$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: QfT2+8+QP2NZPWFbrYnUpJq2nFTBddxvp91Pfr+ZqZQ= Subject key identifier: 79:A7:1A:91:9A:FA:84:47:EE:ED:92:A9:3F:FB:D6:F3:BF:43:30:94 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: F9 Signing time: Thu 03 Apr 2025 04:24:57 +0000 Manifest this update: Thu 03 Apr 2025 04:24:57 +0000 Manifest next update: Thu 10 Apr 2025 04:24:57 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: wRvM7HO6jeiJDN1yPdrbBsGjcVsJ6YDWRU3+l2/aMUo=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129 Validity Not Before: Apr 3 04:24:57 2025 GMT Not After : Apr 10 04:24:57 2025 GMT Subject: CN=67ee0d99-5aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:74:7f:37:47:2d:84:09:4b:8e:b9:35:8d: 5e:68:5a:0f:5e:56:83:ce:0f:4b:a5:94:f7:74:67: fe:52:a0:d3:8d:fb:e4:5a:0f:48:62:aa:46:31:a5: ea:0e:4e:05:09:c2:c1:0e:bc:be:b2:41:74:8b:8e: 29:39:a4:7b:69:82:1c:16:bd:cf:d4:a9:56:30:32: c8:a3:7f:cf:57:cf:c2:73:eb:13:7c:1b:2a:26:52: 11:2c:05:18:10:18:e0:0c:59:e0:af:6e:2e:1f:87: a5:fa:ba:74:92:e8:f0:6d:e1:96:26:8e:10:a3:b3: db:b1:40:bf:5a:fb:50:d9:b1:f2:34:2a:fe:79:69: 45:cc:33:ed:eb:49:6e:c3:1b:42:0d:fb:b5:2e:fb: 74:51:fb:b6:4f:92:90:13:36:99:f4:5b:d8:da:43: 24:ef:62:60:a9:ee:75:a9:4f:0b:2e:10:e2:15:ba: ba:f3:69:29:7c:13:8b:f9:b6:35:1a:87:8c:24:4b: c0:c7:11:31:2d:c7:c3:51:11:ab:ec:75:e5:cc:8a: 12:7c:68:ae:f0:2c:4f:61:0b:11:68:ec:9c:66:2a: f7:24:97:df:9b:d7:4d:a5:2c:24:f6:ef:06:4c:87: bc:82:75:a4:45:6a:1d:76:92:20:0a:f3:20:59:ed: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A7:1A:91:9A:FA:84:47:EE:ED:92:A9:3F:FB:D6:F3:BF:43:30:94 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:34:06:b5:32:29:0c:65:c7:f1:e8:68:73:ad:39:1a:02:5b: 99:05:85:e1:f8:2f:a2:cc:d4:48:8f:9e:95:b6:64:fd:e9:f4: 8e:2d:b9:6a:ce:60:80:d2:56:a2:10:f6:e1:37:97:ff:77:7a: e4:4b:ab:61:09:f4:8f:21:74:79:b1:57:70:85:7d:27:24:11: b2:cb:21:ab:52:5c:0d:92:e5:9e:6c:dc:21:9b:80:29:9c:4b: 24:5a:35:f9:79:4a:29:3b:87:e9:98:0c:a0:02:86:65:4c:31: f6:b2:f4:9d:61:2a:cb:5d:26:43:57:f3:f1:23:fa:d5:e3:b9: 9b:c0:35:6b:1c:d9:f4:89:bf:8d:9c:7a:5d:cb:bf:43:a0:81: d5:58:3d:74:59:b6:1e:50:3d:3b:c4:49:70:ad:47:46:44:d2: 3e:a7:e9:00:48:5d:39:96:62:92:ef:6d:8e:4b:bf:37:3f:e3: 31:96:44:88:25:9b:ef:e9:f9:9e:d6:1d:b3:e5:fe:44:0a:ef: 66:b4:cd:53:82:51:d8:59:07:f2:59:da:85:b7:82:a8:35:0b: e2:50:c5:3c:c8:29:c8:d2:74:11:fe:82:ee:da:cc:9e:d1:23: 5a:39:dd:9e:c7:59:16:ad:54:e9:24:98:4c:c2:a8:ed:de:b5: b9:ec:48:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUwNDAzMDQyNDU3WhcNMjUwNDEwMDQyNDU3WjAYMRYwFAYD VQQDEw02N2VlMGQ5OS01YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKx0fzdHLYQJS465NY1eaFoPXlaDzg9LpZT3dGf+UqDTjfvkWg9IYqpGMaXq Dk4FCcLBDry+skF0i44pOaR7aYIcFr3P1KlWMDLIo3/PV8/Cc+sTfBsqJlIRLAUY EBjgDFngr24uH4el+rp0kujwbeGWJo4Qo7PbsUC/WvtQ2bHyNCr+eWlFzDPt60lu wxtCDfu1Lvt0Ufu2T5KQEzaZ9FvY2kMk72Jgqe51qU8LLhDiFbq682kpfBOL+bY1 GoeMJEvAxxExLcfDURGr7HXlzIoSfGiu8CxPYQsRaOycZir3JJffm9dNpSwk9u8G TIe8gnWkRWoddpIgCvMgWe1g1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmnGpGa +oRH7u2SqT/71vO/QzCUMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNAa1MikMZcfx6GhzrTkaAluZBYXh+C+izNRIj56VtmT96fSOLblq zmCA0laiEPbhN5f/d3rkS6thCfSPIXR5sVdwhX0nJBGyyyGrUlwNkuWebNwhm4Ap nEskWjX5eUopO4fpmAygAoZlTDH2svSdYSrLXSZDV/PxI/rV47mbwDVrHNn0ib+N nHpdy79DoIHVWD10WbYeUD07xElwrUdGRNI+p+kASF05lmKS722OS783P+MxlkSI JZvv6fme1h2z5f5ECu9mtM1TglHYWQfyWdqFt4KoNQviUMU8yCnI0nQR/oLu2sye 0SNaOd2ex1kWrVTpJJhMwqjt3rW57EhA -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:54 2025 by rpki-client