$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json) Hash identifier: 1gntoDZ2GmuKuEaZ6qmilSGbkJ63KfEhrYzLv598S/Y= Subject key identifier: D1:97:19:75:32:EC:5B:BF:DD:10:C1:4F:98:0D:D6:D5:E4:0D:0B:22 Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft Manifest number: 0194 Signing time: Thu 17 Apr 2025 02:30:34 +0000 Manifest this update: Thu 17 Apr 2025 02:30:34 +0000 Manifest next update: Thu 24 Apr 2025 02:30:34 +0000 Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: JOz3xKSXlQ3if3+Gi9ZT8OIOUHeAfR55pSQ1Lwj5HTo=) 2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Validity Not Before: Apr 17 02:30:34 2025 GMT Not After : Apr 24 02:30:34 2025 GMT Subject: CN=680067ca-4f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:09:fd:f8:f5:39:a3:56:a7:3c:ba:15:50: 2a:29:16:ad:98:d8:97:6b:99:06:ee:94:4f:df:f9: 00:bd:fa:29:df:2e:f2:9e:07:fb:75:34:5e:43:cd: a7:c7:8c:41:04:ab:61:67:cb:66:53:e8:11:78:f9: 6b:6e:ab:0c:ef:90:77:57:29:56:f6:32:a0:e2:c5: 5b:10:6e:ee:c1:e9:54:ed:7a:80:c2:c3:21:da:35: 1b:cb:71:c9:e3:2f:07:ce:07:a2:6d:11:4f:a3:29: 4f:d4:56:f4:3d:85:22:b1:db:92:3c:a0:8f:e7:de: a8:f0:6e:b7:40:1d:94:c4:93:4f:3b:44:ba:54:04: 64:8c:f7:f4:2c:07:33:56:aa:bf:c9:5b:37:e0:03: 32:21:df:d8:2a:b6:53:72:c6:90:14:76:ba:7c:8f: f4:a0:38:54:81:a5:6f:88:c0:30:51:8e:27:5c:6b: 92:ab:15:3f:52:a9:95:4a:67:5c:04:e1:3d:c3:70: 23:10:45:05:fb:d0:14:93:bb:d0:6e:bb:49:ff:76: a7:7c:ce:36:02:72:6e:40:e9:38:3a:75:83:1d:57: 83:51:f0:38:fb:a1:a0:67:6f:c7:54:4f:63:40:40: 99:61:fe:81:d0:27:52:d5:13:33:77:e7:34:fe:ce: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:19:75:32:EC:5B:BF:DD:10:C1:4F:98:0D:D6:D5:E4:0D:0B:22 X509v3 Authority Key Identifier: keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:d3:97:4f:a2:ec:fb:a7:fe:bd:ad:1f:e6:33:ff:5c:ae:48: c3:4a:da:f7:8a:e8:d3:2c:f3:46:e3:20:58:8c:6e:d2:9b:95: 81:52:88:8b:81:b0:ce:fb:37:78:ba:61:e3:3f:e2:e7:d4:18: 07:3c:7f:c5:87:a2:ca:ba:ac:25:ba:f1:72:c8:31:3e:0c:88: 0c:d7:63:29:5e:fb:7c:2e:49:3c:dd:d0:fa:82:30:b6:1b:c4: 16:d9:6e:9c:bb:3e:11:db:bc:54:d4:8f:fc:84:70:e7:dd:a6: ca:22:fc:40:71:4f:8c:40:5d:0b:e0:e3:19:71:b7:c1:b0:88: 10:d1:5b:df:e0:41:97:27:4e:cb:ea:b7:22:d2:76:65:5f:fe: 36:ba:77:30:fe:70:d5:77:40:1d:8a:72:a8:6c:ee:fa:62:b3: 8b:39:b2:5d:48:bd:92:e2:09:2c:5d:3a:5b:37:9e:0d:96:6b: 6a:93:bc:ef:39:14:bb:65:7d:bd:fe:e1:1f:70:ee:06:2e:1d: ee:fa:88:55:de:df:ee:b0:18:82:1e:f2:34:5f:4c:a6:88:6c: 21:2f:ca:df:11:c7:93:98:55:ad:84:6d:87:88:be:96:38:a4: 03:56:6e:8d:e5:59:64:2c:05:a3:d5:cd:23:82:a9:99:75:c3: f4:1d:07:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5 ODEyRTZGNjUwHhcNMjUwNDE3MDIzMDM0WhcNMjUwNDI0MDIzMDM0WjAYMRYwFAYD VQQDEw02ODAwNjdjYS00ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15kJ/fj1OaNWpzy6FVAqKRatmNiXa5kG7pRP3/kAvfop3y7yngf7dTReQ82n x4xBBKthZ8tmU+gRePlrbqsM75B3VylW9jKg4sVbEG7uwelU7XqAwsMh2jUby3HJ 4y8HzgeibRFPoylP1Fb0PYUisduSPKCP596o8G63QB2UxJNPO0S6VARkjPf0LAcz Vqq/yVs34AMyId/YKrZTcsaQFHa6fI/0oDhUgaVviMAwUY4nXGuSqxU/UqmVSmdc BOE9w3AjEEUF+9AUk7vQbrtJ/3anfM42AnJuQOk4OnWDHVeDUfA4+6GgZ2/HVE9j QECZYf6B0CdS1RMzd+c0/s6/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGXGXUy 7Fu/3RDBT5gN1tXkDQsiMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x S29ObWRmb1BQektZRXViMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP05dPouz7p/69rR/mM/9crkjDStr3iujTLPNG4yBYjG7Sm5WBUoiL gbDO+zd4umHjP+Ln1BgHPH/Fh6LKuqwluvFyyDE+DIgM12MpXvt8Lkk83dD6gjC2 G8QW2W6cuz4R27xU1I/8hHDn3abKIvxAcU+MQF0L4OMZcbfBsIgQ0Vvf4EGXJ07L 6rci0nZlX/42uncw/nDVd0AdinKobO76YrOLObJdSL2S4gksXTpbN54Nlmtqk7zv ORS7ZX29/uEfcO4GLh3u+ohV3t/usBiCHvI0X0ymiGwhL8rfEceTmFWthG2HiL6W OKQDVm6N5VlkLAWj1c0jgqmZdcP0HQes -----END CERTIFICATE-----Generated at Fri Apr 18 15:14:28 2025 by rpki-client