$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: 3IuOJcXfrQtPGnba6hIni83VAvu1Mhh4YO7Eqdu04UI= Subject key identifier: 80:2F:FC:30:4B:74:21:0B:42:62:E6:53:F9:F0:2F:31:8C:6D:E1:32 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 019B Signing time: Sat 05 Apr 2025 02:58:48 +0000 Manifest this update: Sat 05 Apr 2025 02:58:47 +0000 Manifest next update: Sat 12 Apr 2025 02:58:47 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: O4UaYJkDB+QWgC0QK48H44IzcPF2GT7FJ30cyUvEauY=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416 Validity Not Before: Apr 5 02:58:47 2025 GMT Not After : Apr 12 02:58:47 2025 GMT Subject: CN=67f09c67-b654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:95:f8:15:6b:c7:d4:3b:ae:db:d9:d1:87: 75:e0:db:88:a3:81:d3:4e:01:c9:25:ac:56:d7:4d: a0:e6:c8:56:b3:45:51:fa:2d:b8:8f:8a:ee:48:5f: b1:35:cc:ca:27:20:b2:60:df:c0:48:c3:98:a3:96: 88:d5:75:aa:d4:89:b8:37:b0:4b:f3:dc:28:7f:72: 60:d8:15:53:cc:cb:2a:9c:57:d5:a6:cc:d5:82:a1: 59:40:3e:b5:4c:e9:c4:16:c7:82:f8:92:a8:76:c6: b7:52:12:0b:ac:c1:5c:0b:b5:b8:0c:04:57:e3:a8: 8d:37:5b:d6:6d:34:c9:85:3f:b0:4f:f5:b4:bd:7b: 78:5d:26:12:64:f3:ad:d4:f8:93:5e:72:cb:31:56: dc:9d:fe:53:b5:89:c1:aa:e5:47:7a:3b:8c:4d:43: 80:58:cb:d0:8f:ea:ee:1e:5a:72:a8:d5:0f:6c:2e: 45:db:e1:c0:56:b3:1b:e3:79:d8:d2:d2:ec:8d:4f: 66:51:20:c9:65:88:4d:b7:40:7d:b2:ca:d4:45:16: d5:60:87:02:71:fe:85:52:63:c8:8f:a3:dc:75:c0: b3:97:5d:4d:46:87:76:36:90:8f:45:89:3e:f2:7e: 25:dc:e1:7d:94:5e:a2:f2:09:dc:af:9f:ab:d4:1d: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2F:FC:30:4B:74:21:0B:42:62:E6:53:F9:F0:2F:31:8C:6D:E1:32 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:e9:d4:d2:fe:27:8d:1f:00:77:d8:f4:db:e6:bd:a6:18: 51:05:e4:42:08:c5:bf:bd:e5:e3:0d:9d:a5:02:fe:8f:6e:6d: c4:79:e7:18:8c:1e:36:0f:a0:2c:86:d6:a4:c1:4a:01:73:fa: 62:b6:66:7a:52:d4:88:d2:63:e2:41:d8:93:99:9e:41:bd:c9: e0:6b:e1:08:d1:6d:34:fd:30:ad:bd:ee:38:ed:3e:e9:b0:fd: 78:f0:32:c0:76:ba:39:1e:fa:db:42:7f:d4:e0:b4:7a:b6:fc: 67:8f:a2:eb:ab:79:f7:a9:68:f5:e5:cd:03:be:1c:c4:97:eb: aa:1e:d5:92:c5:d8:99:13:d9:2f:c8:c6:ef:05:dc:bc:92:66: d2:2e:61:3b:fa:af:a6:38:e7:5e:8c:b7:71:63:fa:73:35:1d: 96:a6:fd:ed:3f:93:81:89:ae:dc:1f:96:6f:35:24:8c:38:96: 66:48:57:8c:08:03:b3:bd:c7:08:e4:cf:90:0a:80:6c:51:b7: 48:ff:ba:a7:d8:75:e1:79:3f:e9:f5:a1:dd:7b:56:3c:67:8f: 9d:9c:d8:24:1a:6b:3f:99:00:52:f5:d7:13:05:74:ef:c0:76: 8a:f2:ca:a1:cc:d7:fb:eb:b6:41:cf:1b:e9:7e:b1:6f:70:c4: b3:25:ba:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjUwNDA1MDI1ODQ3WhcNMjUwNDEyMDI1ODQ3WjAYMRYwFAYD VQQDEw02N2YwOWM2Ny1iNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVmV+BVrx9Q7rtvZ0Yd14NuIo4HTTgHJJaxW102g5shWs0VR+i24j4ruSF+x NczKJyCyYN/ASMOYo5aI1XWq1Im4N7BL89wof3Jg2BVTzMsqnFfVpszVgqFZQD61 TOnEFseC+JKodsa3UhILrMFcC7W4DARX46iNN1vWbTTJhT+wT/W0vXt4XSYSZPOt 1PiTXnLLMVbcnf5TtYnBquVHejuMTUOAWMvQj+ruHlpyqNUPbC5F2+HAVrMb43nY 0tLsjU9mUSDJZYhNt0B9ssrURRbVYIcCcf6FUmPIj6PcdcCzl11NRod2NpCPRYk+ 8n4l3OF9lF6i8gncr5+r1B3ZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAv/DBL dCELQmLmU/nwLzGMbeEyMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhrenU0v4njR8Ad9j02+a9phhRBeRCCMW/veXjDZ2lAv6Pbm3EeecY jB42D6AshtakwUoBc/pitmZ6UtSI0mPiQdiTmZ5Bvcnga+EI0W00/TCtve447T7p sP148DLAdro5HvrbQn/U4LR6tvxnj6Lrq3n3qWj15c0DvhzEl+uqHtWSxdiZE9kv yMbvBdy8kmbSLmE7+q+mOOdejLdxY/pzNR2Wpv3tP5OBia7cH5ZvNSSMOJZmSFeM CAOzvccI5M+QCoBsUbdI/7qn2HXheT/p9aHde1Y8Z4+dnNgkGms/mQBS9dcTBXTv wHaK8sqhzNf767ZBzxvpfrFvcMSzJbpX -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:02 2025 by rpki-client