$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: O4UczO2MjjNjmtonJUdSlfz1T64nWWetK27gzs8zKkk= Subject key identifier: EF:FF:E0:6A:1E:8C:87:1E:D9:B5:EF:59:67:68:F6:0D:4C:6A:3F:0C Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 0177 Signing time: Sat 29 Mar 2025 03:17:59 +0000 Manifest this update: Sat 29 Mar 2025 03:17:59 +0000 Manifest next update: Sat 05 Apr 2025 03:17:59 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: Zvymn9b57Yux0Uq/S4/+W16STgUSwk/fSG5sbyBGpug=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604 Validity Not Before: Mar 29 03:17:59 2025 GMT Not After : Apr 5 03:17:59 2025 GMT Subject: CN=67e76667-dda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:7b:81:d6:5c:6e:33:25:61:20:f1:d7:db: fa:cb:8f:8b:66:44:3b:78:56:1f:c9:2c:1c:af:8a: fd:3c:c6:e1:6d:65:ca:27:d7:c5:77:37:65:2b:05: a8:20:dd:09:36:14:eb:65:88:de:df:50:21:1a:cf: 6e:7c:ca:ec:31:8a:0f:ec:aa:a3:40:33:f9:25:d1: b2:24:c4:2f:b6:8a:2c:0f:ba:68:e9:a0:2a:28:13: 11:3a:fb:b2:4c:e2:3f:45:3b:69:05:4f:68:00:8d: 12:94:ae:ed:7f:72:c7:36:59:80:fd:57:f4:5a:36: 83:f1:b0:fc:71:81:28:69:12:66:2b:bf:fe:78:2e: bc:5b:ac:35:3d:c1:5d:2a:c2:de:21:72:98:7c:c4: c7:ce:eb:2d:bc:fa:d0:37:3c:36:6c:73:57:2c:43: 7e:63:40:41:2d:f0:7c:aa:2e:77:a2:3d:ea:f7:89: 25:4f:18:d4:1f:e1:de:ac:e9:5f:6a:a2:1c:8e:05: ea:bd:cf:b8:83:ee:1d:07:05:e2:5a:9f:ef:0f:1b: 83:bc:4e:55:8e:e2:00:72:e0:49:8f:24:05:84:59: 1e:14:30:a8:08:50:c0:7a:67:72:c2:7d:0c:d1:20: a0:e4:6f:a2:1e:0b:fc:bb:4c:50:7c:54:6c:7e:17: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FF:E0:6A:1E:8C:87:1E:D9:B5:EF:59:67:68:F6:0D:4C:6A:3F:0C X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:57:ca:c5:d6:ee:ba:c2:2c:26:f5:bf:e4:b0:14:72:1f:e7: 3a:27:2c:3d:38:90:ab:fd:13:50:93:e1:0c:78:70:78:c6:8b: 43:d4:65:92:2f:15:e6:64:7e:08:fb:ea:1d:7e:75:fe:4c:fc: 39:aa:69:b7:eb:47:16:fe:e7:16:f1:d0:d1:bf:f9:5b:6a:0d: e5:27:c5:23:cf:26:84:72:df:af:bc:2d:31:0e:8f:88:06:40: 41:18:5c:ba:e3:dc:93:59:f9:79:cf:72:ea:c7:71:9e:e2:1c: 04:bd:40:09:a4:37:43:c3:e9:07:a3:de:ba:2f:43:76:8a:3a: 2c:58:89:f4:6f:1d:a8:ec:e3:82:ea:1d:49:bd:6f:32:b5:ba: 51:d7:ce:a4:99:e2:4b:24:8c:ab:b2:bd:1b:5f:15:dc:e8:d1: e9:30:92:5d:c3:d8:63:18:5d:7f:30:46:04:3a:36:e9:68:31: fe:51:a7:ba:93:29:b9:19:b4:4f:53:85:0a:ec:33:2a:de:8f: ed:84:69:f1:d4:0c:63:70:16:ae:a1:cc:53:a6:64:7c:81:57: 2f:d3:30:0a:b4:3e:98:40:0f:a3:13:c3:0e:ff:be:79:7b:71: 98:ca:3e:cf:80:07:8f:a0:2f:e6:7b:50:b8:9f:1a:41:f5:a8: bf:07:32:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwMzI5MDMxNzU5WhcNMjUwNDA1MDMxNzU5WjAYMRYwFAYD VQQDEw02N2U3NjY2Ny1kZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXx7gdZcbjMlYSDx19v6y4+LZkQ7eFYfySwcr4r9PMbhbWXKJ9fFdzdlKwWo IN0JNhTrZYje31AhGs9ufMrsMYoP7KqjQDP5JdGyJMQvtoosD7po6aAqKBMROvuy TOI/RTtpBU9oAI0SlK7tf3LHNlmA/Vf0WjaD8bD8cYEoaRJmK7/+eC68W6w1PcFd KsLeIXKYfMTHzustvPrQNzw2bHNXLEN+Y0BBLfB8qi53oj3q94klTxjUH+HerOlf aqIcjgXqvc+4g+4dBwXiWp/vDxuDvE5VjuIAcuBJjyQFhFkeFDCoCFDAemdywn0M 0SCg5G+iHgv8u0xQfFRsfheWqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO//4Goe jIce2bXvWWdo9g1Maj8MMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKV8rF1u66wiwm9b/ksBRyH+c6Jyw9OJCr/RNQk+EMeHB4xotD1GWS LxXmZH4I++odfnX+TPw5qmm360cW/ucW8dDRv/lbag3lJ8UjzyaEct+vvC0xDo+I BkBBGFy649yTWfl5z3Lqx3Ge4hwEvUAJpDdDw+kHo966L0N2ijosWIn0bx2o7OOC 6h1JvW8ytbpR186kmeJLJIyrsr0bXxXc6NHpMJJdw9hjGF1/MEYEOjbpaDH+Uae6 kym5GbRPU4UK7DMq3o/thGnx1AxjcBauocxTpmR8gVcv0zAKtD6YQA+jE8MO/755 e3GYyj7PgAePoC/me1C4nxpB9ai/BzI+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:38 2025 by rpki-client