$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: ktYGOTtL0RfZEIOleKjIGFiXed65OIUwAsR4FrH5Y+Y= Subject key identifier: D3:9F:26:6E:08:15:5D:74:0F:A9:CD:9E:E0:C8:F7:55:8C:EC:A9:6C Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: B9 Signing time: Thu 03 Apr 2025 05:14:31 +0000 Manifest this update: Thu 03 Apr 2025 05:14:30 +0000 Manifest next update: Thu 10 Apr 2025 05:14:30 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: SGHzz2YJwRyLL1c7kHiAnw9d6Q66uc7Z6WyQZH753Cw=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: zKqmtZ3hPlN9AWLx9aGbTTOZenzY439Vd/KzhKuSP5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27 Validity Not Before: Apr 3 05:14:30 2025 GMT Not After : Apr 10 05:14:30 2025 GMT Subject: CN=67ee1936-59cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:bf:06:9a:b4:7e:7d:87:9f:16:1a:7c:3e: b3:69:ba:67:ef:70:9f:66:40:c5:93:2c:a0:44:d3: 3f:e3:ce:73:35:63:0d:25:82:c1:eb:d4:eb:c0:8f: 78:6e:a8:93:ed:53:6a:34:a6:f3:53:46:8c:c6:59: 89:89:30:fb:cf:0e:06:64:82:82:cd:88:78:9e:f3: 56:a2:1f:a9:fb:31:9e:c8:25:b8:f4:be:15:dd:24: 87:ea:8f:db:04:77:bb:1c:b3:9b:8c:3d:37:c7:09: f7:7e:9b:fd:1c:a0:1c:9a:aa:f1:09:3b:c6:ee:e7: 24:4c:64:99:93:37:93:b9:4b:67:d8:9a:3c:72:92: ad:2d:74:ea:52:60:ba:c7:76:48:d7:db:f8:1d:18: 1d:55:95:b5:a7:60:e7:8d:fc:15:e4:ed:64:dd:49: 4c:0d:55:a5:0f:58:86:c8:80:bd:59:10:1a:38:54: 02:78:49:ce:90:05:4b:64:c1:6b:10:0b:f7:e9:ae: f4:c3:33:35:47:08:35:d7:49:18:d2:ad:8c:6b:da: c3:d3:42:e8:ad:cc:5a:10:17:e9:31:2b:f2:af:ee: 1f:67:a4:bd:0c:df:71:26:2f:f7:6b:5c:4a:53:01: 34:ef:23:ce:7b:77:b6:f3:51:41:55:e7:c1:1a:24: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9F:26:6E:08:15:5D:74:0F:A9:CD:9E:E0:C8:F7:55:8C:EC:A9:6C X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:9e:ad:ae:5c:9d:1d:79:bb:34:2d:ba:3e:08:a4:04:ae:ff: ff:8e:b2:d5:dc:ff:25:e5:f4:af:2d:c6:6b:04:f9:0d:e1:e4: 37:4d:6b:fc:f2:2f:a4:99:21:a1:25:1f:90:8c:83:1b:6b:14: da:21:21:d4:9d:3f:22:07:3e:d6:71:28:c2:24:41:0e:9a:c3: 0b:9b:54:75:15:86:c5:e3:c0:3d:a3:df:53:7e:d9:7c:c6:e4: 34:83:3a:a1:bf:7d:ec:69:83:00:e4:e8:3c:06:ae:3a:4b:3e: 45:bf:c5:e4:ac:e0:ad:77:6b:e0:54:c1:67:bc:f9:95:b6:ce: a1:04:b6:3d:50:7f:de:6c:80:3b:26:89:23:c1:c6:41:c5:d5: 67:53:bd:b0:7e:11:94:52:7c:0e:b7:4b:7a:68:38:f9:6f:1c: fb:cf:8f:d9:e7:62:89:2d:a8:11:f9:4d:81:43:31:56:ee:fd: ad:ed:f5:83:92:e5:1a:39:7b:e2:4a:72:65:59:5a:be:af:1b: b9:63:e2:d6:f6:ca:5a:bb:e4:89:d1:f8:72:92:f7:37:b7:93: ee:e0:9e:8f:29:7f:a8:d2:2d:ae:f7:bb:10:98:0b:1d:bb:60: c3:f8:65:68:de:70:03:de:69:09:38:5e:76:8f:0b:0f:18:42: e1:ff:3e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjUwNDAzMDUxNDMwWhcNMjUwNDEwMDUxNDMwWjAYMRYwFAYD VQQDEw02N2VlMTkzNi01OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ei/Bpq0fn2HnxYafD6zabpn73CfZkDFkyygRNM/485zNWMNJYLB69TrwI94 bqiT7VNqNKbzU0aMxlmJiTD7zw4GZIKCzYh4nvNWoh+p+zGeyCW49L4V3SSH6o/b BHe7HLObjD03xwn3fpv9HKAcmqrxCTvG7uckTGSZkzeTuUtn2Jo8cpKtLXTqUmC6 x3ZI19v4HRgdVZW1p2DnjfwV5O1k3UlMDVWlD1iGyIC9WRAaOFQCeEnOkAVLZMFr EAv36a70wzM1Rwg110kY0q2Ma9rD00LorcxaEBfpMSvyr+4fZ6S9DN9xJi/3a1xK UwE07yPOe3e281FBVefBGiTmQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOfJm4I FV10D6nNnuDI91WM7KlsMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBnq2uXJ0debs0Lbo+CKQErv//jrLV3P8l5fSvLcZrBPkN4eQ3TWv8 8i+kmSGhJR+QjIMbaxTaISHUnT8iBz7WcSjCJEEOmsMLm1R1FYbF48A9o99Tftl8 xuQ0gzqhv33saYMA5Og8Bq46Sz5Fv8XkrOCtd2vgVMFnvPmVts6hBLY9UH/ebIA7 JokjwcZBxdVnU72wfhGUUnwOt0t6aDj5bxz7z4/Z52KJLagR+U2BQzFW7v2t7fWD kuUaOXviSnJlWVq+rxu5Y+LW9spau+SJ0fhykvc3t5Pu4J6PKX+o0i2u97sQmAsd u2DD+GVo3nAD3mkJOF52jwsPGELh/z7E -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:41 2025 by rpki-client