$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: vBgkJ15F735Bfzoanrp6Q2aBjtQ7jQHCQAPZuECMWnA= Subject key identifier: C7:D7:3E:7E:8A:13:42:CA:FA:15:EA:92:94:04:37:F5:5C:70:2E:A1 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0C26 Signing time: Fri 28 Mar 2025 18:40:52 +0000 Manifest this update: Fri 28 Mar 2025 18:40:51 +0000 Manifest next update: Fri 04 Apr 2025 18:40:51 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: qf7sx0JsJ3WKuJq8X5G55T75fJwamK48vYW5zeLoyJo=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 18:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99 Validity Not Before: Mar 28 18:40:51 2025 GMT Not After : Apr 4 18:40:51 2025 GMT Subject: CN=67e6ed34-2b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:84:61:a2:65:41:5d:11:9a:5a:45:a3:64: 15:50:11:29:bb:fb:91:c0:31:3a:92:dc:44:9b:82: 81:84:83:84:36:2f:1f:ca:18:0d:88:3c:cf:a8:f8: bd:42:04:27:b1:72:84:f4:4c:24:09:2b:f3:19:6f: 69:ed:50:51:8a:71:28:44:4e:8c:4c:e9:bd:b3:df: e1:f3:ae:19:9f:04:d2:fe:6d:37:bd:c5:87:99:5f: fc:6e:9f:89:f7:d8:e9:8d:56:52:fe:5e:cd:09:e2: 3d:78:2b:54:d2:fb:b6:40:0b:dd:bc:13:b8:77:84: 96:55:5f:27:24:ac:67:6a:11:47:1a:e7:45:bb:db: 93:d6:a1:35:5a:12:be:96:97:c6:00:5d:2b:e9:dd: d4:e0:c7:15:c6:b1:ab:cf:2f:54:e8:a5:e4:8c:02: 67:ed:ba:42:1c:61:bf:62:7a:6b:c3:14:18:62:54: a4:8c:9e:d4:37:2a:05:8c:95:fa:6f:a7:20:3f:d0: b8:0b:cb:ec:dd:f7:5e:b2:4b:24:a2:ea:c0:ca:cf: 53:a2:a5:91:bc:ec:15:a2:d4:b6:86:e1:4d:77:a5: a8:46:fd:76:3c:84:21:d9:d0:e8:48:89:16:8f:f4: a5:80:69:68:bc:8b:23:c7:25:9f:b1:49:a2:af:f8: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D7:3E:7E:8A:13:42:CA:FA:15:EA:92:94:04:37:F5:5C:70:2E:A1 X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:51:8c:d3:f0:ae:3d:b9:55:33:77:93:4c:c9:b0:e0:04:1e: 71:84:f8:a9:e3:cf:49:20:3a:4e:a5:af:33:2d:34:c4:17:ed: 79:df:ef:9c:01:bc:8d:4d:72:96:66:44:e6:b9:eb:d4:a8:6d: 0a:55:14:33:d9:2e:88:eb:37:43:61:25:46:2d:1e:9d:ec:ae: 36:fe:c0:81:1f:28:fe:42:8e:95:5f:9d:c8:23:73:5e:b9:ce: 99:dc:dd:50:25:a8:44:88:b9:5d:60:5a:b4:61:fc:b9:d5:8f: 46:c5:fc:5e:77:29:98:0f:05:02:c7:9b:e9:0f:01:dc:05:b0: db:9d:20:d6:3f:62:e4:db:e7:6e:a0:b1:23:c5:90:f2:61:94: 7e:1c:7e:77:f1:08:1a:f7:87:fe:b3:18:1d:a5:c5:92:ac:58: cd:7d:91:e3:d3:e5:ed:84:33:3e:57:85:0d:41:36:88:74:e1: cf:1f:9f:81:08:82:e8:9d:55:af:e0:fe:9d:ad:5f:a6:66:32: 23:35:26:4f:1c:f8:83:da:c0:c7:c6:b9:1a:70:73:bb:98:32: a1:29:21:f6:a3:dc:35:0d:b2:7f:e1:7b:0b:b4:7d:7f:9f:4e: 45:ee:c5:c1:b4:bf:1f:a5:00:2f:eb:95:5b:5f:ac:07:8c:55: 70:3a:0c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUwMzI4MTg0MDUxWhcNMjUwNDA0MTg0MDUxWjAYMRYwFAYD VQQDEw02N2U2ZWQzNC0yYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdSEYaJlQV0RmlpFo2QVUBEpu/uRwDE6ktxEm4KBhIOENi8fyhgNiDzPqPi9 QgQnsXKE9EwkCSvzGW9p7VBRinEoRE6MTOm9s9/h864ZnwTS/m03vcWHmV/8bp+J 99jpjVZS/l7NCeI9eCtU0vu2QAvdvBO4d4SWVV8nJKxnahFHGudFu9uT1qE1WhK+ lpfGAF0r6d3U4McVxrGrzy9U6KXkjAJn7bpCHGG/YnprwxQYYlSkjJ7UNyoFjJX6 b6cgP9C4C8vs3fdeskskourAys9ToqWRvOwVotS2huFNd6WoRv12PIQh2dDoSIkW j/SlgGlovIsjxyWfsUmir/gPrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfXPn6K E0LK+hXqkpQEN/VccC6hMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6UYzT8K49uVUzd5NMybDgBB5xhPip489JIDpOpa8zLTTEF+153++c AbyNTXKWZkTmuevUqG0KVRQz2S6I6zdDYSVGLR6d7K42/sCBHyj+Qo6VX53II3Ne uc6Z3N1QJahEiLldYFq0Yfy51Y9GxfxedymYDwUCx5vpDwHcBbDbnSDWP2Lk2+du oLEjxZDyYZR+HH538Qga94f+sxgdpcWSrFjNfZHj0+XthDM+V4UNQTaIdOHPH5+B CILonVWv4P6drV+mZjIjNSZPHPiD2sDHxrkacHO7mDKhKSH2o9w1DbJ/4XsLtH1/ n05F7sXBtL8fpQAv65VbX6wHjFVwOgwq -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:29 2025 by rpki-client