$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft File: R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json) Hash identifier: +VUui3s5rqRM1ZEwzMhm7bCgQIMAE6YyxJqBHqDjeng= Subject key identifier: 02:96:51:F9:F2:0C:AB:3E:DA:E3:D8:9F:F2:D0:0D:4F:75:95:34:6D Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Certificate serial: 1151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft Manifest number: 1142 Signing time: Tue 08 Apr 2025 17:17:33 +0000 Manifest this update: Tue 08 Apr 2025 17:17:33 +0000 Manifest next update: Tue 15 Apr 2025 17:17:33 +0000 Files and hashes: 1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: mF82AGQMG7y6XD10UCymwCIIYlrEqijsGJBwRWeUV60=) 2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: VfqKvYxCI56t83Xe2xSnLTZ4YYU3+AYmEJ7FdSPfdWA=) 3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: 31ZyQUCr1HmkiWyW7LxwjsOe8qq4XgICKJjGASD158Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4433 (0x1151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144354 Validity Not Before: Apr 8 17:17:33 2025 GMT Not After : Apr 15 17:17:33 2025 GMT Subject: CN=67f55a2d-bf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:28:84:3e:eb:4e:20:67:70:ef:f8:72:cd: bd:58:98:5d:68:ef:b0:f0:65:fa:3e:70:37:ff:06: 3b:47:c9:9b:02:57:33:13:5c:1e:51:c9:5c:ea:8a: ed:60:dc:ed:be:0b:9b:43:bf:4e:97:d7:06:14:7f: 84:b3:f7:b1:0b:1e:8d:91:eb:3f:7c:7b:c9:12:9c: 58:1e:e6:b5:d4:b1:8f:bc:0b:8a:ef:17:80:5c:9f: 00:e8:dc:9c:aa:3f:4d:49:e4:5e:49:45:cc:26:cd: ff:58:72:80:e0:35:0d:4a:c3:e3:72:ed:5d:8d:b4: d5:da:cf:b2:07:25:fe:a8:84:0b:b4:76:cf:61:bc: 34:27:ba:aa:a2:6f:3e:8e:02:b2:f9:b0:e1:a5:07: 8d:da:b3:57:5b:f2:65:ff:2d:7e:fc:14:2a:17:55: b2:bc:88:3d:1e:c8:f6:6f:60:ae:de:10:93:d1:0c: 7e:60:fb:b3:39:b8:b3:9b:54:0f:48:20:44:81:6a: c4:74:a5:64:04:c7:eb:17:de:11:a0:9b:97:d1:c1: 8b:e7:9d:63:bb:af:45:7c:20:df:46:cd:9e:e5:cc: 57:73:21:80:c8:91:67:04:29:28:72:a4:a9:51:db: 70:14:19:af:61:3f:5d:9a:fd:d6:7b:94:cf:18:67: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:96:51:F9:F2:0C:AB:3E:DA:E3:D8:9F:F2:D0:0D:4F:75:95:34:6D X509v3 Authority Key Identifier: keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:40:27:bb:fa:58:67:20:55:80:0e:22:60:5c:6a:f0:89:64: dd:12:a8:60:83:f5:9f:0d:32:7e:82:b2:d5:a7:d2:bc:fc:a8: fc:14:04:5f:b1:d9:eb:f6:ed:1c:69:ee:d6:cc:07:75:4d:fa: 92:9b:78:e6:43:a9:df:0b:6b:33:66:d7:de:3e:83:88:6f:06: 5b:92:20:97:21:7f:05:39:59:41:6d:3b:99:46:2b:0f:d7:fb: 60:b8:19:d2:6f:86:3c:0a:1b:67:15:f4:f7:90:ca:c2:e4:2b: 74:70:d6:8e:1f:60:55:1e:10:0a:f0:78:76:e7:e8:0a:c1:a6: 68:d1:c7:ca:23:36:26:fc:9e:59:7d:79:6d:43:a3:1d:88:4b: d5:ec:d8:56:c6:b9:ef:74:aa:5a:e2:6a:e1:28:80:6e:bc:88: 9c:59:0b:c9:58:22:17:7a:f9:0e:3e:8b:20:5c:ec:82:bb:22: 87:80:d8:96:d5:eb:0f:53:73:ef:29:ab:c9:79:37:2e:2f:4d: 19:4a:d9:00:83:60:57:91:52:dc:92:08:0a:f8:ce:d9:4a:69: a4:ff:25:2a:e5:67:31:2e:1b:81:99:8a:f8:54:d0:fe:7d:63: 15:e6:ea:a3:8d:2b:7c:26:5e:cb:f8:f7:20:04:ab:70:34:59: ab:26:87:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzNTQxMTAvBgNVBAUTKDQ3RDA2QkQ3RUE4REYyMTk3RjcxMjcwQjc1Qzk2NEM3 OUFCOUYwQ0MwHhcNMjUwNDA4MTcxNzMzWhcNMjUwNDE1MTcxNzMzWjAYMRYwFAYD VQQDEw02N2Y1NWEyZC1iZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEEohD7rTiBncO/4cs29WJhdaO+w8GX6PnA3/wY7R8mbAlczE1weUclc6ort YNztvgubQ79Ol9cGFH+Es/exCx6Nkes/fHvJEpxYHua11LGPvAuK7xeAXJ8A6Nyc qj9NSeReSUXMJs3/WHKA4DUNSsPjcu1djbTV2s+yByX+qIQLtHbPYbw0J7qqom8+ jgKy+bDhpQeN2rNXW/Jl/y1+/BQqF1WyvIg9Hsj2b2Cu3hCT0Qx+YPuzObizm1QP SCBEgWrEdKVkBMfrF94RoJuX0cGL551ju69FfCDfRs2e5cxXcyGAyJFnBCkocqSp UdtwFBmvYT9dmv3We5TPGGcz9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKWUfny DKs+2uPYn/LQDU91lTRtMB8GA1UdIwQYMBaAFEfQa9fqjfIZf3EnC3XJZMeaufDM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM1NC82MUExMjZFNDA0 RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjhobF9jU2NMZGNsa3g1cTU4 TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I5QnIxLXFOOGhsX2NTY0xkY2xreDVxNThNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM1NC82MUExMjZFNDA0RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjho bF9jU2NMZGNsa3g1cTU4TXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQCe7+lhnIFWADiJgXGrwiWTdEqhgg/WfDTJ+grLVp9K8/Kj8FARf sdnr9u0cae7WzAd1TfqSm3jmQ6nfC2szZtfePoOIbwZbkiCXIX8FOVlBbTuZRisP 1/tguBnSb4Y8ChtnFfT3kMrC5Ct0cNaOH2BVHhAK8Hh25+gKwaZo0cfKIzYm/J5Z fXltQ6MdiEvV7NhWxrnvdKpa4mrhKIBuvIicWQvJWCIXevkOPosgXOyCuyKHgNiW 1esPU3PvKavJeTcuL00ZStkAg2BXkVLckggK+M7ZSmmk/yUq5WcxLhuBmYr4VND+ fWMV5uqjjSt8Jl7L+PcgBKtwNFmrJodY -----END CERTIFICATE-----Generated at Thu Apr 10 20:44:17 2025 by rpki-client