$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: hciHsRtjwduIMiWg0eJDGmzLQQzSkgYQDzgZPIFNMTU= Subject key identifier: FB:78:77:41:D7:4C:A1:88:95:E0:F1:49:AA:B2:D0:7F:62:F6:A0:B9 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: A9 Signing time: Sat 29 Mar 2025 05:50:15 +0000 Manifest this update: Sat 29 Mar 2025 05:50:15 +0000 Manifest next update: Sat 05 Apr 2025 05:50:15 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: rdOIgYAQGkOmCCABtpRkRKPuQw2GDdsp/VNy8a+4cy0=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190 Validity Not Before: Mar 29 05:50:15 2025 GMT Not After : Apr 5 05:50:15 2025 GMT Subject: CN=67e78a17-0b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:1a:c2:9f:23:74:e7:5f:2b:09:d8:bb:25: d1:63:5a:d4:c1:df:43:8f:90:a2:cc:66:d8:69:6f: 93:ca:a3:d8:06:52:e3:25:47:17:0c:b6:1a:f2:1d: 8a:93:f1:fc:33:86:8a:be:9d:f5:ad:6d:a7:47:a8: fb:90:aa:da:7d:44:98:d6:db:04:00:1b:7e:70:39: 10:75:2d:c3:e1:40:72:0e:a5:a4:84:17:e4:da:42: 51:de:b7:21:72:aa:0a:5b:04:d6:c0:67:76:2b:6f: aa:c0:a8:ef:98:f6:05:75:cf:46:4f:f4:24:e3:b2: 7c:2e:36:40:9e:ff:4a:64:ce:f4:a3:0d:f5:4f:09: 5c:d3:4c:30:14:6e:fe:fe:5c:ae:eb:18:31:81:03: 49:2a:fd:c7:23:c0:ee:a2:c3:11:e6:c3:28:8a:52: 1d:74:ee:5a:bd:45:55:c5:68:78:ef:02:a2:99:a3: 36:45:57:9c:b3:1e:35:0f:bb:91:2e:1c:09:a7:31: 53:d5:29:47:c9:2b:12:b0:e1:c0:89:9e:b0:96:f0: 32:61:eb:fe:b7:a5:c5:6c:42:83:0c:f5:61:9f:08: 39:de:80:bf:4a:aa:21:99:59:1c:83:a7:f5:94:de: fb:fe:5f:f4:d1:44:b1:a0:c5:6b:f6:ae:b4:69:63: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:77:41:D7:4C:A1:88:95:E0:F1:49:AA:B2:D0:7F:62:F6:A0:B9 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:1c:f9:16:4e:5a:aa:10:30:f3:90:78:66:ad:e5:4a:12:d9: 6f:2f:09:96:39:9e:8d:4f:30:49:28:8a:ef:41:e3:fd:1f:43: 93:d2:74:41:e0:ba:42:67:66:45:9a:99:6a:0e:31:fc:24:0e: e9:b9:fb:b3:ee:6f:f1:a8:80:b6:7f:0e:bf:08:1c:ba:c6:e3: f0:52:fa:6e:85:bc:7e:68:22:f0:5b:e0:0b:4a:77:4d:a8:b5: f8:40:6e:4c:a0:26:14:77:86:10:0e:15:60:9f:44:b7:85:8e: 12:07:fe:f9:52:86:ac:8e:50:54:fa:6d:d0:89:7c:02:16:af: ab:fa:d0:d7:cf:0e:44:02:95:85:dc:b1:5f:68:ae:20:07:de: 3f:c3:ff:16:34:6d:05:fe:b6:43:b2:12:c7:7f:49:84:ee:d0: 32:8a:4e:63:4e:79:25:3a:9c:99:a1:da:e8:dd:d5:1c:d0:a8: 30:4a:6a:ff:b3:89:32:86:f8:ef:3c:85:ac:d2:21:45:50:c2: 90:33:d2:2e:58:47:59:6f:67:92:53:92:27:4e:77:a0:c4:04: 49:a2:ee:ff:e2:52:22:24:a8:30:b1:7d:2d:44:9b:86:d6:e6: 23:74:c5:13:52:55:61:67:5f:9c:0a:f4:03:65:2e:a7:52:5c: 17:df:a3:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUwMzI5MDU1MDE1WhcNMjUwNDA1MDU1MDE1WjAYMRYwFAYD VQQDEw02N2U3OGExNy0wYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIkawp8jdOdfKwnYuyXRY1rUwd9Dj5CizGbYaW+TyqPYBlLjJUcXDLYa8h2K k/H8M4aKvp31rW2nR6j7kKrafUSY1tsEABt+cDkQdS3D4UByDqWkhBfk2kJR3rch cqoKWwTWwGd2K2+qwKjvmPYFdc9GT/Qk47J8LjZAnv9KZM70ow31Twlc00wwFG7+ /lyu6xgxgQNJKv3HI8DuosMR5sMoilIddO5avUVVxWh47wKimaM2RVecsx41D7uR LhwJpzFT1SlHySsSsOHAiZ6wlvAyYev+t6XFbEKDDPVhnwg53oC/SqohmVkcg6f1 lN77/l/00USxoMVr9q60aWOCpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt4d0HX TKGIleDxSaqy0H9i9qC5MB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUHPkWTlqqEDDzkHhmreVKEtlvLwmWOZ6NTzBJKIrvQeP9H0OT0nRB 4LpCZ2ZFmplqDjH8JA7pufuz7m/xqIC2fw6/CBy6xuPwUvpuhbx+aCLwW+ALSndN qLX4QG5MoCYUd4YQDhVgn0S3hY4SB/75UoasjlBU+m3QiXwCFq+r+tDXzw5EApWF 3LFfaK4gB94/w/8WNG0F/rZDshLHf0mE7tAyik5jTnklOpyZodro3dUc0KgwSmr/ s4kyhvjvPIWs0iFFUMKQM9IuWEdZb2eSU5InTnegxARJou7/4lIiJKgwsX0tRJuG 1uYjdMUTUlVhZ1+cCvQDZS6nUlwX36M4 -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:02 2025 by rpki-client