$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: 6cADEuZ9V5zs29svVB7jG72183Cnw2DuaCWhDrJZF4E= Subject key identifier: F1:15:07:E2:11:CE:35:A4:B8:41:34:8D:A3:D9:0B:E5:40:DF:AA:D7 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: C8 Signing time: Sat 05 Apr 2025 05:01:31 +0000 Manifest this update: Sat 05 Apr 2025 05:01:30 +0000 Manifest next update: Sat 12 Apr 2025 05:01:30 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: HO/DYMJDRfiHKlykDZohpsLxi0I1/pCLL6SH/Yp6P7w=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041 Validity Not Before: Apr 5 05:01:30 2025 GMT Not After : Apr 12 05:01:30 2025 GMT Subject: CN=67f0b92a-8b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:1f:dd:8b:e5:b8:1d:89:72:33:f5:db:81: 76:a4:5b:fe:92:f0:87:5e:27:53:17:e9:3a:f8:c9: 36:23:e5:7c:89:d1:f8:22:20:8f:d9:e7:42:ba:f4: 8c:47:c6:9f:b3:ff:f2:be:9a:53:a0:2a:eb:ad:10: 49:1c:f3:3f:cf:00:b8:38:a6:b2:94:b7:49:05:77: 0b:6d:98:29:8f:7d:fc:c3:2f:5d:70:3c:cc:20:8c: 46:6a:85:48:21:ef:e6:55:25:af:69:e6:09:d7:08: b5:4f:a9:6e:c5:f1:57:f0:db:14:f4:86:9a:1b:c7: 4c:cd:87:ce:42:67:04:8d:a6:03:a5:52:36:fc:9d: 41:c2:9b:76:5c:17:22:f4:f3:00:b8:89:52:10:92: 08:f3:05:81:41:37:f3:00:fe:42:08:4b:02:e7:ea: 42:1c:57:40:c4:c1:42:e0:74:77:fc:67:84:e6:1f: 36:6a:94:bf:b7:f8:26:74:63:e9:e9:57:75:96:b1: 49:a6:14:4b:15:62:60:57:63:c8:7c:84:7e:14:dc: 50:0d:95:be:2d:88:be:75:1d:c8:50:35:9e:41:a3: 8c:09:cb:14:5f:fa:6e:7d:b6:9d:b8:34:04:d0:e9: 0e:2b:20:e6:2b:00:2d:f2:29:bd:be:b1:c7:7c:04: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:15:07:E2:11:CE:35:A4:B8:41:34:8D:A3:D9:0B:E5:40:DF:AA:D7 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0a:8b:ec:54:31:a1:d3:22:63:ee:56:70:fc:93:55:b9:2e: e9:c8:5a:7b:75:f8:8d:18:25:a2:2a:63:32:36:6c:8f:7d:de: f7:ba:b0:c4:91:b4:a7:d0:30:6a:1e:0c:79:29:09:ae:72:7e: 81:e6:f8:a0:09:41:4b:fa:28:5c:8e:81:d7:47:9e:57:40:fb: 7d:8d:cb:fb:cc:c4:e6:68:ff:f2:d1:51:55:26:99:6a:17:95: d6:a8:18:ff:9e:cc:03:92:75:ad:d5:61:b6:f1:af:34:d9:ea: 62:ff:ea:5b:3d:b4:1a:24:b0:b8:45:0a:5e:37:e6:0a:9a:11: e9:91:45:52:60:ec:cc:b8:13:be:5d:89:27:ed:63:87:27:98: 54:56:d8:80:b1:1b:fc:bd:b8:a2:b3:0c:74:99:37:d9:f6:c0: 36:c6:0c:92:5a:c9:1d:c5:53:d6:09:b1:80:f9:ca:a1:56:24: 79:dd:83:f3:20:cb:25:2d:1c:95:54:34:1c:7e:68:df:30:a8: a1:98:08:7b:9a:51:86:e3:c7:5a:88:f4:43:40:35:b9:bf:05: 7d:77:cc:2f:71:70:d5:4f:5b:e4:81:0b:bb:bc:ec:33:aa:37: 2a:61:8c:62:6f:fc:d3:c7:9d:02:2b:1f:b1:a5:64:30:9c:6a: 66:27:aa:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUwNDA1MDUwMTMwWhcNMjUwNDEyMDUwMTMwWjAYMRYwFAYD VQQDEw02N2YwYjkyYS04YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrwf3YvluB2JcjP124F2pFv+kvCHXidTF+k6+Mk2I+V8idH4IiCP2edCuvSM R8afs//yvppToCrrrRBJHPM/zwC4OKaylLdJBXcLbZgpj338wy9dcDzMIIxGaoVI Ie/mVSWvaeYJ1wi1T6luxfFX8NsU9IaaG8dMzYfOQmcEjaYDpVI2/J1Bwpt2XBci 9PMAuIlSEJII8wWBQTfzAP5CCEsC5+pCHFdAxMFC4HR3/GeE5h82apS/t/gmdGPp 6Vd1lrFJphRLFWJgV2PIfIR+FNxQDZW+LYi+dR3IUDWeQaOMCcsUX/pufbaduDQE 0OkOKyDmKwAt8im9vrHHfAQJqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEVB+IR zjWkuEE0jaPZC+VA36rXMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcCovsVDGh0yJj7lZw/JNVuS7pyFp7dfiNGCWiKmMyNmyPfd73urDE kbSn0DBqHgx5KQmucn6B5vigCUFL+ihcjoHXR55XQPt9jcv7zMTmaP/y0VFVJplq F5XWqBj/nswDknWt1WG28a802epi/+pbPbQaJLC4RQpeN+YKmhHpkUVSYOzMuBO+ XYkn7WOHJ5hUVtiAsRv8vbiiswx0mTfZ9sA2xgySWskdxVPWCbGA+cqhViR53YPz IMslLRyVVDQcfmjfMKihmAh7mlGG48daiPRDQDW5vwV9d8wvcXDVT1vkgQu7vOwz qjcqYYxib/zTx50CKx+xpWQwnGpmJ6ry -----END CERTIFICATE-----Generated at Sun Apr 6 18:36:48 2025 by rpki-client