$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: gsbVzicEd9rXglZ2xiGmv8fQnSPilCGxULpNBFbz/+Q= Subject key identifier: 0B:83:29:82:83:BF:88:86:06:52:66:AB:0A:7C:2E:07:28:93:03:D3 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 011C Signing time: Sat 29 Mar 2025 04:12:45 +0000 Manifest this update: Sat 29 Mar 2025 04:12:44 +0000 Manifest next update: Sat 05 Apr 2025 04:12:44 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: H4mQbbsi8moidxlVHiN2NIMpsWkYhWCtrIRCb4PdqN8=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9 Validity Not Before: Mar 29 04:12:44 2025 GMT Not After : Apr 5 04:12:44 2025 GMT Subject: CN=67e7733c-0264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:65:2c:55:3c:31:6e:c7:78:c2:1c:9e:d6: 13:ea:0d:f7:50:e2:93:5e:20:4c:a9:43:e0:2f:a5: ef:ab:88:e3:6d:af:84:96:44:2b:ca:6b:03:40:e8: 51:b6:7d:de:67:c2:6a:76:b1:cc:04:47:57:0b:88: 03:fe:e1:fe:03:1d:cf:ae:9f:65:a5:ec:f1:02:64: e5:a5:39:ee:7e:ac:3d:06:b8:79:ca:c3:b3:1e:3a: f7:1b:f3:41:09:ba:fe:a2:c1:f5:a5:97:7f:00:9d: f0:9e:f4:f9:d7:e6:f7:2b:ed:52:ad:1b:59:ad:4f: 9c:8e:99:76:35:9b:a9:0d:6c:70:d3:07:61:cc:ad: c3:04:03:66:82:d5:3d:e1:8d:16:8a:9a:25:56:76: 69:89:93:0c:5f:65:66:fc:36:2c:3c:12:dc:bb:7d: ab:ef:c8:7b:96:c4:b7:6c:49:e7:ff:65:e8:d7:3a: 96:6d:32:b8:b9:ad:c0:99:b5:24:1d:55:73:88:b6: a4:65:16:3e:56:c5:aa:7d:38:48:60:e9:ba:a8:10: ce:18:e5:d3:9b:36:90:07:17:40:76:5a:b2:e9:2a: 07:e1:d2:c2:97:6f:78:f3:3a:87:8d:e3:5b:56:96: e4:cf:75:f3:96:a9:00:73:24:ab:a0:19:7a:55:c6: 70:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:83:29:82:83:BF:88:86:06:52:66:AB:0A:7C:2E:07:28:93:03:D3 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ce:7d:a1:a8:a1:4d:ab:1e:c2:2c:62:0c:2e:71:91:07:d1: 3d:e7:f5:91:59:c7:e2:d1:76:a8:7f:97:03:9d:73:38:1e:5d: 04:69:95:b1:b6:f1:83:38:05:3d:91:dc:ba:d3:14:17:18:db: 98:0b:52:91:48:c0:42:4b:ef:87:ba:32:1b:69:c8:7c:cf:d6: 82:76:52:69:22:47:7e:97:3e:ef:1a:87:5b:eb:58:fc:8b:1c: 32:05:7c:99:73:e0:a4:9a:45:a7:9b:be:f6:2a:c7:6d:05:5d: e8:66:0d:14:ee:5f:6a:5f:68:b6:4a:f9:b6:74:c5:0d:79:0d: 80:6f:83:70:ee:05:41:97:61:44:8a:ae:1f:93:a1:3f:17:b9: 88:e1:80:da:b0:86:63:e2:7e:af:cd:d9:0e:7f:66:37:eb:e8: 26:e8:e0:e1:e1:0f:0c:c4:de:24:15:3c:54:70:75:96:d0:92: a7:8c:ab:1f:8e:63:06:3e:44:6b:77:1e:4a:78:f9:22:5f:ce: 09:b9:0d:85:0a:2f:f2:6c:ae:17:55:b5:ff:54:35:51:f8:0e: 30:5c:d2:16:da:49:00:82:f6:eb:40:4d:ce:1d:04:da:1d:41: a1:94:57:1d:c9:c9:70:46:43:c7:21:17:f1:3d:2b:8e:2d:45: cc:ce:22:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwMzI5MDQxMjQ0WhcNMjUwNDA1MDQxMjQ0WjAYMRYwFAYD VQQDEw02N2U3NzMzYy0wMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnxlLFU8MW7HeMIcntYT6g33UOKTXiBMqUPgL6Xvq4jjba+ElkQrymsDQOhR tn3eZ8JqdrHMBEdXC4gD/uH+Ax3Prp9lpezxAmTlpTnufqw9Brh5ysOzHjr3G/NB Cbr+osH1pZd/AJ3wnvT51+b3K+1SrRtZrU+cjpl2NZupDWxw0wdhzK3DBANmgtU9 4Y0WipolVnZpiZMMX2Vm/DYsPBLcu32r78h7lsS3bEnn/2Xo1zqWbTK4ua3AmbUk HVVziLakZRY+VsWqfThIYOm6qBDOGOXTmzaQBxdAdlqy6SoH4dLCl2948zqHjeNb Vpbkz3XzlqkAcySroBl6VcZwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuDKYKD v4iGBlJmqwp8LgcokwPTMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGzn2hqKFNqx7CLGIMLnGRB9E95/WRWcfi0Xaof5cDnXM4Hl0EaZWx tvGDOAU9kdy60xQXGNuYC1KRSMBCS++HujIbach8z9aCdlJpIkd+lz7vGodb61j8 ixwyBXyZc+CkmkWnm772KsdtBV3oZg0U7l9qX2i2Svm2dMUNeQ2Ab4Nw7gVBl2FE iq4fk6E/F7mI4YDasIZj4n6vzdkOf2Y36+gm6ODh4Q8MxN4kFTxUcHWW0JKnjKsf jmMGPkRrdx5KePkiX84JuQ2FCi/ybK4XVbX/VDVR+A4wXNIW2kkAgvbrQE3OHQTa HUGhlFcdyclwRkPHIRfxPSuOLUXMziIN -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:17 2025 by rpki-client