$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: 7HjKQUSnbRMsb7HYcGegeeybCZrB0CTZRES+hgxEuDo= Subject key identifier: D1:E9:5B:73:1C:3A:44:87:11:BF:A0:F6:F7:4F:EE:78:13:88:3A:6E Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0B7E Signing time: Fri 28 Mar 2025 19:13:42 +0000 Manifest this update: Fri 28 Mar 2025 19:13:42 +0000 Manifest next update: Fri 04 Apr 2025 19:13:42 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: hm5hN+3G/oxk8+NuVZbXkNpDlpvKYKA33JrqNtf5psg=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: j7UjuVCTVv/7mfOqRurAg480j9GWmLg6ExID4Lwvt4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 19:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73 Validity Not Before: Mar 28 19:13:42 2025 GMT Not After : Apr 4 19:13:42 2025 GMT Subject: CN=67e6f4e6-66ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:b3:e9:17:5d:70:ff:6d:5e:90:89:16:e1: 1c:ba:95:fb:07:77:35:b3:25:d3:8a:88:06:08:02: 3a:31:a1:29:d2:75:44:68:dd:7f:77:df:fe:fe:3c: 6c:0e:e2:21:df:db:29:aa:22:7a:ab:11:53:42:db: 80:d4:5e:a7:ef:dc:2a:87:78:c0:59:75:0a:ad:74: 28:4f:9b:b7:4b:27:9d:81:43:28:34:27:3d:4b:18: c5:b1:7b:a6:2a:d9:1d:a7:cd:ef:06:72:f1:8d:d9: 44:d3:12:a4:fe:45:de:8a:2e:1d:1d:59:4d:10:d3: 55:1f:d0:90:e0:24:ef:49:44:f4:fd:f1:b9:83:b0: 6e:2d:da:77:4d:37:77:8b:86:69:1c:ce:fd:ea:13: e3:23:26:52:ed:af:d3:84:19:42:2d:a4:bb:83:71: e4:26:f0:0e:ab:9b:14:7b:5b:05:88:cb:58:88:40: 7b:16:d0:d4:c0:30:16:ca:43:c3:d0:68:b2:00:03: 9f:eb:5e:d9:ec:f8:d1:b3:5e:7b:b8:d3:d3:cd:ec: 9a:cb:78:5b:a8:a7:49:80:cc:f2:17:67:04:b0:79: 86:81:46:0c:54:d6:d7:4c:c4:3f:37:36:73:0e:58: c3:aa:ca:83:bd:6e:a8:ec:f0:4a:73:67:3a:99:ed: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:5B:73:1C:3A:44:87:11:BF:A0:F6:F7:4F:EE:78:13:88:3A:6E X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0e:c8:3e:d7:59:e5:07:ee:07:79:b3:9b:66:a3:35:fa:91: 84:dc:59:30:0f:c5:c5:55:dd:e9:01:bf:9e:0b:e2:59:8d:8a: da:4b:b4:58:0d:e6:4f:ac:32:4f:11:27:b6:73:c4:ca:2c:b2: c3:83:80:92:cd:0f:21:42:7e:f7:5d:80:43:8a:f3:79:41:c4: 11:17:f6:ab:2d:b3:56:14:9d:e5:55:08:54:73:f5:ed:5f:d2: 71:17:ef:bb:33:f9:94:69:7d:5e:5a:1c:86:24:66:08:17:1a: a0:0d:62:5b:4f:ff:0a:71:c9:e9:cd:ff:af:da:9b:ab:91:ff: 38:e8:b2:ed:68:81:59:78:37:d0:8c:9a:b3:c9:07:52:0c:5c: 3c:38:5c:01:27:83:37:c2:9e:7d:68:3f:ad:e4:93:f8:8f:70: ca:c3:0f:73:18:7f:c9:41:42:b3:99:2f:f9:c8:fb:3d:de:15: 6d:00:8d:c3:ab:bb:5a:88:99:c9:0d:b2:e0:89:33:4d:9e:c2: f0:7c:66:d2:74:88:ac:3b:c5:91:c9:64:26:64:22:18:55:24: 4f:55:a4:d5:5f:28:ed:0f:5c:76:72:d5:41:95:93:3f:46:e3: ec:ba:3e:f3:15:0e:e6:b1:6a:47:32:f1:93:0b:c4:c9:17:4f: e1:f4:47:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjUwMzI4MTkxMzQyWhcNMjUwNDA0MTkxMzQyWjAYMRYwFAYD VQQDEw02N2U2ZjRlNi02NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cmz6RddcP9tXpCJFuEcupX7B3c1syXTiogGCAI6MaEp0nVEaN1/d9/+/jxs DuIh39spqiJ6qxFTQtuA1F6n79wqh3jAWXUKrXQoT5u3SyedgUMoNCc9SxjFsXum Ktkdp83vBnLxjdlE0xKk/kXeii4dHVlNENNVH9CQ4CTvSUT0/fG5g7BuLdp3TTd3 i4ZpHM796hPjIyZS7a/ThBlCLaS7g3HkJvAOq5sUe1sFiMtYiEB7FtDUwDAWykPD 0GiyAAOf617Z7PjRs157uNPTzeyay3hbqKdJgMzyF2cEsHmGgUYMVNbXTMQ/NzZz DljDqsqDvW6o7PBKc2c6me18ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHpW3Mc OkSHEb+g9vdP7ngTiDpuMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhDsg+11nlB+4HebObZqM1+pGE3FkwD8XFVd3pAb+eC+JZjYraS7RY DeZPrDJPESe2c8TKLLLDg4CSzQ8hQn73XYBDivN5QcQRF/arLbNWFJ3lVQhUc/Xt X9JxF++7M/mUaX1eWhyGJGYIFxqgDWJbT/8Kccnpzf+v2purkf846LLtaIFZeDfQ jJqzyQdSDFw8OFwBJ4M3wp59aD+t5JP4j3DKww9zGH/JQUKzmS/5yPs93hVtAI3D q7taiJnJDbLgiTNNnsLwfGbSdIisO8WRyWQmZCIYVSRPVaTVXyjtD1x2ctVBlZM/ RuPsuj7zFQ7msWpHMvGTC8TJF0/h9EcW -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:54 2025 by rpki-client