$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: tQOJ0RwlAPhrBejDC3rSTO+1ccuM84ZOOdh0jDa2xV0= Subject key identifier: 0D:27:F7:04:36:87:DE:5C:DB:67:A6:16:43:AB:21:C6:3F:CC:44:B5 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: 8A Signing time: Sat 29 Mar 2025 05:48:37 +0000 Manifest this update: Sat 29 Mar 2025 05:48:37 +0000 Manifest next update: Sat 05 Apr 2025 05:48:37 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: y9b4E5wDGmxFXKviPns0jxho70tmlx6CcGzvID3o75k=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: I6wYLUXo9wiy4AQAxb2ubHia3GZFxKPK++eH7JKRPwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD Validity Not Before: Mar 29 05:48:37 2025 GMT Not After : Apr 5 05:48:37 2025 GMT Subject: CN=67e789b5-9a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:5f:cc:60:3a:23:4e:ac:68:da:ac:89:e7: b6:4b:96:2d:13:70:51:b0:33:21:54:6b:94:e6:64: 76:1b:59:b4:e9:74:71:46:e7:2e:2c:66:67:e9:48: 1d:aa:8b:37:e7:24:2b:16:29:0a:37:62:49:ee:02: 98:5b:4f:b2:30:37:57:84:91:15:0a:49:15:1a:c5: 81:40:8b:10:83:b5:f7:7f:dd:2e:15:6e:1f:a6:49: 4b:a2:58:07:fb:25:03:5c:70:32:69:b0:d8:6b:c5: bc:be:f4:56:aa:77:fd:b5:6c:42:d0:6d:49:6f:4e: dd:be:b1:40:24:14:67:c5:4e:1a:f7:0b:fa:1a:5f: 7f:19:de:85:79:e2:20:c6:8e:fb:7d:3c:42:f6:ec: 24:c7:f2:a4:52:56:a1:ff:1d:19:c0:7a:d9:62:d7: 1c:98:e2:8c:30:a1:2b:ba:d9:d2:1b:96:13:98:ad: 5e:e6:63:35:b8:3a:3f:fc:d1:02:58:e4:1d:23:10: 60:85:cb:40:be:04:db:ff:27:67:ef:10:e9:63:89: 3f:d7:cd:11:6e:ea:2a:20:53:95:24:b1:d4:2e:31: f1:61:40:0d:26:02:ab:93:5f:ce:69:aa:c4:ec:a6: ef:d4:ae:e6:a3:ed:d5:c1:25:2c:b0:7b:3a:20:ed: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:27:F7:04:36:87:DE:5C:DB:67:A6:16:43:AB:21:C6:3F:CC:44:B5 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5a:64:74:a2:91:a0:b1:08:d6:76:6d:43:3c:77:cd:65:b0: c4:33:72:30:7c:d2:6d:20:59:33:0e:46:86:51:b2:77:81:5d: 49:18:22:07:1b:f9:08:28:f9:62:3e:fb:39:59:cc:a1:54:fb: 17:d8:33:c5:89:cf:a5:38:6b:3c:e2:b6:68:35:8a:99:04:6b: ee:41:1b:e2:a7:d2:b8:ca:01:6e:7c:1e:96:b9:59:d0:4a:9f: a5:c5:57:8c:03:60:b7:ca:e2:46:c7:78:75:44:bd:7b:e7:17: 5e:05:52:1c:94:d2:29:8a:35:30:39:fd:e4:19:2d:53:63:1f: 1c:c9:24:b4:20:44:c9:84:6f:09:8f:4a:8f:e5:c4:3f:ea:1b: 57:23:2b:58:37:c1:81:18:e7:69:39:55:11:fb:04:64:2e:68: 11:85:34:69:8b:ba:fa:af:4f:5f:aa:e1:eb:91:c2:ed:54:f2: 8f:cd:e0:dc:fb:05:45:ea:b6:49:11:db:f2:fc:cc:07:88:80: 78:5a:39:17:90:98:93:7d:d3:e8:64:ee:e2:9f:3b:9b:2a:80: d2:bc:4b:28:89:07:f9:c0:1e:7f:3a:b7:9b:5f:af:35:9b:44: 6d:13:27:1b:d9:62:8c:da:01:46:7c:c7:45:22:93:6f:4b:7d: 52:da:3e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUwMzI5MDU0ODM3WhcNMjUwNDA1MDU0ODM3WjAYMRYwFAYD VQQDEw02N2U3ODliNS05YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6glfzGA6I06saNqsiee2S5YtE3BRsDMhVGuU5mR2G1m06XRxRucuLGZn6Ugd qos35yQrFikKN2JJ7gKYW0+yMDdXhJEVCkkVGsWBQIsQg7X3f90uFW4fpklLolgH +yUDXHAyabDYa8W8vvRWqnf9tWxC0G1Jb07dvrFAJBRnxU4a9wv6Gl9/Gd6FeeIg xo77fTxC9uwkx/KkUlah/x0ZwHrZYtccmOKMMKErutnSG5YTmK1e5mM1uDo//NEC WOQdIxBghctAvgTb/ydn7xDpY4k/180RbuoqIFOVJLHULjHxYUANJgKrk1/OaarE 7Kbv1K7mo+3VwSUssHs6IO3w7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0n9wQ2 h95c22emFkOrIcY/zES1MB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsWmR0opGgsQjWdm1DPHfNZbDEM3IwfNJtIFkzDkaGUbJ3gV1JGCIH G/kIKPliPvs5WcyhVPsX2DPFic+lOGs84rZoNYqZBGvuQRvip9K4ygFufB6WuVnQ Sp+lxVeMA2C3yuJGx3h1RL175xdeBVIclNIpijUwOf3kGS1TYx8cySS0IETJhG8J j0qP5cQ/6htXIytYN8GBGOdpOVUR+wRkLmgRhTRpi7r6r09fquHrkcLtVPKPzeDc +wVF6rZJEdvy/MwHiIB4WjkXkJiTfdPoZO7inzubKoDSvEsoiQf5wB5/OrebX681 m0RtEycb2WKM2gFGfMdFIpNvS31S2j42 -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:22 2025 by rpki-client