$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: I/4/o8u5Baax4E9xYsqf5IzdImG6iRBdicPlqVB5YTc= Subject key identifier: 03:92:08:AB:BB:F6:18:97:CC:9D:68:9A:49:FA:81:D1:60:48:F3:F6 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 0974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 095F Signing time: Tue 08 Apr 2025 20:06:12 +0000 Manifest this update: Tue 08 Apr 2025 20:06:11 +0000 Manifest next update: Tue 15 Apr 2025 20:06:11 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: h5SFc4M1TM3x2t6OhruOtEC1hzUdm6vo7YDA4gJKPx8=) 2: 746D55EAC51911EE8C160640C4F9AE02.roa (hash: ZZiIZRMEIsrG7/xqv+su6NUv4n/vVm5n5Gd55n/uWmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C Validity Not Before: Apr 8 20:06:11 2025 GMT Not After : Apr 15 20:06:11 2025 GMT Subject: CN=67f581b3-a3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:f7:19:6e:43:31:34:e3:35:98:62:c5:c3: 0b:fb:ca:0b:d0:72:a5:3e:ad:cb:c9:2f:9c:a4:70: ce:5f:40:17:ee:05:2e:07:fa:37:ef:08:57:3c:53: 12:c9:ab:e4:bf:12:8a:25:3c:aa:62:d6:5d:20:db: 59:1e:63:80:98:6e:de:14:8b:12:36:ab:bb:d7:d2: 5b:fb:c6:46:85:f5:91:db:6e:fb:2d:6d:19:c6:40: da:87:99:fb:4e:81:21:2b:57:ae:22:c1:7a:4f:7d: ca:8d:6c:d4:c3:55:4b:87:af:6a:1a:9f:da:46:d9: ec:ac:b7:04:c7:37:d9:9a:94:2c:a1:ef:12:5c:e4: 5b:d4:ac:ed:de:42:71:ad:7c:20:9e:2e:d7:b8:17: 9f:f4:87:20:15:3d:41:c8:b0:37:25:24:ac:c4:e2: 11:70:c7:c8:ee:1d:82:33:49:dc:c2:5f:86:7a:fe: ee:6b:5b:0a:35:87:00:96:88:a7:1f:4a:35:08:fe: cc:ea:bc:c1:65:4f:d5:9d:01:6a:15:e6:c0:09:c8: c1:af:5f:01:7d:40:38:93:10:25:30:3a:39:c7:f2: ed:7e:de:62:82:1e:49:91:af:1d:47:1a:72:ab:64: 2b:8a:2e:3a:cf:69:0e:76:9e:5d:f1:1b:6a:0e:af: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:08:AB:BB:F6:18:97:CC:9D:68:9A:49:FA:81:D1:60:48:F3:F6 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f4:d0:75:03:74:4e:3a:9f:3d:d2:4b:b7:15:66:70:f4:8b: 7c:1e:f8:18:fd:4e:28:29:95:38:bc:71:67:2e:00:0c:77:da: c7:51:59:2b:76:88:cd:87:10:61:70:c1:c7:e3:11:f0:3e:76: 43:de:3a:0f:c7:e7:5b:d4:ab:a1:32:60:42:7d:2d:a5:39:f4: 27:d2:0d:a5:6d:29:cd:74:09:69:ef:2d:01:89:81:32:29:10: 31:73:e1:f4:22:88:55:65:71:22:72:a4:8f:22:93:f2:80:c1: f6:4b:69:2d:99:3c:b3:c3:6a:24:d6:df:34:34:11:8f:69:d0: 1e:10:ec:27:42:5c:89:bc:48:1e:3c:6a:97:30:d8:76:b9:4a: 14:30:68:5b:ed:8b:bf:fb:2b:49:b6:e2:0f:00:51:04:8d:9c: cb:64:14:1c:b4:0c:1b:e1:fb:53:56:39:d6:b2:83:1c:d6:05: b5:2e:64:df:17:93:0e:14:df:fd:98:21:0f:14:85:92:9d:a6: 9e:4c:41:25:91:c9:66:2a:8a:72:2f:86:42:4b:bb:78:bc:50: f8:9b:8a:38:ed:00:b7:ed:1e:06:46:20:0a:90:12:1a:84:6f: 0d:89:27:1f:2a:eb:a8:47:e5:ec:c7:c5:f3:4a:03:92:fa:f4: 65:0a:c9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUwNDA4MjAwNjExWhcNMjUwNDE1MjAwNjExWjAYMRYwFAYD VQQDEw02N2Y1ODFiMy1hM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr133GW5DMTTjNZhixcML+8oL0HKlPq3LyS+cpHDOX0AX7gUuB/o37whXPFMS yavkvxKKJTyqYtZdINtZHmOAmG7eFIsSNqu719Jb+8ZGhfWR2277LW0ZxkDah5n7 ToEhK1euIsF6T33KjWzUw1VLh69qGp/aRtnsrLcExzfZmpQsoe8SXORb1Kzt3kJx rXwgni7XuBef9IcgFT1ByLA3JSSsxOIRcMfI7h2CM0ncwl+Gev7ua1sKNYcAloin H0o1CP7M6rzBZU/VnQFqFebACcjBr18BfUA4kxAlMDo5x/Ltft5igh5Jka8dRxpy q2Qrii46z2kOdp5d8RtqDq/FuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOSCKu7 9hiXzJ1omkn6gdFgSPP2MB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL9NB1A3ROOp890ku3FWZw9It8HvgY/U4oKZU4vHFnLgAMd9rHUVkr dojNhxBhcMHH4xHwPnZD3joPx+db1KuhMmBCfS2lOfQn0g2lbSnNdAlp7y0BiYEy KRAxc+H0IohVZXEicqSPIpPygMH2S2ktmTyzw2ok1t80NBGPadAeEOwnQlyJvEge PGqXMNh2uUoUMGhb7Yu/+ytJtuIPAFEEjZzLZBQctAwb4ftTVjnWsoMc1gW1LmTf F5MOFN/9mCEPFIWSnaaeTEElkclmKopyL4ZCS7t4vFD4m4o47QC37R4GRiAKkBIa hG8NiScfKuuoR+Xsx8XzSgOS+vRlCslU -----END CERTIFICATE-----Generated at Wed Apr 9 01:58:15 2025 by rpki-client