$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: NtTabcF9HX3+DnBHNE0ZSiLmKKJruv0ejIBB1EzTPPw= Subject key identifier: 29:80:8F:51:16:0D:61:F0:49:F4:4B:A5:44:FD:18:31:80:85:C5:66 Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 042A Signing time: Thu 03 Apr 2025 00:18:55 +0000 Manifest this update: Thu 03 Apr 2025 00:18:54 +0000 Manifest next update: Thu 10 Apr 2025 00:18:54 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: 1vBvQYZgJRL3T9mCaCQZwGhiUO92unA30AhVjQiyIFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016 Validity Not Before: Apr 3 00:18:54 2025 GMT Not After : Apr 10 00:18:54 2025 GMT Subject: CN=67edd3ef-be6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:d6:02:22:bf:a0:ab:e2:b9:0c:0d:7f:82: 28:e1:39:01:0b:9b:f4:2f:a4:69:aa:0e:33:58:a9: 4e:cd:47:9b:60:03:28:9c:e0:13:6e:b4:cb:c4:6f: d7:bd:b5:a0:71:45:7f:d9:07:07:30:00:c7:d3:3e: 36:65:25:1e:a1:e3:4d:23:a9:1a:76:73:37:ba:82: 0f:a1:1f:13:e0:f4:5e:d3:f7:13:0b:1c:0e:99:00: b1:20:3e:91:6e:d6:bf:8b:b8:6b:1e:eb:19:cd:31: cc:c3:9e:e7:94:6d:5e:6b:3a:51:b3:30:e0:75:f4: fa:0d:16:a0:12:6a:c6:54:99:6d:26:e4:ad:70:47: 07:7f:6c:1a:45:b6:40:4a:3e:2c:7a:71:94:c1:91: dc:a3:f0:ed:8a:39:d0:d7:64:ce:e6:dd:3e:15:10: 42:cf:6a:d0:2b:5c:c2:d5:ac:a3:eb:08:10:35:6f: 6f:23:ee:5d:b1:56:d3:6e:d1:8a:63:29:6d:0b:8b: 3e:df:2d:d0:31:00:0a:3b:a2:8f:fb:2a:84:21:f1: a3:76:c7:d2:a6:da:32:6e:ec:9d:dc:af:a6:4b:e1: cf:68:ba:73:98:5a:63:d8:43:be:5f:cc:be:6f:2a: b1:1f:cb:4a:14:70:65:8b:77:ac:23:25:e0:45:62: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:80:8F:51:16:0D:61:F0:49:F4:4B:A5:44:FD:18:31:80:85:C5:66 X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e5:3c:07:2b:44:13:df:dd:d0:84:74:d7:b3:d4:72:3c:84: 91:a8:da:84:61:54:ae:5a:d0:c5:20:5d:c4:94:ad:44:1b:df: 5e:40:79:dd:8b:37:e0:fc:db:f2:44:55:7f:81:a7:06:66:04: 93:a4:d2:7b:96:c1:c1:ea:34:e6:a4:25:ce:6f:67:f6:a1:d5: 2c:ab:12:ec:0e:78:e2:53:eb:2d:8d:4c:23:0c:fa:c2:76:02: b8:eb:a6:ff:bf:54:d9:5a:c8:d6:20:3f:2c:8a:3d:4a:ed:c3: 3c:54:c9:da:62:ad:c7:f7:76:0c:39:13:7c:d7:cb:da:d6:4e: 4c:fc:5e:ce:df:4d:e5:69:92:87:92:4e:a2:02:6e:05:19:e5: e6:ad:bc:e9:74:a1:f7:47:fb:a4:0c:f0:10:f2:3d:f9:10:2d: 22:19:87:a9:20:fb:fd:e4:39:5f:32:3d:41:bc:25:67:05:db: b9:60:01:39:a6:b9:a3:b9:96:73:87:c3:fc:50:60:c6:0a:e3: 09:50:83:39:19:cb:08:c9:15:54:bc:72:be:3c:d1:32:18:5f: ee:80:5c:d1:e8:cc:23:b4:d4:af:68:8f:1e:b7:e2:0f:65:2e: 9c:9e:da:30:f5:9d:e9:5b:70:d6:51:91:c9:06:6e:de:73:31: 1b:81:ea:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwNDAzMDAxODU0WhcNMjUwNDEwMDAxODU0WjAYMRYwFAYD VQQDEw02N2VkZDNlZi1iZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIPWAiK/oKviuQwNf4Io4TkBC5v0L6Rpqg4zWKlOzUebYAMonOATbrTLxG/X vbWgcUV/2QcHMADH0z42ZSUeoeNNI6kadnM3uoIPoR8T4PRe0/cTCxwOmQCxID6R bta/i7hrHusZzTHMw57nlG1eazpRszDgdfT6DRagEmrGVJltJuStcEcHf2waRbZA Sj4senGUwZHco/DtijnQ12TO5t0+FRBCz2rQK1zC1ayj6wgQNW9vI+5dsVbTbtGK YyltC4s+3y3QMQAKO6KP+yqEIfGjdsfSptoybuyd3K+mS+HPaLpzmFpj2EO+X8y+ byqxH8tKFHBli3esIyXgRWI3wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmAj1EW DWHwSfRLpUT9GDGAhcVmMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk5TwHK0QT393QhHTXs9RyPISRqNqEYVSuWtDFIF3ElK1EG99eQHnd izfg/NvyRFV/gacGZgSTpNJ7lsHB6jTmpCXOb2f2odUsqxLsDnjiU+stjUwjDPrC dgK466b/v1TZWsjWID8sij1K7cM8VMnaYq3H93YMORN818va1k5M/F7O303laZKH kk6iAm4FGeXmrbzpdKH3R/ukDPAQ8j35EC0iGYepIPv95DlfMj1BvCVnBdu5YAE5 prmjuZZzh8P8UGDGCuMJUIM5GcsIyRVUvHK+PNEyGF/ugFzR6MwjtNSvaI8et+IP ZS6cntow9Z3pW3DWUZHJBm7eczEbgeqy -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:25 2025 by rpki-client