$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json) Hash identifier: +9S/Dae4vfsUmFfba+y7y4MI6MKkJCV7wh+Ku/s4pdE= Subject key identifier: 72:AA:CE:8E:F3:3E:3A:6F:F2:3B:35:4B:17:55:67:82:45:FF:4B:3C Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 18F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft Manifest number: 18C3 Signing time: Fri 04 Apr 2025 16:33:16 +0000 Manifest this update: Fri 04 Apr 2025 16:33:15 +0000 Manifest next update: Fri 11 Apr 2025 16:33:15 +0000 Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: N47/a2RNnbi0psMUtabkV9khnP7TPJqJCQCXXk3VllU=) 2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: RzPoxU6VMwenRCZMIgDJU4uMvSt870PJ/i4+innQzD0=) 3: D3FDB470817311EFA6D1742FC4F9AE02.roa (hash: dibMVArE3npC/0CJpung5oQdTBClBsRdSRPJEkXo1rg=) 4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: dqd2t4UXuMtWb1yN/NCXtKO4VOE3Updlpy8CHKQcrr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6384 (0x18f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1 Validity Not Before: Apr 4 16:33:15 2025 GMT Not After : Apr 11 16:33:15 2025 GMT Subject: CN=67f009cb-4584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:b7:0d:45:31:68:89:d7:d8:6d:0e:42:28: 26:33:d7:e0:02:17:61:53:a5:18:31:51:df:39:65: 15:da:e6:4f:6b:5e:3d:56:bd:59:cb:b6:e7:02:46: 64:ac:f0:66:a6:5e:c2:59:b7:a6:eb:3e:7a:92:ea: 1d:db:0c:2b:44:06:f7:32:05:e9:70:75:c0:4a:33: a9:5e:a5:5c:77:b9:b7:2d:08:1e:3e:e7:27:d2:a1: e9:f6:30:9d:a5:e7:dd:f5:5d:d2:b2:c0:8f:10:f3: 28:a6:de:ab:25:0c:71:91:d1:ef:3e:69:5b:41:d7: b8:47:2f:1f:21:5c:26:0b:07:2f:b8:3e:1a:e8:9d: 66:54:50:e3:a5:52:ab:d3:cf:32:b7:d6:7e:95:fd: 80:14:e5:99:2f:a9:4a:1f:b3:9a:f7:f3:fc:ce:f6: d2:72:c3:2c:18:cd:48:63:96:e5:46:f8:75:60:4e: ad:49:6b:cf:54:c6:53:98:ce:61:01:63:20:b4:cb: 70:4e:3e:be:ca:3d:81:3b:26:48:8c:1c:93:8a:92: 39:4a:35:96:12:3c:d5:69:12:76:b6:3d:66:24:1c: 62:9d:cd:7e:30:a4:38:e7:6d:38:58:0f:32:fe:78: c0:42:3c:e2:81:59:40:66:b5:89:58:30:b4:db:ec: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:CE:8E:F3:3E:3A:6F:F2:3B:35:4B:17:55:67:82:45:FF:4B:3C X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:32:f4:f6:9e:db:6b:5c:40:d5:d8:7d:a1:d1:49:95:66:10: ef:3a:d7:48:74:0f:39:05:31:f8:e6:57:0f:40:9e:4f:ae:67: 70:d1:62:ac:0d:8e:e5:70:d3:4a:08:bc:e2:ad:ff:71:b9:dc: 33:3a:6b:e0:83:eb:7a:c1:db:5d:9b:af:b6:a3:72:ce:3f:67: 4c:89:8f:01:6b:5d:87:82:82:c3:a5:a9:1f:6a:12:c1:8f:46: 9c:20:4d:06:47:bd:47:de:b9:a8:40:b7:c3:92:8f:c1:03:00: 7c:2c:07:a0:f7:9f:93:46:77:a8:f7:ec:ef:c2:7d:b4:2c:7f: 43:35:80:59:be:e1:30:12:95:79:5e:c3:d1:a0:4b:2d:c0:56: 9f:28:6b:d7:93:16:55:10:84:e1:d7:03:5f:45:38:5a:aa:12: be:ac:06:d3:cb:d7:56:af:3c:e7:09:a5:3e:de:ac:54:68:c0: e6:45:73:cd:a3:eb:45:0b:86:da:b0:97:1c:f3:6c:b3:de:89: b7:96:87:be:13:6c:f9:e0:c7:f1:bb:ee:fd:ae:f9:6c:1f:86: 91:13:33:3f:12:86:79:12:db:5a:cb:42:af:2b:b9:8a:6e:0f: b0:ae:a6:22:9f:de:69:c9:29:0f:de:48:45:9b:6a:33:98:ef: 68:e6:0a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjUwNDA0MTYzMzE1WhcNMjUwNDExMTYzMzE1WjAYMRYwFAYD VQQDEw02N2YwMDljYi00NTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+a3DUUxaInX2G0OQigmM9fgAhdhU6UYMVHfOWUV2uZPa149Vr1Zy7bnAkZk rPBmpl7CWbem6z56kuod2wwrRAb3MgXpcHXASjOpXqVcd7m3LQgePucn0qHp9jCd pefd9V3SssCPEPMopt6rJQxxkdHvPmlbQde4Ry8fIVwmCwcvuD4a6J1mVFDjpVKr 088yt9Z+lf2AFOWZL6lKH7Oa9/P8zvbScsMsGM1IY5blRvh1YE6tSWvPVMZTmM5h AWMgtMtwTj6+yj2BOyZIjByTipI5SjWWEjzVaRJ2tj1mJBxinc1+MKQ45204WA8y /njAQjzigVlAZrWJWDC02+wTzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKqzo7z Pjpv8js1SxdVZ4JF/0s8MB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI d0lkWHplZnlIc1BQS2s1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXMvT2nttrXEDV2H2h0UmVZhDvOtdIdA85BTH45lcPQJ5Prmdw0WKs DY7lcNNKCLzirf9xudwzOmvgg+t6wdtdm6+2o3LOP2dMiY8Ba12HgoLDpakfahLB j0acIE0GR71H3rmoQLfDko/BAwB8LAeg95+TRneo9+zvwn20LH9DNYBZvuEwEpV5 XsPRoEstwFafKGvXkxZVEITh1wNfRThaqhK+rAbTy9dWrzznCaU+3qxUaMDmRXPN o+tFC4basJcc82yz3om3loe+E2z54Mfxu+79rvlsH4aREzM/EoZ5Ettay0KvK7mK bg+wrqYin95pySkP3khFm2ozmO9o5gob -----END CERTIFICATE-----Generated at Sat Apr 5 12:51:16 2025 by rpki-client