$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json) Hash identifier: jVeIGV4bzb40HYbaEda1awTad+WYAzlOsGbHyyrDUVE= Subject key identifier: 12:82:94:E6:4C:38:2C:35:3A:76:B9:78:F5:94:8B:B3:2A:74:C6:B8 Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft Manifest number: 01AB Signing time: Fri 11 Apr 2025 02:33:57 +0000 Manifest this update: Fri 11 Apr 2025 02:33:57 +0000 Manifest next update: Fri 18 Apr 2025 02:33:57 +0000 Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: +I2YZImOlwBgGA1tVkUR3UY+9JQanKJKBl9kvzvER4Q=) 2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: UfZMrxaB0qz4pcGB9q6XltymVUTNDZVQp2pT7h14Zqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: Apr 11 02:33:57 2025 GMT Not After : Apr 18 02:33:57 2025 GMT Subject: CN=67f87f95-4afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:47:0c:b5:4c:7c:f3:2d:a8:e2:ec:96:c8: c0:4e:e3:c8:06:5d:00:3f:94:bd:65:88:cd:f1:eb: bf:d0:6d:5a:48:1c:71:28:e8:76:a2:fc:a9:e2:4e: 58:45:82:d4:b5:79:1e:52:ec:83:23:f4:50:24:be: 67:85:ac:84:ff:53:21:3d:b6:bf:17:9c:c3:4f:01: 3e:ac:52:43:87:fa:85:71:12:d3:f3:20:05:4f:0b: 95:f7:a1:b0:9d:d4:67:8c:be:6c:2c:d6:4c:21:3a: 47:5c:02:0e:29:df:ca:62:02:c6:d3:c2:ee:54:78: 2d:c3:4c:53:56:f6:64:3c:40:9b:94:c6:f5:7f:d1: e7:b6:1d:09:dc:78:76:ee:0f:55:50:bc:11:62:de: 12:4d:bd:58:9a:2c:bc:30:40:4e:f3:76:d4:d6:8e: a7:1d:0f:87:cc:fd:db:bd:a7:d0:25:1b:d6:ec:3a: a2:3c:da:49:82:bb:47:54:d1:6d:f3:91:6f:77:92: 0f:a4:f7:d0:7f:ad:33:96:03:e9:34:1a:93:78:61: 73:38:4a:7a:aa:db:e4:04:31:4d:30:a2:8e:58:02: 80:a7:3b:62:30:96:40:85:25:65:78:49:4a:40:1e: 24:f7:1f:33:f1:8b:df:34:22:a7:6f:3c:48:78:65: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:82:94:E6:4C:38:2C:35:3A:76:B9:78:F5:94:8B:B3:2A:74:C6:B8 X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:54:89:21:47:83:cd:e2:e7:64:b0:1d:ee:33:fd:90:48:b3: 0d:a1:3f:90:bf:fd:91:79:0e:de:ec:ec:0d:a6:ad:fc:4b:b5: 1d:56:b0:6f:f7:a9:e4:27:fa:2f:e0:a6:38:61:23:f5:7f:b1: b6:49:57:13:2c:8a:29:44:f1:34:d7:46:80:68:42:e3:8a:39: 32:c7:1c:f1:19:69:d8:c5:09:8c:15:a1:f7:a6:33:ca:39:2e: b6:44:88:cf:1b:ba:01:c0:95:67:9a:72:cc:9b:e2:ea:dc:d3: 5e:02:c7:ad:f7:93:3b:da:5e:d2:e2:59:b6:12:ac:48:61:5f: 4f:da:4e:85:cd:da:7d:de:1c:8f:cd:5f:57:6c:5e:32:e2:cf: fa:3e:38:e5:9f:e6:0e:d6:c5:e7:cc:e9:38:9d:48:75:a5:da: 96:b4:62:6c:6b:2d:18:ec:e6:4d:7d:1b:24:30:09:ce:2f:cd: c6:2b:96:aa:d4:d9:6a:c0:7f:07:04:a1:d8:89:e4:12:7d:25: 2d:09:57:0b:25:40:cd:a6:e2:27:e1:4a:27:77:03:95:50:9f: 4f:c8:ac:dd:27:24:81:94:8e:e4:2b:31:27:0a:84:a8:97:d3: db:df:29:e9:38:9e:2e:a9:27:8d:15:2f:30:85:db:e2:eb:5c: 74:2b:48:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjUwNDExMDIzMzU3WhcNMjUwNDE4MDIzMzU3WjAYMRYwFAYD VQQDEw02N2Y4N2Y5NS00YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMJHDLVMfPMtqOLslsjATuPIBl0AP5S9ZYjN8eu/0G1aSBxxKOh2ovyp4k5Y RYLUtXkeUuyDI/RQJL5nhayE/1MhPba/F5zDTwE+rFJDh/qFcRLT8yAFTwuV96Gw ndRnjL5sLNZMITpHXAIOKd/KYgLG08LuVHgtw0xTVvZkPECblMb1f9Hnth0J3Hh2 7g9VULwRYt4STb1Ymiy8MEBO83bU1o6nHQ+HzP3bvafQJRvW7DqiPNpJgrtHVNFt 85Fvd5IPpPfQf60zlgPpNBqTeGFzOEp6qtvkBDFNMKKOWAKApztiMJZAhSVleElK QB4k9x8z8YvfNCKnbzxIeGVkdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKClOZM OCw1Ona5ePWUi7MqdMa4MB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I4Qi9ERDA0NzNGQThCRkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZN bmhiTE00SlVEVVlpTmdJVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/VIkhR4PN4udksB3uM/2QSLMNoT+Qv/2ReQ7e7OwNpq38S7UdVrBv 96nkJ/ov4KY4YSP1f7G2SVcTLIopRPE010aAaELjijkyxxzxGWnYxQmMFaH3pjPK OS62RIjPG7oBwJVnmnLMm+Lq3NNeAset95M72l7S4lm2EqxIYV9P2k6Fzdp93hyP zV9XbF4y4s/6Pjjln+YO1sXnzOk4nUh1pdqWtGJsay0Y7OZNfRskMAnOL83GK5aq 1NlqwH8HBKHYieQSfSUtCVcLJUDNpuIn4UondwOVUJ9PyKzdJySBlI7kKzEnCoSo l9Pb3ynpOJ4uqSeNFS8whdvi61x0K0j0 -----END CERTIFICATE-----Generated at Sat Apr 12 19:02:33 2025 by rpki-client