$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: HPlklsjDmVtohbGClGCmPrsbYuUOBgdYV9R2xeCZOOs= Subject key identifier: 84:19:B3:F8:97:5C:0B:82:87:F8:B4:98:FF:68:EC:90:05:13:A5:37 Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 01A7 Signing time: Thu 03 Apr 2025 02:42:33 +0000 Manifest this update: Thu 03 Apr 2025 02:42:33 +0000 Manifest next update: Thu 10 Apr 2025 02:42:33 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: xzz3vJgxVEO6O7bRva/PTUHHAwYYMFKj1szEOIOm6f4=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: C5xmuiW1qdvlYmxgBJhQt0Eam4dFMifTqr76aJr0Pzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48 Validity Not Before: Apr 3 02:42:33 2025 GMT Not After : Apr 10 02:42:33 2025 GMT Subject: CN=67edf599-9f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:6c:85:2b:a9:e2:4d:0f:82:02:1d:8c:dc: 4b:b6:1f:5c:51:20:e1:54:49:4e:99:35:60:0d:85: 7c:a4:76:e9:c6:87:e3:2e:e4:dc:ea:1b:ca:b8:eb: c5:c7:52:91:26:97:bb:06:c8:17:41:3b:5d:07:d3: 97:99:7f:de:d1:45:3c:ec:ec:ba:ae:be:4d:cd:76: 27:32:56:74:0f:1d:62:69:d9:b3:a0:fb:40:7f:b5: 8a:fb:dc:a6:4e:13:8e:dd:27:3f:8c:f3:77:d3:54: 8a:ff:75:e3:16:1e:11:a7:7f:3c:e9:8d:65:48:39: 95:98:ad:1b:6d:6e:f3:84:08:f3:2c:8c:f4:57:81: c2:68:f8:99:64:02:8b:ee:d9:9c:60:fb:2c:8c:68: 69:53:8b:e8:d2:6d:50:58:7e:77:ba:7d:33:07:1f: 26:b5:9c:58:d3:aa:a4:d8:ac:52:8c:35:95:b9:9e: 8a:1f:07:d3:92:0d:e0:17:7a:a9:84:d2:f3:af:90: a1:b8:54:2e:f7:12:0f:3a:15:1b:a9:3c:a4:bc:9d: 5f:d3:69:0f:78:62:69:a5:7f:a2:c0:67:60:bd:ac: 62:c4:78:7e:9f:99:d7:00:a5:b3:70:65:41:8d:25: 41:7e:98:77:64:0d:35:f6:52:b2:d9:17:07:25:f1: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:19:B3:F8:97:5C:0B:82:87:F8:B4:98:FF:68:EC:90:05:13:A5:37 X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:70:0b:ec:6c:7b:30:17:0f:13:ce:cd:bf:ea:a7:58:51:29: 8d:58:d4:0b:27:88:7c:a8:d1:39:cd:29:88:0d:ec:12:b4:99: 1e:92:29:2a:00:c6:9a:5b:a3:3b:6c:d5:4d:3f:7e:52:cf:1d: a7:c2:82:4d:78:90:8a:c0:b0:d9:37:85:32:89:5c:d2:45:19: ce:cf:8e:0b:e6:8d:c0:1a:20:09:30:eb:03:dd:42:d2:40:99: b1:05:c4:e2:8f:3c:54:e6:46:0d:d8:26:35:2b:d5:40:d8:6e: 9c:a9:1b:b2:7b:ea:b4:3b:b0:0a:dd:0d:e9:74:56:e1:3f:7f: 80:23:b6:fd:c3:2c:3e:65:99:86:57:d7:eb:15:c5:ab:4a:22: 3a:60:d3:67:71:9a:62:5f:69:9e:9a:be:44:ee:83:a5:c6:b1: 0f:79:48:85:40:42:de:6c:2a:c0:71:bd:b6:d6:21:3a:37:47: 4e:1e:56:37:82:fc:70:3b:7b:c1:6f:33:35:f7:87:a1:e4:25: 3b:1e:0b:69:75:24:b6:83:74:8d:d8:eb:eb:78:a7:2d:0c:8b: 8b:31:f1:22:6c:07:41:c4:93:01:b7:78:1c:85:e1:98:62:72: ad:b4:bc:5e:59:75:4e:6a:fa:e8:77:a8:96:a2:8e:a7:72:f8: 95:9e:ea:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUwNDAzMDI0MjMzWhcNMjUwNDEwMDI0MjMzWjAYMRYwFAYD VQQDEw02N2VkZjU5OS05ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOhshSup4k0PggIdjNxLth9cUSDhVElOmTVgDYV8pHbpxofjLuTc6hvKuOvF x1KRJpe7BsgXQTtdB9OXmX/e0UU87Oy6rr5NzXYnMlZ0Dx1iadmzoPtAf7WK+9ym ThOO3Sc/jPN301SK/3XjFh4Rp3886Y1lSDmVmK0bbW7zhAjzLIz0V4HCaPiZZAKL 7tmcYPssjGhpU4vo0m1QWH53un0zBx8mtZxY06qk2KxSjDWVuZ6KHwfTkg3gF3qp hNLzr5ChuFQu9xIPOhUbqTykvJ1f02kPeGJppX+iwGdgvaxixHh+n5nXAKWzcGVB jSVBfph3ZA019lKy2RcHJfGG6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQZs/iX XAuCh/i0mP9o7JAFE6U3MB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfcAvsbHswFw8Tzs2/6qdYUSmNWNQLJ4h8qNE5zSmIDewStJkekikq AMaaW6M7bNVNP35Szx2nwoJNeJCKwLDZN4UyiVzSRRnOz44L5o3AGiAJMOsD3ULS QJmxBcTijzxU5kYN2CY1K9VA2G6cqRuye+q0O7AK3Q3pdFbhP3+AI7b9wyw+ZZmG V9frFcWrSiI6YNNncZpiX2memr5E7oOlxrEPeUiFQELebCrAcb221iE6N0dOHlY3 gvxwO3vBbzM194eh5CU7HgtpdSS2g3SN2OvreKctDIuLMfEibAdBxJMBt3gcheGY YnKttLxeWXVOavrod6iWoo6ncviVnuo+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:15 2025 by rpki-client