$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: krAbIM126ooxOrWQHf+hEnrPeDRZU/iaAWSgQlDq2ZI= Subject key identifier: 8A:C9:F8:20:0D:3D:40:30:1D:6E:8E:E2:AE:EB:54:A9:5C:96:CC:E5 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 49 Signing time: Thu 03 Apr 2025 06:41:46 +0000 Manifest this update: Thu 03 Apr 2025 06:41:45 +0000 Manifest next update: Thu 10 Apr 2025 06:41:45 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: JejqGT+zaS8H1+vGiL/Iftov0E+idNtPYiN51r/Qe6c=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162 Validity Not Before: Apr 3 06:41:45 2025 GMT Not After : Apr 10 06:41:45 2025 GMT Subject: CN=67ee2da9-1248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:b3:c9:76:7f:61:e9:ce:61:79:79:a8:d0: bf:5b:3f:a7:84:ae:11:38:2a:a0:9c:2f:77:bf:eb: 43:3e:30:bd:48:01:86:64:be:1f:b6:15:bf:08:a8: b3:88:cf:74:22:bb:bc:27:21:57:cb:7c:26:ad:42: 1b:69:14:a7:7a:a4:83:8b:1e:16:16:c3:15:89:41: 90:1c:ad:07:49:72:3d:7a:91:ad:38:fd:32:c1:d1: e1:20:9b:f6:2f:83:d3:98:86:d9:ad:9a:b5:91:d4: 59:8a:2f:15:79:bd:60:91:f4:d5:18:55:c4:c7:58: 68:c6:5f:ae:f2:1e:67:58:f1:5d:cf:e7:01:26:6d: e1:98:b3:0e:69:02:bb:ea:27:23:1f:4c:c0:df:3b: fd:57:5a:47:9e:09:c9:89:22:d9:eb:a3:f1:25:84: 36:eb:86:0d:86:64:37:6c:6d:52:8f:7b:45:03:a7: 19:27:01:d2:30:f6:6b:b7:58:35:ff:86:ac:9f:70: 12:cb:d8:38:5c:50:c0:91:db:76:04:1f:c7:9f:e9: 53:cf:96:f9:96:ab:72:98:9f:72:0a:48:b4:4b:f0: 8d:5b:f7:d2:d8:7a:50:3e:d4:8f:5e:7d:e2:49:45: d0:ed:72:55:54:fa:7b:84:81:e0:b8:e0:ea:f5:f0: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:F8:20:0D:3D:40:30:1D:6E:8E:E2:AE:EB:54:A9:5C:96:CC:E5 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:42:cc:2e:f2:1f:28:c2:92:5f:51:ec:e9:ad:b8:bb:cb: de:56:4f:17:3d:e3:d6:81:7a:09:ec:97:7b:25:e1:a7:e4:29: 8d:77:ff:bc:a1:e9:d0:a8:54:c3:17:7b:1c:5a:56:0b:c0:4a: a6:db:44:76:74:c2:15:f3:1e:d9:cd:8c:f1:26:e2:dd:c4:b8: dc:df:9f:28:35:8b:1d:0f:50:50:72:4d:d3:d4:e7:50:31:cd: c0:71:b9:84:ce:67:44:60:89:8c:aa:d6:6b:0f:12:e0:a0:61: 4a:aa:26:1d:a2:f2:d4:f4:fa:24:ef:e0:c4:47:39:b6:3b:5f: d2:2b:39:66:41:cf:aa:fb:c6:c7:49:45:d0:87:af:7e:04:51: fc:e9:17:30:04:15:eb:12:44:b4:6b:8e:45:5d:77:7e:83:49: 8e:09:24:21:96:c7:a8:23:fb:2d:f3:1e:2a:9d:df:9f:60:a0: 19:af:5b:9d:15:fd:11:63:94:67:9f:f9:59:b7:ae:db:f9:30: 04:1d:dc:c6:5c:56:59:ed:0e:21:96:5c:60:65:18:64:88:5d: 0b:12:0b:1d:77:9f:7a:c2:fc:45:2b:51:97:0c:e0:bb:f7:b1: 63:1d:88:64:26:2d:e0:eb:9e:86:c9:a6:ef:30:96:f1:64:7b: f5:38:35:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTE2MjExMC8GA1UEBRMoMDdBNjgxQzkxQzNFMDUxMkQzNjg5RTk5QkNFNUJDNjY0 MDkxNjczNDAeFw0yNTA0MDMwNjQxNDVaFw0yNTA0MTAwNjQxNDVaMBgxFjAUBgNV BAMTDTY3ZWUyZGE5LTEyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZvLPJdn9h6c5heXmo0L9bP6eErhE4KqCcL3e/60M+ML1IAYZkvh+2Fb8IqLOI z3Qiu7wnIVfLfCatQhtpFKd6pIOLHhYWwxWJQZAcrQdJcj16ka04/TLB0eEgm/Yv g9OYhtmtmrWR1FmKLxV5vWCR9NUYVcTHWGjGX67yHmdY8V3P5wEmbeGYsw5pArvq JyMfTMDfO/1XWkeeCcmJItnro/ElhDbrhg2GZDdsbVKPe0UDpxknAdIw9mu3WDX/ hqyfcBLL2DhcUMCR23YEH8ef6VPPlvmWq3KYn3IKSLRL8I1b99LYelA+1I9efeJJ RdDtclVU+nuEgeC44Or18DLjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUisn4IA09 QDAdbo7irutUqVyWzOUwHwYDVR0jBBgwFoAUB6aByRw+BRLTaJ6ZvOW8ZkCRZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MTYyLzVBMzgwRDZBQUQ0 MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjZhQnlSdy1CUkxUYUo2WnZPVzhaa0NSWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MTYyLzVBMzgwRDZBQUQ0MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJM VGFKNlp2T1c4WmtDUlp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADvfQswu8h8owpJfUezprbi7y95WTxc949aBegnsl3sl4afkKY13/7yh 6dCoVMMXexxaVgvASqbbRHZ0whXzHtnNjPEm4t3EuNzfnyg1ix0PUFByTdPU51Ax zcBxuYTOZ0RgiYyq1msPEuCgYUqqJh2i8tT0+iTv4MRHObY7X9IrOWZBz6r7xsdJ RdCHr34EUfzpFzAEFesSRLRrjkVdd36DSY4JJCGWx6gj+y3zHiqd359goBmvW50V /RFjlGef+Vm3rtv5MAQd3MZcVlntDiGWXGBlGGSIXQsSCx13n3rC/EUrUZcM4Lv3 sWMdiGQmLeDrnobJpu8wlvFke/U4NSU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:56 2025 by rpki-client