$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: oZH79KiQj9bdb/6CEVFtH/Ic9G/MCWbclguESaZOYxE= Subject key identifier: CF:DC:77:C8:6F:F7:00:72:C3:BE:07:75:41:4A:98:AA:3C:73:2C:91 Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 31F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 31DF Signing time: Tue 08 Apr 2025 15:27:09 +0000 Manifest this update: Tue 08 Apr 2025 15:27:08 +0000 Manifest next update: Tue 15 Apr 2025 15:27:08 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: v1lD2LfEoWtDgsfiB3K7JSm0S9L9mkkmBVqnNfp1c4I=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: wEw2eUrFn2P+zJcWQBZWJ1lh7HYxVvAoUW5q1cBACrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12784 (0x31f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06 Validity Not Before: Apr 8 15:27:08 2025 GMT Not After : Apr 15 15:27:08 2025 GMT Subject: CN=67f5404d-4a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:fd:d7:b5:f2:4c:9a:6e:6a:57:97:71:50: 60:b3:30:44:e6:42:6b:40:61:72:63:0c:b7:a1:36: ed:a8:fb:46:08:e4:3f:da:50:a2:87:6b:ad:63:91: 4f:49:1d:8a:88:99:78:92:3c:6a:b5:dd:38:ec:be: 7a:6e:6f:f0:94:a1:11:19:23:11:be:90:82:9b:ca: 2b:8f:8c:46:b4:89:65:84:e2:d3:1a:5e:21:f7:90: 1c:3f:73:83:10:bb:5b:02:cc:23:88:f4:70:e9:53: c1:0c:e0:3d:16:26:0c:7a:4a:04:d1:38:ae:91:2b: 23:5e:12:56:e3:e8:7c:4f:da:95:b8:8e:21:31:c5: ce:df:6b:e9:ea:22:fb:bb:63:24:20:16:52:e7:9c: 11:e8:5a:21:db:18:a4:32:ec:3c:d4:cd:7e:9b:81: 92:79:bc:a5:22:6f:47:2c:2f:dc:50:ed:1e:bc:ba: ff:c3:81:a7:95:00:a6:2c:3c:65:4a:fc:2d:14:77: 1a:87:0f:32:d9:d4:e1:21:76:75:64:20:f9:10:14: f3:f4:04:6a:a6:85:a6:b4:79:96:34:44:3e:c6:f6: 2b:57:0b:2b:fc:ce:8c:00:0c:d9:cd:dc:7a:f6:9a: d4:9f:ab:e0:ca:bb:17:bb:c7:68:67:0e:58:d6:4a: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DC:77:C8:6F:F7:00:72:C3:BE:07:75:41:4A:98:AA:3C:73:2C:91 X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3d:bc:c0:72:e2:2b:47:15:74:5e:bf:38:36:2c:24:41:75: dd:14:9a:e8:fe:e8:bd:93:fd:8f:d0:aa:5a:ff:cb:c1:3c:ff: 61:86:e4:37:74:44:2c:36:9d:81:ac:24:39:66:2e:73:97:57: a8:93:b8:8f:d5:0d:2a:9a:f7:5c:d8:fc:aa:fd:5f:2b:ef:26: ac:a4:08:63:76:f3:8b:35:c6:bb:91:fc:66:82:09:af:a1:26: 7c:1c:6c:ef:60:59:69:5b:d9:1e:c5:f8:4b:39:0a:6e:a7:9f: 80:6d:00:5e:a3:5c:bb:24:8d:66:21:15:63:f3:93:bc:ec:58: 41:72:dc:49:8a:4b:c0:b0:56:b8:09:b0:c1:9c:63:af:2c:72: 41:c6:2d:e0:22:3d:35:e2:b2:d5:b9:8e:bb:8e:7a:bc:b8:f9: 97:55:34:6d:11:18:fd:d9:3d:e5:86:08:4e:d6:44:fa:77:e6: bb:70:f3:54:d5:83:00:c0:ba:aa:ed:da:07:03:50:0c:74:36: c6:00:75:73:d8:fa:68:98:b7:d4:ab:cf:52:7b:0b:ec:b8:53: 80:e2:78:a4:40:b0:7f:4c:f9:11:58:2f:23:52:5d:c0:d6:cb: 5e:cd:9a:8f:58:84:1c:a4:8f:6e:ba:a0:ac:11:45:18:0a:61: f0:a8:15:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjUwNDA4MTUyNzA4WhcNMjUwNDE1MTUyNzA4WjAYMRYwFAYD VQQDEw02N2Y1NDA0ZC00YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNX917XyTJpualeXcVBgszBE5kJrQGFyYwy3oTbtqPtGCOQ/2lCih2utY5FP SR2KiJl4kjxqtd047L56bm/wlKERGSMRvpCCm8orj4xGtIllhOLTGl4h95AcP3OD ELtbAswjiPRw6VPBDOA9FiYMekoE0TiukSsjXhJW4+h8T9qVuI4hMcXO32vp6iL7 u2MkIBZS55wR6Foh2xikMuw81M1+m4GSebylIm9HLC/cUO0evLr/w4GnlQCmLDxl SvwtFHcahw8y2dThIXZ1ZCD5EBTz9ARqpoWmtHmWNEQ+xvYrVwsr/M6MAAzZzdx6 9prUn6vgyrsXu8doZw5Y1kr43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/cd8hv 9wByw74HdUFKmKo8cyyRMB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrPbzAcuIrRxV0Xr84NiwkQXXdFJro/ui9k/2P0Kpa/8vBPP9hhuQ3 dEQsNp2BrCQ5Zi5zl1eok7iP1Q0qmvdc2Pyq/V8r7yaspAhjdvOLNca7kfxmggmv oSZ8HGzvYFlpW9kexfhLOQpup5+AbQBeo1y7JI1mIRVj85O87FhBctxJikvAsFa4 CbDBnGOvLHJBxi3gIj014rLVuY67jnq8uPmXVTRtERj92T3lhghO1kT6d+a7cPNU 1YMAwLqq7doHA1AMdDbGAHVz2PpomLfUq89SewvsuFOA4nikQLB/TPkRWC8jUl3A 1stezZqPWIQcpI9uuqCsEUUYCmHwqBWf -----END CERTIFICATE-----Generated at Thu Apr 10 18:59:49 2025 by rpki-client