$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: /lXzNWAbNyDZIkH2qCnE/R+hRvaRD2B8jB1iXNeusqk= Subject key identifier: 3F:DC:BA:85:D8:FF:14:4E:86:BC:04:3F:5A:DB:DF:08:03:62:41:C9 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0FD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FBF Signing time: Mon 14 Apr 2025 17:29:09 +0000 Manifest this update: Mon 14 Apr 2025 17:29:09 +0000 Manifest next update: Mon 21 Apr 2025 17:29:09 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: 6GPw1/sEtgMam9GbEHvLpcVXw69GbpMsY0jjZ66Vd20=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 17:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Apr 14 17:29:09 2025 GMT Not After : Apr 21 17:29:09 2025 GMT Subject: CN=67fd45e5-9420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:96:1c:cd:c5:4e:03:e4:3f:21:0a:4b:3e: 7f:b6:ce:cf:e2:20:0c:24:43:6d:c6:64:4a:0d:b3: 86:a6:0d:7b:24:fc:c3:4d:3e:77:a9:a9:a5:58:11: 84:be:97:fd:c3:d1:3a:b0:d0:9f:6f:4e:3b:5d:41: 74:61:6b:9f:91:91:a5:21:da:e1:bd:c2:a5:fe:f2: 88:e6:3e:62:32:4e:72:37:e7:88:4a:93:46:49:b6: af:af:be:5c:84:05:ce:b1:37:24:ad:3b:a4:f9:d9: 45:4b:91:c9:b4:d0:3f:83:41:6c:30:7b:5c:b2:13: d9:72:81:77:c8:5f:b3:bb:bc:b6:01:98:ff:7e:36: 62:93:23:75:c4:cc:9a:17:5c:55:35:5c:16:b6:72: d0:ab:fa:42:bb:81:bb:29:93:99:db:5a:01:31:b0: e8:0e:b0:89:d2:6b:64:3e:e4:4c:8a:0a:25:d8:23: a9:2e:b0:74:d9:88:f7:61:e9:cd:5d:c3:a7:7e:6a: 68:e2:b7:22:61:62:4b:0d:1d:a9:f9:06:0f:0d:14: 17:61:db:0e:3a:2b:d4:1f:78:e7:56:08:ba:a5:df: 86:a7:f3:7a:22:df:4e:dc:38:6d:3a:e4:87:8a:b5: 75:7f:f1:0d:cb:07:87:ed:b7:14:26:38:04:e0:d8: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DC:BA:85:D8:FF:14:4E:86:BC:04:3F:5A:DB:DF:08:03:62:41:C9 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:34:b4:b2:ef:b4:ec:7e:7b:03:34:a5:08:7c:df:66:68:77: 55:2d:da:14:2c:a8:72:81:65:ec:2b:22:07:e2:5b:21:01:d1: a7:01:8e:bf:a8:6c:b9:10:cc:8c:92:94:05:b8:e1:fa:d1:cb: 0d:35:b5:1d:64:93:27:1f:6e:08:1d:f6:0b:e6:93:12:15:82: 7e:a8:e9:12:9b:41:ee:7d:6d:d0:04:98:cb:db:34:4d:ed:c7: 26:58:2a:df:96:79:f1:ea:2f:fc:ae:ce:b6:30:ba:6a:38:28: 6f:2f:5f:62:d9:7c:1e:5b:f7:2f:ee:21:d7:51:56:fc:27:95: c3:f3:9b:0c:f2:59:16:a4:64:c8:e6:e2:6d:9e:4b:45:e7:d2: 1a:1b:2b:3d:11:d4:1d:20:d0:a7:8c:aa:cf:d4:1a:e0:bb:5d: 73:94:30:6b:88:ac:09:f5:2a:a0:38:12:d7:bb:06:23:c7:25: 2c:c6:0a:3d:c5:ab:40:f0:4c:d1:b7:f8:c1:81:d5:50:70:5f: 9a:c2:c7:9d:20:aa:93:99:33:2f:fa:8e:9c:d6:46:e6:4f:d5: 79:b0:b7:0d:69:b3:d7:0e:61:c4:8b:5d:2e:db:f5:31:be:63: 58:1e:1f:19:4e:93:c0:63:5b:e9:6a:aa:72:64:14:f2:c6:f4: 04:db:65:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNDE0MTcyOTA5WhcNMjUwNDIxMTcyOTA5WjAYMRYwFAYD VQQDEw02N2ZkNDVlNS05NDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrCWHM3FTgPkPyEKSz5/ts7P4iAMJENtxmRKDbOGpg17JPzDTT53qamlWBGE vpf9w9E6sNCfb047XUF0YWufkZGlIdrhvcKl/vKI5j5iMk5yN+eISpNGSbavr75c hAXOsTckrTuk+dlFS5HJtNA/g0FsMHtcshPZcoF3yF+zu7y2AZj/fjZikyN1xMya F1xVNVwWtnLQq/pCu4G7KZOZ21oBMbDoDrCJ0mtkPuRMigol2COpLrB02Yj3YenN XcOnfmpo4rciYWJLDR2p+QYPDRQXYdsOOivUH3jnVgi6pd+Gp/N6It9O3DhtOuSH irV1f/ENyweH7bcUJjgE4Nh9ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/cuoXY /xROhrwEP1rb3wgDYkHJMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsNLSy77TsfnsDNKUIfN9maHdVLdoULKhygWXsKyIH4lshAdGnAY6/ qGy5EMyMkpQFuOH60csNNbUdZJMnH24IHfYL5pMSFYJ+qOkSm0HufW3QBJjL2zRN 7ccmWCrflnnx6i/8rs62MLpqOChvL19i2XweW/cv7iHXUVb8J5XD85sM8lkWpGTI 5uJtnktF59IaGys9EdQdINCnjKrP1Brgu11zlDBriKwJ9SqgOBLXuwYjxyUsxgo9 xatA8EzRt/jBgdVQcF+awsedIKqTmTMv+o6c1kbmT9V5sLcNabPXDmHEi10u2/Ux vmNYHh8ZTpPAY1vpaqpyZBTyxvQE22UQ -----END CERTIFICATE-----Generated at Wed Apr 16 17:19:28 2025 by rpki-client