$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json) Hash identifier: lOAetqIzw6TDwoPQcrMKIbLnekMxhy4UZQLTbh0gbJM= Subject key identifier: 81:52:8A:05:16:73:2A:5F:53:78:11:77:D9:49:B9:75:15:B5:9D:ED Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft Manifest number: 077C Signing time: Fri 28 Mar 2025 21:42:11 +0000 Manifest this update: Fri 28 Mar 2025 21:42:10 +0000 Manifest next update: Fri 04 Apr 2025 21:42:10 +0000 Files and hashes: 1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: sybiiTe0BS1Fmd8nAMWIk2ctPNmONjUgnDv4tTHRHT8=) 2: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=) 3: 7C8D74D43CC011EFAD90AC3AC4F9AE02.roa (hash: FLuUDUZLzFBpjgjpzZS1FAy/kyT3R1jD8dtHJ+DGsc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072 Validity Not Before: Mar 28 21:42:10 2025 GMT Not After : Apr 4 21:42:10 2025 GMT Subject: CN=67e717b2-e8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:e6:61:d8:84:ff:5b:7a:f2:59:c3:08:c7: 2a:92:d3:34:50:1f:00:0c:b0:b6:e8:21:9a:9a:bf: 10:17:cd:ea:06:3e:c9:4f:65:34:1e:2e:96:ed:30: f6:35:cd:5b:5b:c0:8b:ff:b3:42:86:2e:43:10:e7: f9:1d:05:8b:cb:40:36:8d:2a:1d:47:fd:38:60:3d: 9c:00:ff:bd:ff:12:fc:ad:6b:fd:cb:b7:9a:23:ad: 8f:13:f5:ec:f1:3e:8a:58:7a:46:63:b7:ad:24:62: 76:56:e4:76:ed:b5:2e:a6:1f:68:87:d6:07:5a:af: c6:cd:72:5f:c5:f7:9d:03:0b:e2:c2:5c:e1:80:bf: ce:b5:01:7e:8b:1e:5c:c1:c4:c6:b5:fc:81:90:5a: ab:fe:8c:0d:ef:98:61:b9:dc:7b:67:f6:c4:2e:1a: 89:45:d0:f2:bf:ed:3f:80:07:1b:c0:5b:bc:43:78: cc:cf:8e:8d:c3:85:14:7b:94:be:bb:35:be:bf:c4: e2:57:dd:65:f7:5e:58:54:a4:c9:7b:7c:70:08:e9: 2f:df:9e:ff:2a:24:9f:ae:34:8c:e6:5c:ab:fd:c4: 12:2b:28:f4:a2:d4:bb:c2:c8:63:d9:97:e8:97:1d: c8:62:b7:e0:92:2e:a7:02:96:37:77:5e:9d:18:b2: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:8A:05:16:73:2A:5F:53:78:11:77:D9:49:B9:75:15:B5:9D:ED X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d4:25:00:94:09:7f:f1:cb:d4:d7:28:71:de:b3:12:81:12: 4f:da:76:ae:71:34:1c:52:7b:2e:77:86:e4:fe:98:b9:6f:a2: d5:2a:91:c7:a9:aa:70:ac:f0:da:a3:03:c7:46:81:ac:23:01: 9f:cf:e7:a6:78:2d:4f:d8:da:93:92:25:99:8b:03:75:0a:d5: dc:d0:32:c0:35:70:39:e4:6f:19:26:55:d1:87:40:73:fe:2a: 65:e1:14:5f:23:a7:ac:3f:6e:64:64:e5:f1:3d:29:91:c3:4f: 25:b4:66:a5:ff:74:95:67:b1:dd:b2:d5:83:0d:70:ac:ef:ab: 6b:bf:c2:53:82:10:21:82:68:d7:05:9b:a9:d2:82:1d:a8:61: aa:44:a4:97:ce:cd:9c:68:87:5c:11:7a:42:2a:40:33:3b:d2: ff:5c:c2:b7:57:1b:f7:25:5f:c8:8d:c6:f7:cd:61:09:65:a6: 58:b0:4d:13:aa:03:84:1d:ef:53:f3:d6:fc:8e:45:07:09:da: 0d:14:76:1e:0f:3d:d1:c0:43:7a:e5:6c:a6:9b:d6:61:15:e0: ff:7f:6f:63:5f:71:ff:fd:d4:d3:33:fb:02:a2:2a:e2:e6:bc: 72:1b:67:84:08:2a:13:6e:f8:79:dd:e7:e9:21:44:77:5b:9c: 93:91:6d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjUwMzI4MjE0MjEwWhcNMjUwNDA0MjE0MjEwWjAYMRYwFAYD VQQDEw02N2U3MTdiMi1lOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxLmYdiE/1t68lnDCMcqktM0UB8ADLC26CGamr8QF83qBj7JT2U0Hi6W7TD2 Nc1bW8CL/7NChi5DEOf5HQWLy0A2jSodR/04YD2cAP+9/xL8rWv9y7eaI62PE/Xs 8T6KWHpGY7etJGJ2VuR27bUuph9oh9YHWq/GzXJfxfedAwviwlzhgL/OtQF+ix5c wcTGtfyBkFqr/owN75hhudx7Z/bELhqJRdDyv+0/gAcbwFu8Q3jMz46Nw4UUe5S+ uzW+v8TiV91l915YVKTJe3xwCOkv357/KiSfrjSM5lyr/cQSKyj0otS7wshj2Zfo lx3IYrfgki6nApY3d16dGLIxewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFSigUW cypfU3gRd9lJuXUVtZ3tMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy1CUAlAl/8cvU1yhx3rMSgRJP2naucTQcUnsud4bk/pi5b6LVKpHH qapwrPDaowPHRoGsIwGfz+emeC1P2NqTkiWZiwN1CtXc0DLANXA55G8ZJlXRh0Bz /ipl4RRfI6esP25kZOXxPSmRw08ltGal/3SVZ7HdstWDDXCs76trv8JTghAhgmjX BZup0oIdqGGqRKSXzs2caIdcEXpCKkAzO9L/XMK3Vxv3JV/Ijcb3zWEJZaZYsE0T qgOEHe9T89b8jkUHCdoNFHYeDz3RwEN65Wymm9ZhFeD/f29jX3H//dTTM/sCoiri 5rxyG2eECCoTbvh53efpIUR3W5yTkW0p -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:51 2025 by rpki-client