$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: QZA49GomG/b+tvxTs7IQCha2DGziXr+9ghtFSiIVW8o= Subject key identifier: 64:73:FB:F5:49:5F:0E:57:7A:D3:D6:17:04:B8:3A:E2:08:76:6A:80 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0C1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0C14 Signing time: Wed 02 Apr 2025 18:38:49 +0000 Manifest this update: Wed 02 Apr 2025 18:38:48 +0000 Manifest next update: Wed 09 Apr 2025 18:38:48 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: Z+D9yd2qJrelwnSfKjwlfLq63cShF4fOJorwjs1n19M=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3103 (0xc1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049 Validity Not Before: Apr 2 18:38:48 2025 GMT Not After : Apr 9 18:38:48 2025 GMT Subject: CN=67ed8438-18aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:fc:1f:a0:54:2f:06:ef:eb:bb:fa:45:4f: 05:21:b8:22:9a:b3:fb:24:bf:ea:02:14:d7:35:1b: 67:b0:58:a6:90:44:6b:cf:cf:39:6f:55:5c:ee:cd: 9f:f4:05:9d:11:7e:79:b0:fa:a7:2d:5a:8b:cb:45: 82:93:db:e1:a7:0a:bf:ff:81:a0:46:a6:3c:30:eb: 24:d6:18:7f:c2:35:bc:24:2d:7e:0c:cf:19:b8:b9: 91:01:1a:cc:1c:64:89:f7:ca:ea:ca:82:c8:77:4b: df:72:a2:c5:53:56:5d:56:5c:eb:65:e5:98:af:db: 36:d7:f1:fa:b5:34:d3:0c:77:85:f6:e6:4a:2f:2b: 0c:5d:a9:7e:aa:9f:e8:42:b2:f2:dd:0f:2c:ec:40: e9:aa:3e:d9:38:25:c6:34:86:52:d1:42:2e:f9:7b: 31:5c:be:0d:7a:94:04:a2:9b:e0:88:77:f8:6a:f7: d7:7a:5a:58:7e:5d:0c:81:90:05:eb:bb:c3:91:cc: 66:6f:51:55:02:0d:0a:a3:a9:9c:2c:f9:95:08:52: 90:c9:32:35:90:e7:5f:33:d2:af:72:7d:19:fe:02: 9e:5d:a0:7d:0a:80:33:64:80:0f:42:a9:dd:2c:67: 65:b9:2c:bd:81:33:57:c8:2f:db:df:ce:3f:e9:c3: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:FB:F5:49:5F:0E:57:7A:D3:D6:17:04:B8:3A:E2:08:76:6A:80 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7d:19:1c:8d:8c:e0:8b:93:5c:30:fe:93:f7:9d:1b:ba:46: 55:18:e5:6b:c8:02:5a:82:67:86:e7:e1:1a:cc:fb:bb:c7:ad: 84:db:f2:1e:1d:6a:61:22:03:60:81:df:61:02:eb:ed:89:d2: f2:df:28:30:01:f8:ae:f8:f5:83:93:53:5e:e2:8a:d4:09:3e: cc:78:31:0b:a7:ff:37:3f:f8:eb:f9:c3:d4:2b:f5:79:90:ad: db:74:47:68:c9:c3:34:21:fc:fc:fe:68:82:fd:63:10:fb:e9: 47:e7:aa:5b:df:74:7a:58:bc:79:d4:49:a5:4b:c2:e1:c2:7b: c0:78:0a:90:10:d8:53:98:ac:03:6a:f4:dd:91:a4:65:f2:ae: 27:06:ff:0d:7f:c1:8f:51:d9:74:39:6d:b8:38:3a:7b:4f:b9: 37:30:2f:9f:68:0c:62:fe:b5:4e:13:0b:d7:04:63:fd:0a:4a: 83:97:f7:57:ac:af:dd:88:40:90:58:60:94:35:07:6d:53:1a: 1c:6c:09:be:86:f7:76:db:ea:f4:cc:df:28:6a:a2:a0:57:d8: 3a:9b:27:ee:7f:78:41:61:e9:12:6f:b0:e2:ff:ad:db:ae:54: f2:49:b1:93:b6:ba:f4:28:83:1c:ff:d1:7c:54:d4:97:6b:7c: 57:e2:7e:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjUwNDAyMTgzODQ4WhcNMjUwNDA5MTgzODQ4WjAYMRYwFAYD VQQDEw02N2VkODQzOC0xOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0b8H6BULwbv67v6RU8FIbgimrP7JL/qAhTXNRtnsFimkERrz885b1Vc7s2f 9AWdEX55sPqnLVqLy0WCk9vhpwq//4GgRqY8MOsk1hh/wjW8JC1+DM8ZuLmRARrM HGSJ98rqyoLId0vfcqLFU1ZdVlzrZeWYr9s21/H6tTTTDHeF9uZKLysMXal+qp/o QrLy3Q8s7EDpqj7ZOCXGNIZS0UIu+XsxXL4NepQEopvgiHf4avfXelpYfl0MgZAF 67vDkcxmb1FVAg0Ko6mcLPmVCFKQyTI1kOdfM9Kvcn0Z/gKeXaB9CoAzZIAPQqnd LGdluSy9gTNXyC/b384/6cPHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRz+/VJ Xw5XetPWFwS4OuIIdmqAMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNfRkcjYzgi5NcMP6T950bukZVGOVryAJagmeG5+EazPu7x62E2/Ie HWphIgNggd9hAuvtidLy3ygwAfiu+PWDk1Ne4orUCT7MeDELp/83P/jr+cPUK/V5 kK3bdEdoycM0Ifz8/miC/WMQ++lH56pb33R6WLx51EmlS8LhwnvAeAqQENhTmKwD avTdkaRl8q4nBv8Nf8GPUdl0OW24ODp7T7k3MC+faAxi/rVOEwvXBGP9CkqDl/dX rK/diECQWGCUNQdtUxocbAm+hvd22+r0zN8oaqKgV9g6myfuf3hBYekSb7Di/63b rlTySbGTtrr0KIMc/9F8VNSXa3xX4n7t -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:29 2025 by rpki-client