$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft File: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft (raw, json) Hash identifier: xIsJ5cVFL0FwVNF6Py95KMSxUQXvQz34cbeaIXQjsno= Subject key identifier: 29:29:E7:F0:50:CC:9B:48:0D:6D:F6:97:2F:B4:0E:C6:82:02:9F:2A Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055 Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft Manifest number: 0994 Signing time: Fri 04 Apr 2025 20:19:25 +0000 Manifest this update: Fri 04 Apr 2025 20:19:25 +0000 Manifest next update: Fri 11 Apr 2025 20:19:25 +0000 Files and hashes: 1: v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl (hash: U5y3C5plvaP0TASB+2u3EX7uN/Z0ZUcHN0sNZyaqF9k=) 2: D4378BBA268311EE9BB21413C4F9AE02.roa (hash: Fn/SXrKcwrvikRaZqbM9UmvxwM1m/am9+sz8PJUtJeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DE7A Validity Not Before: Apr 4 20:19:25 2025 GMT Not After : Apr 11 20:19:25 2025 GMT Subject: CN=67f03ecd-5a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:68:d4:8c:77:7e:02:8a:0a:45:57:ec:ba: d6:68:8a:ca:40:12:69:d0:08:4d:cb:a7:81:31:ad: 8b:ff:94:94:4c:fa:11:5d:ca:0c:34:df:66:ee:df: f6:40:89:c7:be:0d:2a:65:41:4f:af:a4:28:ab:45: 34:00:11:d6:35:a0:4f:b4:09:95:47:88:d7:ec:c3: 81:af:09:7b:47:7e:91:94:31:14:ba:ef:9b:ac:b4: 76:59:d4:ee:e1:a5:74:e6:eb:8b:bd:e4:33:8c:45: 1a:86:7c:ad:37:17:dd:c6:cb:b7:d1:fd:46:6e:f6: 04:ac:a3:71:ca:5a:1c:27:ec:a6:0f:6f:f2:0c:b4: 55:8c:25:94:dc:3e:8d:17:ee:e6:f1:2a:94:c3:4e: fe:c9:0e:b4:42:23:f6:c6:0c:6d:fb:4b:f3:24:7f: 1e:99:9a:15:97:2d:72:cb:44:cc:6a:52:c5:89:c6: ad:94:c8:8f:14:d2:41:b0:84:26:4c:6a:46:c9:7b: 36:64:ed:f0:3e:30:84:b8:66:ed:76:4b:be:05:bf: e2:71:1a:7c:f8:28:c1:7a:ea:ef:54:28:77:4c:3d: fb:7f:ab:01:85:f3:0b:91:da:29:4f:95:73:b4:e0: cb:90:e7:50:91:fe:81:35:c6:0d:db:c4:69:ec:84: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:E7:F0:50:CC:9B:48:0D:6D:F6:97:2F:B4:0E:C6:82:02:9F:2A X509v3 Authority Key Identifier: keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:55:7e:94:f9:e3:93:85:06:66:12:c2:23:ac:26:38:8a:e2: d8:23:a2:27:35:51:9e:f2:0f:75:01:b2:65:4e:4c:82:c6:73: 9f:6d:ff:e2:ba:9f:e2:61:eb:9d:32:d1:7d:c8:4d:0d:7a:f1: d5:4d:60:bc:f9:31:32:05:af:9a:a1:30:f1:0c:31:24:0b:51: d5:b7:e4:f8:04:36:ba:c3:0a:92:97:53:af:e8:e6:e3:59:fe: bc:cf:d3:f6:ab:68:ea:b1:4f:3d:5c:c9:23:4a:39:44:fa:ab: 3f:58:c8:78:d6:d8:56:54:9e:a9:2e:a9:de:d3:85:a3:17:f2: 85:92:4a:7e:e5:8e:08:e1:0a:5e:45:e1:75:32:6a:b7:6b:2e: 1d:b2:1e:b0:7a:7b:84:58:c7:a7:3c:f7:22:3c:79:a7:99:4c: 89:57:f9:60:4d:db:8c:95:29:59:b5:f6:3d:5d:89:90:97:da: 11:32:d0:b9:94:0d:34:44:69:de:d8:50:22:c2:45:7d:c2:ae: fa:63:76:3d:4a:03:4f:af:02:32:3a:e6:3c:9a:66:3d:de:aa: a2:10:a0:3f:d2:e6:1f:c2:c0:b4:bf:95:be:a9:c7:2c:ac:cc: 55:07:c0:16:ec:22:d1:83:79:27:ce:8e:a8:59:2c:91:97:7f: f9:84:00:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3 MEE2NkEwNTUwHhcNMjUwNDA0MjAxOTI1WhcNMjUwNDExMjAxOTI1WjAYMRYwFAYD VQQDEw02N2YwM2VjZC01YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09po1Ix3fgKKCkVX7LrWaIrKQBJp0AhNy6eBMa2L/5SUTPoRXcoMNN9m7t/2 QInHvg0qZUFPr6Qoq0U0ABHWNaBPtAmVR4jX7MOBrwl7R36RlDEUuu+brLR2WdTu 4aV05uuLveQzjEUahnytNxfdxsu30f1GbvYErKNxylocJ+ymD2/yDLRVjCWU3D6N F+7m8SqUw07+yQ60QiP2xgxt+0vzJH8emZoVly1yy0TMalLFicatlMiPFNJBsIQm TGpGyXs2ZO3wPjCEuGbtdku+Bb/icRp8+CjBeurvVCh3TD37f6sBhfMLkdopT5Vz tODLkOdQkf6BNcYN28Rp7IR3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkp5/BQ zJtIDW32ly+0DsaCAp8qMB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REU3QS9CQzcxRUNDNjhENDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cx T3NUTkw0UFJHd1J3cG1vRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZVX6U+eOThQZmEsIjrCY4iuLYI6InNVGe8g91AbJlTkyCxnOfbf/i up/iYeudMtF9yE0NevHVTWC8+TEyBa+aoTDxDDEkC1HVt+T4BDa6wwqSl1Ov6Obj Wf68z9P2q2jqsU89XMkjSjlE+qs/WMh41thWVJ6pLqne04WjF/KFkkp+5Y4I4Qpe ReF1Mmq3ay4dsh6wenuEWMenPPciPHmnmUyJV/lgTduMlSlZtfY9XYmQl9oRMtC5 lA00RGne2FAiwkV9wq76Y3Y9SgNPrwIyOuY8mmY93qqiEKA/0uYfwsC0v5W+qccs rMxVB8AW7CLRg3knzo6oWSyRl3/5hAAD -----END CERTIFICATE-----Generated at Sun Apr 6 16:18:42 2025 by rpki-client