$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json) Hash identifier: jX/M9Vd2GVbJS8de92dbvTtLQs+y+Rf2pHYrq8/7Yng= Subject key identifier: D1:51:B4:BC:05:FD:58:85:A3:44:14:3E:E7:AB:53:88:B5:4F:CF:BB Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Certificate serial: 10A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft Manifest number: 10A0 Signing time: Fri 04 Apr 2025 17:25:08 +0000 Manifest this update: Fri 04 Apr 2025 17:25:08 +0000 Manifest next update: Fri 11 Apr 2025 17:25:08 +0000 Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: mc/wo/KJO8SSktfUH4dCxsIYhk3PoA93nfC7IYKFkKg=) 2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4265 (0x10a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130AC8 Validity Not Before: Apr 4 17:25:08 2025 GMT Not After : Apr 11 17:25:08 2025 GMT Subject: CN=67f015f4-de99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:bc:49:72:6e:4f:54:0e:f9:09:be:57:62: df:58:d9:46:63:50:43:9a:c3:57:40:f0:8d:63:61: b7:41:68:30:3a:3d:9b:58:0d:6d:cf:53:3a:c9:d7: 57:2a:fb:e7:21:a5:01:df:c8:01:51:3f:a6:62:52: 0a:8c:f7:92:aa:96:84:ac:27:19:8c:40:19:85:0f: a8:55:80:05:1a:04:b6:65:8d:47:19:1d:24:9c:d3: e6:e7:d7:89:3a:be:df:63:11:3b:9f:74:d4:7e:36: 6e:2c:f4:36:9c:9f:ef:ab:c6:b2:f4:70:32:df:11: b3:1d:cb:81:fa:06:4a:db:8f:22:27:fb:08:74:e3: 04:18:20:2e:39:e7:f8:1b:d1:9c:ec:37:ed:ce:b7: 02:b9:7e:4e:fe:87:e3:cb:3b:2c:ea:f9:88:02:b7: 29:fe:0d:52:ab:de:ba:07:0c:17:e8:53:69:f6:9c: c3:f7:3b:71:f5:b7:a7:be:63:43:b0:a4:78:10:e6: 36:3a:62:60:53:08:55:9b:64:7c:fc:8b:f9:1a:db: 2a:26:d1:1e:2a:1c:71:50:1c:4f:35:42:65:d4:b4: fc:14:96:2a:7d:e4:af:a2:25:0b:a4:9c:51:df:81: 6f:6a:1c:a9:22:d3:1c:5e:bd:46:c1:5c:2d:d8:af: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:51:B4:BC:05:FD:58:85:A3:44:14:3E:E7:AB:53:88:B5:4F:CF:BB X509v3 Authority Key Identifier: keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:08:2d:8a:61:96:77:c1:b3:d2:da:8f:c3:db:c6:59:58:0d: 24:4e:9d:7f:d5:f3:ba:7e:ab:0a:ae:43:78:30:5f:17:5d:54: 50:12:e3:b0:7b:da:2a:7a:9a:00:f1:d5:82:df:25:b9:26:1a: 90:40:22:24:22:d2:00:4a:e1:ef:76:e5:9f:f1:45:af:3c:59: e2:42:13:42:78:e6:9d:43:4d:42:96:9d:8a:80:4a:75:5e:27: 97:2c:cb:61:41:19:91:9c:77:58:5c:04:19:0f:2a:17:e2:62: d0:01:25:9e:83:23:0f:f6:8c:91:a6:83:cb:ee:5c:72:85:d4: 10:7f:91:d1:ae:c0:8d:a1:f7:cf:37:c7:01:a4:73:73:19:92: c2:5a:84:01:a4:e2:df:49:53:f0:17:56:5f:f0:e7:e9:a0:0f: 3a:eb:b5:5a:43:56:23:20:ac:89:a5:c1:dd:02:fd:70:ca:3e: 42:09:a2:b1:cc:9b:7d:c1:e4:2b:43:44:ca:51:3e:ae:c9:30: 1d:3f:65:72:93:a5:8b:61:2e:1a:08:3e:36:ae:1b:33:15:6f: 17:fc:18:fa:ee:53:62:02:7a:3d:ff:e7:65:a8:49:ae:03:9b: 83:2e:8b:74:23:c3:f5:c3:9d:ad:b0:66:ff:ac:c9:c6:ec:fc: ad:e5:8b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB MkFBOTA3QjgwHhcNMjUwNDA0MTcyNTA4WhcNMjUwNDExMTcyNTA4WjAYMRYwFAYD VQQDEw02N2YwMTVmNC1kZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1C8SXJuT1QO+Qm+V2LfWNlGY1BDmsNXQPCNY2G3QWgwOj2bWA1tz1M6yddX KvvnIaUB38gBUT+mYlIKjPeSqpaErCcZjEAZhQ+oVYAFGgS2ZY1HGR0knNPm59eJ Or7fYxE7n3TUfjZuLPQ2nJ/vq8ay9HAy3xGzHcuB+gZK248iJ/sIdOMEGCAuOef4 G9Gc7DftzrcCuX5O/ofjyzss6vmIArcp/g1Sq966BwwX6FNp9pzD9ztx9benvmND sKR4EOY2OmJgUwhVm2R8/Iv5GtsqJtEeKhxxUBxPNUJl1LT8FJYqfeSvoiULpJxR 34FvahypItMcXr1GwVwt2K+ZVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFRtLwF /ViFo0QUPuerU4i1T8+7MB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0 MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVCC2KYZZ3wbPS2o/D28ZZWA0kTp1/1fO6fqsKrkN4MF8XXVRQEuOw e9oqepoA8dWC3yW5JhqQQCIkItIASuHvduWf8UWvPFniQhNCeOadQ01Clp2KgEp1 XieXLMthQRmRnHdYXAQZDyoX4mLQASWegyMP9oyRpoPL7lxyhdQQf5HRrsCNoffP N8cBpHNzGZLCWoQBpOLfSVPwF1Zf8OfpoA8667VaQ1YjIKyJpcHdAv1wyj5CCaKx zJt9weQrQ0TKUT6uyTAdP2Vyk6WLYS4aCD42rhszFW8X/Bj67lNiAno9/+dlqEmu A5uDLot0I8P1w52tsGb/rMnG7Pyt5YtM -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:33 2025 by rpki-client