$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: NNjkRFUJfXk35FQljdCKf/JZDBkV+U4kaWUHT8ouvvA= Subject key identifier: 00:FC:1C:A7:F8:FB:21:17:D6:72:9C:CE:1C:F7:70:89:30:B2:6E:80 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 012E Signing time: Thu 03 Apr 2025 03:50:58 +0000 Manifest this update: Thu 03 Apr 2025 03:50:58 +0000 Manifest next update: Thu 10 Apr 2025 03:50:58 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: 54iY0taN+ykvs9gOMvoWcYn0PvXo7VJZdleZZzWT2fg=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995 Validity Not Before: Apr 3 03:50:58 2025 GMT Not After : Apr 10 03:50:58 2025 GMT Subject: CN=67ee05a2-da3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:67:14:c1:0d:76:d7:c7:27:c9:28:06:1c: 51:12:58:c2:03:1c:63:d0:1e:5c:9b:0c:10:40:d0: f3:87:8d:2a:6f:31:42:a6:e1:47:8b:1d:b6:e9:ed: 9b:c3:2e:fa:d5:df:57:45:db:61:e8:5c:ed:19:0d: 45:89:6c:4f:2c:1c:c6:df:ed:8b:40:66:74:d7:ab: ec:d2:40:6f:09:3c:20:3f:ef:ae:53:79:e3:33:46: 47:ae:d3:45:45:09:c9:ef:fa:93:96:cc:01:b0:95: 52:18:96:a0:94:4f:74:61:ad:d3:79:50:ec:c0:bc: 0f:52:cd:a4:9a:43:d4:ba:86:a3:19:b0:ab:73:d7: 45:cf:c8:62:e7:24:02:08:49:3a:40:52:7a:93:e7: fb:26:14:08:c4:f2:4c:77:ef:29:34:5d:b9:d6:57: 77:7b:c2:f1:4a:1e:47:cd:e3:90:da:90:47:b5:4b: ce:98:6b:9b:13:ff:50:42:65:e7:29:1c:93:2a:97: 6d:0c:a3:3d:97:42:cb:7f:45:53:82:25:1d:44:4c: 76:6f:c1:cc:9d:d9:c3:1b:1c:9f:34:88:99:d5:de: ac:bb:e6:81:69:34:c0:20:7c:14:97:02:52:f4:5b: ac:4b:aa:4a:3c:08:7f:5d:2a:8a:6b:95:b0:cb:5b: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FC:1C:A7:F8:FB:21:17:D6:72:9C:CE:1C:F7:70:89:30:B2:6E:80 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f9:ea:23:b1:84:10:86:0d:03:c6:04:ad:a1:f9:96:9e:ac: bb:b0:8c:66:dc:c8:e9:31:31:4e:04:c7:26:0a:1d:6f:1d:f1: 0f:10:47:2a:51:46:30:08:66:d4:95:33:06:e5:a0:85:b8:43: a8:f7:f4:b8:be:e9:4f:26:de:7a:d5:09:e3:f2:da:0c:48:7c: bc:25:f9:9e:85:f7:57:f4:9e:d8:28:7d:fe:52:83:4b:e1:39: ec:60:28:af:9a:2e:e9:bb:2f:2d:ad:81:27:a5:52:ab:bc:30: 1c:1e:48:1d:78:df:4b:4f:b0:55:4c:d9:f1:41:18:36:78:33: 42:23:22:df:42:2e:66:72:bf:7c:52:6e:4b:c0:e5:bf:7a:0c: 79:c7:ea:61:8a:09:b2:92:b1:42:d0:8c:3c:f5:bd:6c:b3:f9: 95:e2:c8:55:f0:2c:b5:07:a5:b0:1b:25:cb:a2:97:04:13:d2: 3b:07:d5:00:dc:0a:4c:30:d5:3c:42:fe:60:09:6b:68:f0:d7: 97:1c:40:71:d0:1e:95:71:ee:e4:58:ea:df:ed:b0:74:f5:14: 7d:a5:fc:1a:5c:ff:71:c0:ee:93:f0:97:11:44:25:11:c6:ed: 35:67:2d:df:3b:85:e8:c1:3e:0e:a3:c1:93:1f:6c:56:0e:38: db:7d:af:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwNDAzMDM1MDU4WhcNMjUwNDEwMDM1MDU4WjAYMRYwFAYD VQQDEw02N2VlMDVhMi1kYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZxnFMENdtfHJ8koBhxREljCAxxj0B5cmwwQQNDzh40qbzFCpuFHix226e2b wy761d9XRdth6FztGQ1FiWxPLBzG3+2LQGZ016vs0kBvCTwgP++uU3njM0ZHrtNF RQnJ7/qTlswBsJVSGJaglE90Ya3TeVDswLwPUs2kmkPUuoajGbCrc9dFz8hi5yQC CEk6QFJ6k+f7JhQIxPJMd+8pNF251ld3e8LxSh5HzeOQ2pBHtUvOmGubE/9QQmXn KRyTKpdtDKM9l0LLf0VTgiUdREx2b8HMndnDGxyfNIiZ1d6su+aBaTTAIHwUlwJS 9FusS6pKPAh/XSqKa5Wwy1sJswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD8HKf4 +yEX1nKczhz3cIkwsm6AMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS+eojsYQQhg0DxgStofmWnqy7sIxm3MjpMTFOBMcmCh1vHfEPEEcq UUYwCGbUlTMG5aCFuEOo9/S4vulPJt561Qnj8toMSHy8JfmehfdX9J7YKH3+UoNL 4TnsYCivmi7puy8trYEnpVKrvDAcHkgdeN9LT7BVTNnxQRg2eDNCIyLfQi5mcr98 Um5LwOW/egx5x+phigmykrFC0Iw89b1ss/mV4shV8Cy1B6WwGyXLopcEE9I7B9UA 3ApMMNU8Qv5gCWto8NeXHEBx0B6Vce7kWOrf7bB09RR9pfwaXP9xwO6T8JcRRCUR xu01Zy3fO4XowT4Oo8GTH2xWDjjbfa+c -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:35 2025 by rpki-client