$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: TKHkt0SPgryYWdvltnd4QG8u2VDiIiG27WDn3Qvu5Ao= Subject key identifier: A7:B1:67:FD:8C:5A:BB:BF:1E:97:22:1D:99:27:04:C9:8C:CE:31:1A Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 09A8 Signing time: Fri 04 Apr 2025 20:10:41 +0000 Manifest this update: Fri 04 Apr 2025 20:10:41 +0000 Manifest next update: Fri 11 Apr 2025 20:10:41 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: kqLVx3Pws8S4srKIw2m1u9LF+ToVgZJRQgWkT+VG+n0=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A Validity Not Before: Apr 4 20:10:41 2025 GMT Not After : Apr 11 20:10:41 2025 GMT Subject: CN=67f03cc1-be35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:87:ab:03:17:83:47:31:bb:e4:72:45:d4: f6:61:a2:5f:0e:25:dd:e7:b8:5a:8d:46:85:e9:34: 21:1a:78:85:67:b6:d0:58:c5:a5:99:58:5a:25:ad: 2d:41:9d:da:75:87:b5:eb:c4:4d:c0:10:3a:77:fa: 42:61:09:65:4a:ce:3a:b5:7f:69:a6:22:87:c9:bc: 58:eb:47:85:3a:d2:6f:92:70:e3:50:f2:19:c7:94: 7d:69:2a:4e:94:cc:f7:e3:8e:a8:38:60:ce:c5:0f: 8d:03:4c:db:1e:6a:6f:42:55:73:48:dc:5b:b5:41: 7b:a2:11:84:01:c2:af:ff:b6:1b:82:f0:9e:4e:96: df:63:d6:8f:93:98:7b:0e:de:b2:78:78:1c:21:77: e4:0e:06:bc:17:51:2c:f9:3f:f3:c5:ee:5b:02:ed: 63:35:8c:cc:08:8e:e5:9c:27:b3:c9:95:6e:cd:92: de:a3:fc:67:b4:d9:7b:42:1a:73:76:cd:b4:a5:1f: 15:63:f4:61:ee:d7:6e:0d:fe:6b:ab:c6:aa:71:67: f8:63:f4:51:c8:85:81:34:43:2f:62:cb:54:04:94: 23:02:d6:f9:59:11:f4:b2:5c:44:d5:74:40:b9:1f: 4b:c3:3d:59:ef:80:62:88:2f:ad:46:89:d7:69:20: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:67:FD:8C:5A:BB:BF:1E:97:22:1D:99:27:04:C9:8C:CE:31:1A X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fa:da:80:63:45:f5:c6:1e:52:e0:bd:d3:e8:c3:ce:a0:ca: 2a:03:d9:e6:04:31:51:dc:80:66:49:fe:6f:ec:48:7d:ac:13: a3:f3:44:27:a3:59:35:1b:8e:1d:00:b0:89:7e:8d:16:5d:6b: bc:6c:9b:60:d4:bd:a0:b8:4b:71:2e:62:cf:3d:c8:79:19:42: d0:56:33:e6:dd:1e:96:3f:ca:2b:e3:5c:cc:2f:a7:b8:45:ec: b1:6f:cf:33:9e:dc:fb:c5:19:d5:f7:72:fd:a0:a4:f5:46:2a: f1:04:c8:5b:e6:ec:3b:23:19:40:ea:ba:ff:e1:aa:23:c4:eb: f6:a2:42:fd:22:57:16:3a:67:97:a0:21:60:e8:4b:d6:8a:ad: 25:b3:4e:5f:40:4c:80:9e:60:77:0b:e4:eb:e0:97:02:61:35: e4:b1:93:29:35:8b:39:41:3a:d5:85:d2:5b:9d:c0:5e:0c:ea: bd:3e:59:4b:d9:c7:79:e6:4c:d8:ad:91:f9:5f:9e:22:b7:64: dc:37:52:f2:32:46:de:0d:13:40:70:ba:ff:ec:58:60:ab:36: 07:85:4b:91:c2:1d:a0:b5:9b:3c:33:fe:8b:2f:db:34:49:8c: 2b:c5:99:35:d6:67:5d:2c:c7:1e:40:ca:75:aa:a6:28:9c:87: 1e:99:25:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjUwNDA0MjAxMDQxWhcNMjUwNDExMjAxMDQxWjAYMRYwFAYD VQQDEw02N2YwM2NjMS1iZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+yHqwMXg0cxu+RyRdT2YaJfDiXd57hajUaF6TQhGniFZ7bQWMWlmVhaJa0t QZ3adYe168RNwBA6d/pCYQllSs46tX9ppiKHybxY60eFOtJvknDjUPIZx5R9aSpO lMz3446oOGDOxQ+NA0zbHmpvQlVzSNxbtUF7ohGEAcKv/7YbgvCeTpbfY9aPk5h7 Dt6yeHgcIXfkDga8F1Es+T/zxe5bAu1jNYzMCI7lnCezyZVuzZLeo/xntNl7Qhpz ds20pR8VY/Rh7tduDf5rq8aqcWf4Y/RRyIWBNEMvYstUBJQjAtb5WRH0slxE1XRA uR9Lwz1Z74BiiC+tRonXaSB+rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKexZ/2M Wru/HpciHZknBMmMzjEaMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq+tqAY0X1xh5S4L3T6MPOoMoqA9nmBDFR3IBmSf5v7Eh9rBOj80Qn o1k1G44dALCJfo0WXWu8bJtg1L2guEtxLmLPPch5GULQVjPm3R6WP8or41zML6e4 Reyxb88zntz7xRnV93L9oKT1RirxBMhb5uw7IxlA6rr/4aojxOv2okL9IlcWOmeX oCFg6EvWiq0ls05fQEyAnmB3C+Tr4JcCYTXksZMpNYs5QTrVhdJbncBeDOq9PllL 2cd55kzYrZH5X54it2TcN1LyMkbeDRNAcLr/7FhgqzYHhUuRwh2gtZs8M/6LL9s0 SYwrxZk11mddLMceQMp1qqYonIcemSVY -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:03 2025 by rpki-client