$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: T6+yKc0+Wx4e9k1UCsE43MVCTTI4gpvQd5ASpyrW+0s= Subject key identifier: AF:6E:52:D3:7F:6A:F3:FA:CD:8A:3D:56:D2:38:97:5C:74:6E:7C:86 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 17BF Signing time: Fri 04 Apr 2025 16:39:01 +0000 Manifest this update: Fri 04 Apr 2025 16:39:01 +0000 Manifest next update: Fri 11 Apr 2025 16:39:01 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: EKH6WpUUHqfW33THDexwJrxg2xFPc7eh8vVxHhTLJ8g=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6086 (0x17c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7 Validity Not Before: Apr 4 16:39:01 2025 GMT Not After : Apr 11 16:39:01 2025 GMT Subject: CN=67f00b25-fcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:13:42:58:f1:17:c3:35:7a:a2:bd:41:c4: a9:a0:cd:48:93:21:39:fa:81:05:ab:5c:b2:5a:df: 4b:af:75:71:b5:ae:a2:6a:be:b0:99:fb:9a:51:b3: a0:2a:6c:26:8f:6f:c5:62:0d:66:ee:44:5c:6e:bd: 5e:0c:66:04:b0:ca:2b:ea:88:a4:b2:00:f1:f3:bd: b3:0c:77:75:cf:a1:3c:93:fc:64:fd:11:38:44:cd: bd:6b:46:d5:f3:41:69:25:d7:68:a3:99:a8:bd:80: 61:06:ae:4f:2e:4e:ae:3e:11:99:d9:21:46:33:4c: 3b:b5:e6:91:63:d9:4e:5d:c8:e1:41:c8:72:57:cf: a0:fe:e6:87:29:a0:06:39:2d:92:06:4b:a5:df:57: 45:68:7f:37:de:04:47:6e:e7:4a:81:1e:80:2c:64: ea:08:f8:04:da:97:b3:22:38:0b:e2:92:d4:86:56: 58:2d:4c:7e:51:5b:1d:60:21:f8:e5:4c:6c:d9:eb: e5:7c:dd:50:88:8e:67:df:54:df:97:32:ee:d5:6d: 22:0a:d1:77:9f:07:24:9a:a8:3f:a5:10:21:a2:0c: e7:1d:1e:8a:0a:82:f4:68:6a:e5:55:e5:7c:bc:ec: 8a:8f:a2:4a:0e:22:33:1e:20:91:89:b3:e7:7d:70: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6E:52:D3:7F:6A:F3:FA:CD:8A:3D:56:D2:38:97:5C:74:6E:7C:86 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ca:51:d2:f3:30:02:69:2d:2d:3b:34:d0:c5:67:d4:62:49: 2b:e5:dd:f2:e8:d0:e7:23:e3:6b:d3:e5:8c:ca:34:39:93:3b: 7a:ef:15:bd:b8:6d:00:0a:35:2c:c9:72:d7:77:38:8c:e0:61: 1d:49:0d:8e:06:44:7e:7c:22:20:0f:33:17:42:ef:e2:fe:fd: 97:c9:54:fc:6f:8b:b5:f4:86:85:26:2b:6a:99:21:e0:dc:21: c3:21:18:63:77:a4:fc:cb:ab:43:86:8a:3b:cd:24:44:01:8a: cd:28:f8:39:c0:7c:0e:0c:7f:41:37:c5:de:c2:8c:b8:88:76: d1:50:5f:e4:c8:88:2c:05:c6:d5:0b:6b:fc:27:d7:22:ca:e0: be:12:1d:3f:02:8a:d6:7d:11:73:ef:ef:1f:c8:c1:83:71:85: e6:07:3e:1c:37:f4:9f:16:f7:ef:a8:58:c1:1f:ee:b9:dd:ac: cc:0e:78:fc:63:8d:df:7a:1e:77:c2:50:96:b0:bc:1b:a7:c1: 30:ca:56:34:dc:c2:c3:f6:f4:8d:7d:19:ea:c5:6a:49:85:ac: 35:d8:1b:29:23:7d:5b:54:80:56:6f:1a:86:c0:ad:60:25:b8: ae:39:77:83:fc:49:80:37:4a:ca:da:9e:d7:ad:bf:44:e5:22: 5e:2f:76:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNDA0MTYzOTAxWhcNMjUwNDExMTYzOTAxWjAYMRYwFAYD VQQDEw02N2YwMGIyNS1mY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZUTQljxF8M1eqK9QcSpoM1IkyE5+oEFq1yyWt9Lr3Vxta6iar6wmfuaUbOg Kmwmj2/FYg1m7kRcbr1eDGYEsMor6oiksgDx872zDHd1z6E8k/xk/RE4RM29a0bV 80FpJddoo5movYBhBq5PLk6uPhGZ2SFGM0w7teaRY9lOXcjhQchyV8+g/uaHKaAG OS2SBkul31dFaH833gRHbudKgR6ALGTqCPgE2pezIjgL4pLUhlZYLUx+UVsdYCH4 5Uxs2evlfN1QiI5n31TflzLu1W0iCtF3nwckmqg/pRAhogznHR6KCoL0aGrlVeV8 vOyKj6JKDiIzHiCRibPnfXBpPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9uUtN/ avP6zYo9VtI4l1x0bnyGMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8ylHS8zACaS0tOzTQxWfUYkkr5d3y6NDnI+Nr0+WMyjQ5kzt67xW9 uG0ACjUsyXLXdziM4GEdSQ2OBkR+fCIgDzMXQu/i/v2XyVT8b4u19IaFJitqmSHg 3CHDIRhjd6T8y6tDhoo7zSREAYrNKPg5wHwODH9BN8Xewoy4iHbRUF/kyIgsBcbV C2v8J9ciyuC+Eh0/AorWfRFz7+8fyMGDcYXmBz4cN/SfFvfvqFjBH+653azMDnj8 Y43feh53wlCWsLwbp8EwylY03MLD9vSNfRnqxWpJhaw12BspI31bVIBWbxqGwK1g JbiuOXeD/EmAN0rK2p7Xrb9E5SJeL3bg -----END CERTIFICATE-----Generated at Sun Apr 6 12:54:51 2025 by rpki-client