$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: ifhKwimiH3EQ7Ib4IRRrxp+RixwMwyuUQra8GZeWWho= Subject key identifier: E1:97:01:95:CC:E7:87:51:B8:D9:6E:6A:47:24:1B:A4:CD:15:95:B8 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0155 Signing time: Sat 19 Apr 2025 03:19:11 +0000 Manifest this update: Sat 19 Apr 2025 03:19:11 +0000 Manifest next update: Sat 26 Apr 2025 03:19:11 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: T2Vi70i3y3pCPmgOVFGA/F88Dr+Eu1dcvK6COMTf4OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 03:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Apr 19 03:19:11 2025 GMT Not After : Apr 26 03:19:11 2025 GMT Subject: CN=6803162f-7575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:17:b1:9b:9b:9b:fa:e8:6f:9e:99:1d:6d: e7:12:9d:55:e0:5e:37:59:de:59:76:8d:af:cc:f6: ab:be:9a:37:73:95:82:6b:a8:f4:f0:8b:0b:08:bb: 7a:c7:f0:18:0f:fa:8b:b1:57:f0:8a:66:dd:93:df: b9:21:ec:30:ef:95:ee:46:0c:3a:81:c2:de:82:d6: 46:b7:28:98:25:cb:93:35:a7:d8:41:16:ed:25:fc: db:d2:56:5b:a6:11:a0:26:e5:24:ab:9a:c7:c9:b5: dd:d8:49:e5:d6:bb:9e:84:aa:51:f1:05:97:60:ed: 13:88:34:cb:22:71:c1:f3:24:65:58:e4:ee:ed:20: c9:38:21:e3:7f:0e:73:76:3f:44:38:72:28:e8:35: 5c:6f:0b:c4:bf:fe:ed:27:5a:ac:cf:2f:6e:43:02: 7d:91:96:10:8f:68:59:9f:63:5a:80:2e:a2:f9:8f: fc:2d:60:db:38:7b:70:df:a5:02:79:0e:97:2d:43: be:36:23:11:c0:d0:7d:c8:18:83:50:7f:4c:7e:bd: 62:a8:6b:7d:60:8e:a6:3c:59:04:98:2e:00:98:37: 98:90:c8:e8:6a:9a:19:dc:10:ec:16:85:f9:c1:a6: 25:7b:73:26:06:87:72:49:10:fb:b1:b7:21:1e:c6: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:97:01:95:CC:E7:87:51:B8:D9:6E:6A:47:24:1B:A4:CD:15:95:B8 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:e1:a6:e0:b3:3b:2a:c9:42:fe:7b:6d:97:dd:9b:51:2c: 6a:ad:dd:06:e0:56:8d:77:e3:bd:c2:08:4b:f2:f1:0d:51:a1: d5:70:64:cb:25:ea:05:20:9c:3c:a6:8e:0f:2f:73:c7:dc:a9: b0:98:49:e0:8f:b1:4d:5c:2d:39:2a:52:38:21:63:ca:06:81: cb:bb:e9:f6:89:0b:0d:1b:be:3b:b2:99:4c:bb:0f:21:36:86: 9f:bf:40:df:0d:4a:7f:1e:cf:15:23:5b:dc:b2:fc:25:82:75: 0f:1d:3e:30:44:42:50:ab:0a:34:b6:5f:d3:27:3d:d5:f0:45: 41:c7:88:4b:2b:0d:cd:51:ab:e5:6b:0b:0e:81:88:7b:bf:bc: ec:05:30:0b:42:60:b7:6d:8e:d8:c3:e4:f9:f5:19:b0:9e:73: e7:08:42:30:e8:20:84:d4:9f:59:af:f7:b2:d5:ad:7a:c6:ab: 0e:78:1a:92:06:fa:c6:49:c1:78:2d:98:67:05:1c:49:83:c3: c6:5b:34:ff:e2:36:95:89:b6:3e:7f:89:0e:f9:4b:d5:d3:a2: 77:3e:b1:9c:e8:e7:21:0f:f1:b3:22:8d:73:8f:c4:96:d2:4e: 1d:3d:7d:dc:a9:4f:bb:77:52:bb:7d:1a:eb:62:7d:a2:16:c4: 15:15:95:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwNDE5MDMxOTExWhcNMjUwNDI2MDMxOTExWjAYMRYwFAYD VQQDEw02ODAzMTYyZi03NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOQXsZubm/rob56ZHW3nEp1V4F43Wd5Zdo2vzParvpo3c5WCa6j08IsLCLt6 x/AYD/qLsVfwimbdk9+5Ieww75XuRgw6gcLegtZGtyiYJcuTNafYQRbtJfzb0lZb phGgJuUkq5rHybXd2Enl1ruehKpR8QWXYO0TiDTLInHB8yRlWOTu7SDJOCHjfw5z dj9EOHIo6DVcbwvEv/7tJ1qszy9uQwJ9kZYQj2hZn2NagC6i+Y/8LWDbOHtw36UC eQ6XLUO+NiMRwNB9yBiDUH9Mfr1iqGt9YI6mPFkEmC4AmDeYkMjoapoZ3BDsFoX5 waYle3MmBodySRD7sbchHsaT3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGXAZXM 54dRuNluakckG6TNFZW4MB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqIeGm4LM7KslC/nttl92bUSxqrd0G4FaNd+O9wghL8vENUaHVcGTL JeoFIJw8po4PL3PH3KmwmEngj7FNXC05KlI4IWPKBoHLu+n2iQsNG747splMuw8h Noafv0DfDUp/Hs8VI1vcsvwlgnUPHT4wREJQqwo0tl/TJz3V8EVBx4hLKw3NUavl awsOgYh7v7zsBTALQmC3bY7Yw+T59RmwnnPnCEIw6CCE1J9Zr/ey1a16xqsOeBqS BvrGScF4LZhnBRxJg8PGWzT/4jaVibY+f4kO+UvV06J3PrGc6OchD/GzIo1zj8SW 0k4dPX3cqU+7d1K7fRrrYn2iFsQVFZXn -----END CERTIFICATE-----Generated at Sun Apr 20 20:58:34 2025 by rpki-client