$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft File: cnOFPaBj78uOxUSwMg1acHuUwIk.mft (raw, json) Hash identifier: SOgxDOqTd9jyYOKiwKqeums7rn282rTg89y0D+wDQiM= Subject key identifier: BD:F9:03:8F:60:9C:A4:40:3E:F5:12:D3:DF:B0:72:5D:03:AE:E6:6F Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 06F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft Manifest number: 2CC7 Signing time: Fri 04 Apr 2025 15:45:43 +0000 Manifest this update: Fri 04 Apr 2025 15:45:42 +0000 Manifest next update: Fri 11 Apr 2025 15:45:42 +0000 Files and hashes: 1: cnOFPaBj78uOxUSwMg1acHuUwIk.crl (hash: r6RVvl5KDz3owIomdx3wI72zOqtJinDoV7kKcOMCgnU=) 2: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (hash: Mse2fnTgzH7IcGff7hL/OaUafi6TDhnPkojb8Rkr2XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824 Validity Not Before: Apr 4 15:45:42 2025 GMT Not After : Apr 11 15:45:42 2025 GMT Subject: CN=67effea6-50d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:c4:b4:04:f5:40:e1:86:d8:16:f5:56:ff: 51:8c:88:3e:91:23:7c:6d:6f:42:01:b7:43:5f:ab: 50:93:43:d4:1b:4a:86:a6:99:4d:40:7c:bf:59:bd: 1e:00:16:ba:8a:d3:91:ff:f1:23:c6:e7:5f:2c:a0: c9:53:86:c0:d4:62:48:39:88:0a:e7:84:65:85:01: cc:89:8a:d6:6d:9d:1d:08:21:be:27:3b:cc:83:a9: ab:b8:69:ae:b5:c5:46:54:4a:bf:c0:a2:0f:44:d1: 41:7b:3f:e1:fa:45:fc:98:94:7a:c2:31:3a:80:a6: ab:6c:3b:27:e0:fb:7a:d5:53:62:38:c2:4c:83:bc: b9:7b:ae:41:a5:48:07:81:86:c7:46:43:5f:34:f5: 95:7e:99:7b:4f:b4:79:b3:69:db:ea:0a:76:16:8d: 7f:d6:92:8d:9f:38:92:eb:40:26:f1:a3:a4:b6:1d: b6:ec:eb:a9:8f:9f:52:8b:72:0a:0e:99:0d:f4:4e: 53:ca:c4:9e:41:2d:79:4d:b1:31:ab:97:b2:a3:2a: 2d:9e:bb:ea:60:80:7e:e7:5a:ee:d7:9c:1d:f2:82: 30:ff:7e:e7:a0:44:90:86:64:16:b3:b3:f2:aa:79: dc:a3:82:b7:ec:f0:75:c5:60:ea:60:ca:7c:4e:fe: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:03:8F:60:9C:A4:40:3E:F5:12:D3:DF:B0:72:5D:03:AE:E6:6F X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:81:ab:95:3c:bb:d2:c5:c7:ca:00:5f:5d:fb:67:25:13: a6:cb:2f:9e:2e:25:6c:67:b6:84:20:fd:ba:fa:f8:bd:f2:e4: ce:3d:92:2a:57:03:7e:8e:73:ae:7e:3c:7c:7a:50:29:ac:38: 96:74:c0:7c:dd:37:9c:e1:7f:45:d9:b0:2b:0b:bf:70:e8:58: 8e:71:ca:6f:63:e3:22:86:cd:3e:d3:d6:08:03:d1:fb:a1:0e: 1e:fe:ad:80:85:23:3f:ad:c9:f2:4b:c0:82:ba:16:78:86:4a: fb:02:65:69:0f:79:33:6a:2b:00:34:77:f2:28:7f:ee:7b:2d: 50:e4:60:75:8c:d1:11:c7:65:a3:b1:9e:78:b6:df:8f:f8:e8: 05:05:a0:d2:b8:a2:63:12:c2:7c:c6:7d:26:8a:3a:23:c0:88: 66:52:a6:0b:c7:f5:c9:26:bb:62:33:eb:ec:73:36:7b:70:8b: 5c:09:e4:19:57:82:aa:0c:8b:50:aa:c8:3a:7d:01:86:ad:c8: 4b:53:91:a1:14:35:b1:5b:5e:c2:18:70:42:cf:0c:07:51:0d: b1:6f:1c:e8:9a:79:11:19:81:5d:61:cc:7b:84:8d:45:9d:3a: 7d:84:21:8a:44:c7:ab:7d:08:15:95:2a:1e:82:fb:72:52:23: 7e:af:1f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjUwNDA0MTU0NTQyWhcNMjUwNDExMTU0NTQyWjAYMRYwFAYD VQQDEw02N2VmZmVhNi01MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VzEtAT1QOGG2Bb1Vv9RjIg+kSN8bW9CAbdDX6tQk0PUG0qGpplNQHy/Wb0e ABa6itOR//EjxudfLKDJU4bA1GJIOYgK54RlhQHMiYrWbZ0dCCG+JzvMg6mruGmu tcVGVEq/wKIPRNFBez/h+kX8mJR6wjE6gKarbDsn4Pt61VNiOMJMg7y5e65BpUgH gYbHRkNfNPWVfpl7T7R5s2nb6gp2Fo1/1pKNnziS60Am8aOkth227Oupj59Si3IK DpkN9E5TysSeQS15TbExq5eyoyotnrvqYIB+51ru15wd8oIw/37noESQhmQWs7Py qnnco4K37PB1xWDqYMp8Tv7a7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL35A49g nKRAPvUS09+wcl0DruZvMB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4 dU94VVN3TWcxYWNIdVV3SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWj4GrlTy70sXHygBfXftnJROmyy+eLiVsZ7aEIP26+vi98uTOPZIq VwN+jnOufjx8elAprDiWdMB83Tec4X9F2bArC79w6FiOccpvY+Mihs0+09YIA9H7 oQ4e/q2AhSM/rcnyS8CCuhZ4hkr7AmVpD3kzaisANHfyKH/uey1Q5GB1jNERx2Wj sZ54tt+P+OgFBaDSuKJjEsJ8xn0mijojwIhmUqYLx/XJJrtiM+vsczZ7cItcCeQZ V4KqDItQqsg6fQGGrchLU5GhFDWxW17CGHBCzwwHUQ2xbxzomnkRGYFdYcx7hI1F nTp9hCGKRMerfQgVlSoegvtyUiN+rx+I -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:41 2025 by rpki-client