$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: sAjL4fk7IsLc3/FBhlrJnNbKCWtslVoUdWnwX0pWMD8= Subject key identifier: 65:CB:A0:A4:F0:FE:5B:11:3D:0D:5F:5F:4C:12:69:0C:D3:E1:C0:97 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 01B5 Signing time: Sat 05 Apr 2025 02:38:21 +0000 Manifest this update: Sat 05 Apr 2025 02:38:21 +0000 Manifest next update: Sat 12 Apr 2025 02:38:21 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: qC79K4LKvrfAg8ncgUobaxhLi2Bmr5EzSV8fJtmtvcs=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=) 3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=) 4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99 Validity Not Before: Apr 5 02:38:21 2025 GMT Not After : Apr 12 02:38:21 2025 GMT Subject: CN=67f0979d-f97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:5e:63:4c:d4:d6:f8:3d:4c:0d:ca:7e:7c: 0f:f6:94:09:c1:a0:3b:29:82:cf:ec:58:9b:76:13: 6e:8f:88:78:53:a0:ab:88:58:b8:0d:4e:ba:be:16: 7d:f5:5b:55:b0:bd:0a:09:51:e3:77:d8:13:37:b7: 6b:bd:9d:cd:b5:8e:80:67:2d:2f:63:ec:b9:61:4d: 9c:60:3b:95:6b:ce:ba:90:d3:1e:a4:4d:42:bf:bd: b0:a0:97:99:e3:e8:73:04:c6:76:70:b2:8e:79:fc: 24:9f:cc:97:c5:16:af:fe:e8:4b:c0:31:af:29:a1: 1d:d0:90:6c:50:c3:36:12:2f:96:99:ca:6c:1c:52: 6e:93:aa:7e:f9:f0:68:29:8f:ff:65:e3:6b:15:dc: d7:62:bd:79:47:81:95:1e:09:83:9a:5d:c4:13:5d: d3:ba:38:6b:6f:b1:10:51:9f:d4:be:2c:ed:a8:2a: bb:40:60:cb:80:d2:ac:e4:a8:39:a9:1d:5a:74:08: dc:f7:31:c0:d1:80:ad:80:86:3b:de:24:dc:c6:34: 64:6e:b6:08:fc:24:5e:67:42:cd:22:b7:f5:dc:ce: 32:69:bd:f1:38:e0:87:4e:ec:e5:d6:3a:e5:09:5f: b9:85:92:bd:3a:68:b0:ab:9b:8d:d4:5c:ff:27:42: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:A0:A4:F0:FE:5B:11:3D:0D:5F:5F:4C:12:69:0C:D3:E1:C0:97 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4c:84:06:7f:a2:3d:f9:5f:ae:80:2e:e6:c7:6f:0b:e9:48: 9a:70:aa:31:04:61:d6:73:77:7b:e4:88:13:99:dd:b2:a7:ab: 24:d4:8c:25:47:4f:5e:82:dd:9e:cb:e6:b9:03:ec:5f:24:3f: 43:cd:83:13:a2:5b:c4:f4:17:21:a2:46:9a:8c:ac:1e:c4:97: 56:37:04:02:9f:0d:85:85:26:3b:07:02:55:62:a7:4e:c4:8b: 27:41:65:f3:5c:6b:dd:c7:0d:a8:a2:e0:64:ab:47:c8:db:3b: 69:03:ca:ef:a9:37:ba:eb:15:f8:f3:02:b7:80:55:0d:49:92: 71:0b:0a:ad:90:b6:f6:bd:f0:7c:eb:75:d9:10:6f:56:a7:b0: 87:99:51:09:84:7e:0a:ee:ee:0e:c6:42:93:e5:79:19:41:d6: 50:dc:2a:a1:3a:23:12:b0:54:9d:d5:a5:1a:15:bf:38:d2:11: 09:a9:55:14:62:5e:cd:5b:83:b1:c3:99:b2:68:47:13:b9:bc: 10:a0:7a:34:53:44:6e:94:68:71:1f:f3:b9:62:4e:ed:fe:7f: 31:b5:c4:e1:5b:a0:0e:d1:93:13:09:2e:5f:1c:e5:c4:42:8a: a0:98:cd:6d:27:f5:94:dd:82:ff:2c:a8:05:e1:81:a1:9a:7d: 32:a8:36:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUwNDA1MDIzODIxWhcNMjUwNDEyMDIzODIxWjAYMRYwFAYD VQQDEw02N2YwOTc5ZC1mOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/JeY0zU1vg9TA3KfnwP9pQJwaA7KYLP7FibdhNuj4h4U6CriFi4DU66vhZ9 9VtVsL0KCVHjd9gTN7drvZ3NtY6AZy0vY+y5YU2cYDuVa866kNMepE1Cv72woJeZ 4+hzBMZ2cLKOefwkn8yXxRav/uhLwDGvKaEd0JBsUMM2Ei+WmcpsHFJuk6p++fBo KY//ZeNrFdzXYr15R4GVHgmDml3EE13Tujhrb7EQUZ/UviztqCq7QGDLgNKs5Kg5 qR1adAjc9zHA0YCtgIY73iTcxjRkbrYI/CReZ0LNIrf13M4yab3xOOCHTuzl1jrl CV+5hZK9Omiwq5uN1Fz/J0JvFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXLoKTw /lsRPQ1fX0wSaQzT4cCXMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuTIQGf6I9+V+ugC7mx28L6UiacKoxBGHWc3d75IgTmd2yp6sk1Iwl R09egt2ey+a5A+xfJD9DzYMTolvE9BchokaajKwexJdWNwQCnw2FhSY7BwJVYqdO xIsnQWXzXGvdxw2oouBkq0fI2ztpA8rvqTe66xX48wK3gFUNSZJxCwqtkLb2vfB8 63XZEG9Wp7CHmVEJhH4K7u4OxkKT5XkZQdZQ3CqhOiMSsFSd1aUaFb840hEJqVUU Yl7NW4Oxw5myaEcTubwQoHo0U0RulGhxH/O5Yk7t/n8xtcThW6AO0ZMTCS5fHOXE QoqgmM1tJ/WU3YL/LKgF4YGhmn0yqDZj -----END CERTIFICATE-----Generated at Sun Apr 6 18:40:05 2025 by rpki-client