$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json) Hash identifier: MQohETSnnfHSy7xIdltasZzD6wy/eucjj/dQpTFaDSo= Subject key identifier: 57:D4:71:66:9F:46:8F:0E:92:C5:7D:9D:21:D1:30:8F:F3:15:DD:7E Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft Manifest number: 9F Signing time: Sat 29 Mar 2025 05:37:05 +0000 Manifest this update: Sat 29 Mar 2025 05:37:04 +0000 Manifest next update: Sat 05 Apr 2025 05:37:04 +0000 Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: mgcn/IKI6wqgKmHs4kbud29q2jVotFoYj+L+Ps/+DTQ=) 2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=) 3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152B13 Validity Not Before: Mar 29 05:37:04 2025 GMT Not After : Apr 5 05:37:04 2025 GMT Subject: CN=67e78701-bc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:a1:2b:ba:3e:6c:e4:e2:76:7e:86:18:8d: ef:f6:82:2a:6b:5d:bd:6e:da:02:32:1a:97:98:58: 71:e4:fb:80:35:76:4b:2e:e8:ec:12:2d:f5:57:8a: bd:61:c1:93:67:c3:b7:07:57:56:4f:9f:62:91:cc: 51:3e:ca:e1:56:57:e8:c6:25:c4:05:99:b5:5a:0d: 34:c6:0c:22:00:3e:9b:f2:7f:e2:7c:47:20:ba:a7: f1:52:76:f1:3d:87:fa:84:b6:ac:a3:e7:5b:a4:03: cd:14:2c:96:09:f1:50:70:19:10:8b:b6:27:aa:c7: 18:45:00:e5:31:a1:1f:2a:5f:5b:6b:ff:96:13:b9: e1:ee:01:be:68:86:49:74:ce:ae:20:1e:e5:0b:54: dd:06:3f:f5:82:f9:79:7b:e0:46:f3:3c:d7:97:b3: 48:5c:a0:24:04:e6:28:53:7b:ba:21:93:d2:7f:2e: f8:fc:e8:cc:3a:98:5b:47:b3:07:a5:c2:1f:04:0e: 6d:c9:38:b0:9d:fb:00:fa:12:72:a2:bd:50:c6:fb: b1:97:d8:b7:c5:87:be:cd:08:8d:44:4d:30:bb:a3: 0b:eb:b4:9c:16:98:fd:31:02:29:0c:d8:e5:41:6f: 18:de:81:43:59:46:48:1e:59:3d:c7:92:51:3a:1d: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D4:71:66:9F:46:8F:0E:92:C5:7D:9D:21:D1:30:8F:F3:15:DD:7E X509v3 Authority Key Identifier: keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:82:6b:96:4d:1e:4c:1c:b4:d4:f6:fd:91:ea:52:ee:af:8e: 7b:d6:5a:78:60:11:f2:3d:36:c4:20:0f:f8:81:8b:d1:e8:91: 86:c9:9d:75:92:16:c8:7d:77:92:28:46:2c:1c:66:56:37:a6: 8e:ab:81:6c:11:e7:02:bb:bc:38:13:cc:fa:95:f4:17:60:ff: bc:49:c0:93:fc:4f:c5:9e:1f:f6:02:f8:f9:93:d6:bd:a8:e0: 29:bc:b2:3c:f0:b1:cd:b4:9e:60:cc:21:b5:bc:5d:91:1e:06: 2b:fa:6d:5a:d6:87:74:d8:22:56:29:6d:40:e5:f8:eb:52:13: bd:db:04:2e:1e:27:c9:e9:a5:5f:00:25:6e:23:23:d8:b5:72: 0b:32:3e:e7:78:6c:36:9d:69:88:b8:fb:89:28:2e:68:94:fc: f6:e9:aa:c8:64:64:7d:60:a2:7c:5d:55:7b:4a:ec:a0:43:82: a4:65:fb:05:35:8f:af:a2:04:70:f3:5d:32:ce:96:12:9f:b9: 32:0c:cb:52:25:14:7c:2d:a9:65:11:e2:97:ab:c4:b1:30:0b: 88:35:b0:b5:c2:bc:06:96:ec:cc:34:6c:fc:60:81:79:bf:f9: 2b:a8:b8:67:64:7a:54:8d:75:24:f0:34:d5:35:17:d5:86:9c: 61:fe:58:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx RDAxMjlFQkUwHhcNMjUwMzI5MDUzNzA0WhcNMjUwNDA1MDUzNzA0WjAYMRYwFAYD VQQDEw02N2U3ODcwMS1iYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaKhK7o+bOTidn6GGI3v9oIqa129btoCMhqXmFhx5PuANXZLLujsEi31V4q9 YcGTZ8O3B1dWT59ikcxRPsrhVlfoxiXEBZm1Wg00xgwiAD6b8n/ifEcguqfxUnbx PYf6hLaso+dbpAPNFCyWCfFQcBkQi7YnqscYRQDlMaEfKl9ba/+WE7nh7gG+aIZJ dM6uIB7lC1TdBj/1gvl5e+BG8zzXl7NIXKAkBOYoU3u6IZPSfy74/OjMOphbR7MH pcIfBA5tyTiwnfsA+hJyor1Qxvuxl9i3xYe+zQiNRE0wu6ML67ScFpj9MQIpDNjl QW8Y3oFDWUZIHlk9x5JROh3WrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfUcWaf Ro8OksV9nSHRMI/zFd1+MB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkIxMy9EQzQ4M0YzMDFFQzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZ Um1KUWpIZ1Y5LXNkQVNucjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCegmuWTR5MHLTU9v2R6lLur4571lp4YBHyPTbEIA/4gYvR6JGGyZ11 khbIfXeSKEYsHGZWN6aOq4FsEecCu7w4E8z6lfQXYP+8ScCT/E/Fnh/2Avj5k9a9 qOApvLI88LHNtJ5gzCG1vF2RHgYr+m1a1od02CJWKW1A5fjrUhO92wQuHifJ6aVf ACVuIyPYtXILMj7neGw2nWmIuPuJKC5olPz26arIZGR9YKJ8XVV7SuygQ4KkZfsF NY+vogRw810yzpYSn7kyDMtSJRR8LallEeKXq8SxMAuINbC1wrwGluzMNGz8YIF5 v/krqLhnZHpUjXUk8DTVNRfVhpxh/liH -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:57 2025 by rpki-client