE65d5CNZ+p7MRJi7XnopuhCQ+a5pcByZvc+4BlvUoNM/kMq9u9fRj ysTmj9kuTVN5olwaE8M7Pot+dOISp9rZRlmx27ehauEJvIHw1zpfThDxOL6+90Ds hhFAx2Y1QjZiY7zbMuiwp/pJlLvtWME+6xRMPte83S8hTI58OCaXWvbhmlIlLFDi D5cS2WuDZujk+G0CP4f1Uzq4F+86K/F9 -----END CERTIFICATE-----Generated at Sat Apr 5 19:20:14 2025 by rpki-client