$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft File: aR7cVncnIjOjjzNRkaropa4q97k.mft (raw, json) Hash identifier: mdTQu2Y1ASO5AQEC/pDxk5GuQK/EeTlla6Bdq6EcHQA= Subject key identifier: A1:56:EE:83:26:2B:E1:00:6F:74:8D:31:22:90:DD:FC:7B:DB:81:BC Authority key identifier: 69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9 Certificate issuer: /CN=A9155725/serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft Manifest number: 0D Signing time: Sun 13 Apr 2025 06:51:25 +0000 Manifest this update: Sun 13 Apr 2025 06:51:24 +0000 Manifest next update: Sun 20 Apr 2025 06:51:24 +0000 Files and hashes: 1: aR7cVncnIjOjjzNRkaropa4q97k.crl (hash: bNnftR5Il/rTzcA18s8Ume9GczameY3q0iL/A6Ik748=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 06:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155725, serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9 Validity Not Before: Apr 13 06:51:24 2025 GMT Not After : Apr 20 06:51:24 2025 GMT Subject: CN=67fb5eed-52e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:cc:12:6f:d8:70:99:60:69:3f:f1:d5:2d: eb:5b:ab:b0:33:4a:00:fc:f3:9a:ae:28:d1:50:a2: 88:5c:cf:0d:06:aa:f9:ac:33:38:d4:68:f8:c0:a5: db:50:9a:87:4c:db:76:c2:85:8a:9d:64:f9:8e:9a: ad:d1:34:5d:55:68:a4:20:83:b1:b4:3a:08:08:f9: ba:99:1b:40:d3:bc:f9:e6:12:c8:b9:bf:4b:33:20: 9b:96:92:10:90:18:4a:9a:82:9c:94:54:69:b7:ec: 3d:ce:ff:4f:fc:55:97:c7:52:f7:e6:84:cf:a8:ac: fb:f7:87:f7:78:fb:6f:c5:3e:54:15:2f:e2:9a:d6: 45:f5:78:5a:72:1e:79:ba:ba:88:d2:b6:04:8f:0f: a9:10:c7:b4:24:e7:70:9c:be:67:79:7f:53:a1:9e: ae:72:11:b0:a4:05:36:69:37:5d:52:be:4e:fd:e3: fb:07:f3:93:21:26:d2:53:c6:79:21:86:0e:5d:4f: d8:43:4b:5b:93:88:8f:fe:42:aa:e2:41:bf:70:f3: 55:2d:e5:65:63:08:0b:bf:30:ff:e3:09:90:55:d1: c5:ac:da:2b:1a:17:12:b5:c3:04:79:c5:63:4c:9d: 6b:89:7a:32:1a:82:df:37:01:55:22:45:31:f0:9b: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:EE:83:26:2B:E1:00:6F:74:8D:31:22:90:DD:FC:7B:DB:81:BC X509v3 Authority Key Identifier: keyid:69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:6c:7d:3e:fe:d9:c8:95:68:3f:a5:9b:e5:20:ef:aa:7c:b7: 30:1c:64:e5:b2:76:98:76:b4:cc:72:1f:54:34:4d:70:f0:32: 7e:be:39:b3:8c:32:f2:1b:cc:ac:b0:ee:61:f7:36:51:2e:ed: 65:57:e2:58:48:2a:13:a3:53:fb:80:77:b3:97:c2:9b:4d:1a: be:a8:1c:bd:a5:18:6e:8b:5c:cd:4e:eb:8a:35:36:37:dc:d9: 32:81:3f:9b:6d:27:5a:4e:7d:02:84:e4:8f:6e:81:b7:6f:fb: 14:60:23:88:e6:4a:cd:c2:74:bf:f2:5e:d8:40:ee:64:73:3d: 38:9d:33:f0:47:de:a7:c7:bf:d0:b9:21:77:03:7f:fb:12:c9: 1a:c3:06:55:a0:22:75:35:39:3c:c6:d2:61:46:f3:54:f1:7d: 82:9f:97:bf:13:fd:c3:ec:16:b9:38:74:1f:cb:e8:37:af:db: ca:6c:45:57:3d:c1:78:fc:49:50:29:14:f2:be:c9:30:70:68: a8:b1:a2:ff:24:ef:63:ee:af:99:d4:5e:fa:7f:b9:cb:75:60: 77:b0:e2:05:9d:c0:26:a2:de:03:fc:1d:ec:4d:2d:c6:08:09: 9d:0e:43:e5:18:47:58:73:b7:42:ff:85:7e:cc:b1:ed:31:ed: f6:6f:e0:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTcyNTExMC8GA1UEBRMoNjkxRURDNTY3NzI3MjIzM0EzOEYzMzUxOTFBQUU4QTVB RTJBRjdCOTAeFw0yNTA0MTMwNjUxMjRaFw0yNTA0MjAwNjUxMjRaMBgxFjAUBgNV BAMTDTY3ZmI1ZWVkLTUyZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvScwSb9hwmWBpP/HVLetbq7AzSgD885quKNFQoohczw0GqvmsMzjUaPjApdtQ modM23bChYqdZPmOmq3RNF1VaKQgg7G0OggI+bqZG0DTvPnmEsi5v0szIJuWkhCQ GEqagpyUVGm37D3O/0/8VZfHUvfmhM+orPv3h/d4+2/FPlQVL+Ka1kX1eFpyHnm6 uojStgSPD6kQx7Qk53Ccvmd5f1Ohnq5yEbCkBTZpN11Svk794/sH85MhJtJTxnkh hg5dT9hDS1uTiI/+QqriQb9w81Ut5WVjCAu/MP/jCZBV0cWs2isaFxK1wwR5xWNM nWuJejIagt83AVUiRTHwm6BLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoVbugyYr 4QBvdI0xIpDd/HvbgbwwHwYDVR0jBBgwFoAUaR7cVncnIjOjjzNRkaropa4q97kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NzI1LzVBNjZDRjY4MDgz QTExRjA5RkYxRDA3NEM0RjlBRTAyL2FSN2NWbmNuSWpPamp6TlJrYXJvcGE0cTk3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVI3Y1ZuY25Jak9qanpOUmthcm9wYTRxOTdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NzI1LzVBNjZDRjY4MDgzQTExRjA5RkYxRDA3NEM0RjlBRTAyL2FSN2NWbmNuSWpP amp6TlJrYXJvcGE0cTk3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpsfT7+2ciVaD+lm+Ug76p8tzAcZOWydph2tMxyH1Q0TXDwMn6+ObOM MvIbzKyw7mH3NlEu7WVX4lhIKhOjU/uAd7OXwptNGr6oHL2lGG6LXM1O64o1Njfc 2TKBP5ttJ1pOfQKE5I9ugbdv+xRgI4jmSs3CdL/yXthA7mRzPTidM/BH3qfHv9C5 IXcDf/sSyRrDBlWgInU1OTzG0mFG81TxfYKfl78T/cPsFrk4dB/L6Dev28psRVc9 wXj8SVApFPK+yTBwaKixov8k72Pur5nUXvp/uct1YHew4gWdwCai3gP8HexNLcYI CZ0OQ+UYR1hzt0L/hX7Mse0x7fZv4P4= -----END CERTIFICATE-----Generated at Mon Apr 14 05:24:03 2025 by rpki-client