$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft File: cFeff18bId_J3mZ8azwh8W-H1XI.mft (raw, json) Hash identifier: uh3g/qY+xsavbpSOzNOHsHYRvBej6umkT6KGOy+c+tk= Subject key identifier: E6:40:28:04:25:49:21:2F:A3:4E:8F:C5:C8:F5:53:12:19:89:1A:80 Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572 Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft Manifest number: 0C13 Signing time: Fri 04 Apr 2025 18:45:01 +0000 Manifest this update: Fri 04 Apr 2025 18:45:01 +0000 Manifest next update: Fri 11 Apr 2025 18:45:01 +0000 Files and hashes: 1: cFeff18bId_J3mZ8azwh8W-H1XI.crl (hash: P9w0njQzyROKHml1noNW4eONbAZGBTBjxaCxZJ9G7+8=) 2: DEABC3F619C411EFA1A8677DC4F9AE02.roa (hash: W7K6VRN1QzgBc/gpj+6wHuV7YMhiZeiqUU+WpyRDJ4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136655 Validity Not Before: Apr 4 18:45:01 2025 GMT Not After : Apr 11 18:45:01 2025 GMT Subject: CN=67f028ad-0fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:6f:d0:74:72:5a:c1:82:85:88:e1:97:c2: b4:fb:92:20:ef:e3:32:e4:5d:c4:a5:32:1f:11:bc: 41:d5:5b:cb:45:dc:30:5b:a7:11:fc:4a:c3:dc:94: 4c:89:17:9d:76:40:e7:3b:7a:51:38:38:ba:68:4e: ce:66:a0:85:83:70:56:57:35:31:b7:97:4e:1d:6b: bf:b9:7a:24:89:a5:50:28:c4:86:f8:2f:4d:6c:17: d9:ef:16:05:15:ce:54:0c:ff:1f:a8:8b:e2:82:06: 9b:b6:31:26:67:51:56:bf:77:03:e4:74:71:19:11: 73:24:c4:b9:55:92:1d:e8:71:3d:e3:c4:d5:c5:f7: d9:3c:97:84:d4:c6:6e:02:46:c3:de:fd:67:0e:42: a1:a3:4b:4e:63:0f:1c:54:d5:68:78:7f:91:85:1d: a9:cb:73:71:92:4d:9d:d5:1f:b6:26:28:13:3d:0b: f6:6c:31:d2:be:f7:69:02:90:20:f3:93:a7:29:2d: d2:97:bc:9a:67:fd:0d:02:d9:1c:7d:22:bf:9c:a9: 3f:46:96:d5:48:17:1d:d3:8b:ad:1f:05:2c:5e:91: 81:47:f5:fd:72:ac:a0:e1:a6:a7:f0:94:8c:ca:26: fb:f1:25:52:f6:6c:97:a3:df:cb:5d:f1:9e:0d:f0: 87:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:28:04:25:49:21:2F:A3:4E:8F:C5:C8:F5:53:12:19:89:1A:80 X509v3 Authority Key Identifier: keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:85:cc:92:11:90:ec:33:af:48:01:e6:4a:d5:dc:0d:00: a2:a9:3e:2a:a8:6c:9f:29:31:db:7a:f4:e5:5b:92:df:c7:97: f8:34:7a:38:0b:04:a7:3f:80:d2:fb:15:2a:d1:80:a6:0a:01: 96:b9:d7:32:98:45:eb:85:cc:db:9c:f4:e9:a3:dd:4e:65:bb: 88:6b:53:c6:43:59:6b:3a:44:8a:55:da:fe:a4:44:5d:4d:74: 48:ec:9f:79:ac:bf:49:b3:24:41:a8:96:a9:df:7a:13:bd:f2: 9a:b1:56:cf:b3:90:d4:b3:04:13:a7:8e:5a:01:93:9a:41:7d: a0:e8:ab:9a:0b:43:5c:b9:db:c4:db:cf:ed:8c:30:aa:20:6e: 52:a1:96:06:14:37:34:4e:4f:2e:ad:25:95:fe:0c:88:eb:b6: e4:28:9b:9a:0f:eb:34:c9:93:6e:67:cd:20:e3:3f:0e:05:f3: b5:4a:4f:b5:2b:d3:ad:79:c6:bd:b6:01:7e:b6:fa:ba:08:9c: 33:12:6c:9d:8b:4c:7d:a8:dd:f2:57:54:04:b0:d3:dd:aa:78: 8d:33:34:40:b0:86:d2:ec:fa:2e:ea:0a:fb:3c:6e:12:98:c5: 32:be:cf:c4:98:94:49:5f:33:01:53:a0:e8:bf:08:5f:da:56: e8:1b:7c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NTUxMTAvBgNVBAUTKDcwNTc5RjdGNUYxQjIxREZDOURFNjY3QzZCM0MyMUYx NkY4N0Q1NzIwHhcNMjUwNDA0MTg0NTAxWhcNMjUwNDExMTg0NTAxWjAYMRYwFAYD VQQDEw02N2YwMjhhZC0wZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tpv0HRyWsGChYjhl8K0+5Ig7+My5F3EpTIfEbxB1VvLRdwwW6cR/ErD3JRM iReddkDnO3pRODi6aE7OZqCFg3BWVzUxt5dOHWu/uXokiaVQKMSG+C9NbBfZ7xYF Fc5UDP8fqIviggabtjEmZ1FWv3cD5HRxGRFzJMS5VZId6HE948TVxffZPJeE1MZu AkbD3v1nDkKho0tOYw8cVNVoeH+RhR2py3Nxkk2d1R+2JigTPQv2bDHSvvdpApAg 85OnKS3Sl7yaZ/0NAtkcfSK/nKk/RpbVSBcd04utHwUsXpGBR/X9cqyg4aan8JSM yib78SVS9myXo9/LXfGeDfCHFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZAKAQl SSEvo06Pxcj1UxIZiRqAMB8GA1UdIwQYMBaAFHBXn39fGyHfyd5mfGs8IfFvh9Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY1NS9GNzA3RjQ2NDBB OTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4YklkX0ozbVo4YXp3aDhXLUgx WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGZWZmMThiSWRfSjNtWjhhendoOFctSDFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY1NS9GNzA3RjQ2NDBBOTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4Yklk X0ozbVo4YXp3aDhXLUgxWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeUIXMkhGQ7DOvSAHmStXcDQCiqT4qqGyfKTHbevTlW5Lfx5f4NHo4 CwSnP4DS+xUq0YCmCgGWudcymEXrhczbnPTpo91OZbuIa1PGQ1lrOkSKVdr+pERd TXRI7J95rL9JsyRBqJap33oTvfKasVbPs5DUswQTp45aAZOaQX2g6KuaC0NcudvE 28/tjDCqIG5SoZYGFDc0Tk8urSWV/gyI67bkKJuaD+s0yZNuZ80g4z8OBfO1Sk+1 K9Oteca9tgF+tvq6CJwzEmydi0x9qN3yV1QEsNPdqniNMzRAsIbS7Pou6gr7PG4S mMUyvs/EmJRJXzMBU6Dovwhf2lboG3xV -----END CERTIFICATE-----Generated at Sat Apr 5 18:50:28 2025 by rpki-client