$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: iOv1rvGehO2mA4Xi1kiSkwPg6nKLk0rY3DCblyqRBro= Subject key identifier: 09:13:B5:71:B0:E1:FD:CB:55:20:15:D1:B7:59:CE:8B:0E:D6:00:5E Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: A9 Signing time: Thu 03 Apr 2025 05:25:02 +0000 Manifest this update: Thu 03 Apr 2025 05:25:01 +0000 Manifest next update: Thu 10 Apr 2025 05:25:01 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: cECNc/5tQAkmRMLFBZIik9dvdpIuBVqxq3bYWfxiMcE=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: gsiPVh91f5x0agyT4K6ET9Cizm+TUqAkZy67lxkkwXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A Validity Not Before: Apr 3 05:25:01 2025 GMT Not After : Apr 10 05:25:01 2025 GMT Subject: CN=67ee1bad-02e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:57:4f:3e:d6:e2:73:56:7e:ce:68:b2:49: 3b:b0:1d:8b:fb:4e:87:de:e7:26:5a:35:c0:77:5b: a1:af:b7:79:55:94:55:15:75:22:a7:f0:b0:e0:10: f9:67:2e:66:4b:9e:14:12:9f:63:bf:28:d5:21:8c: 4b:05:f2:41:8c:53:ea:2a:6e:4b:93:bd:32:b5:17: 62:35:72:51:96:8a:0c:de:d5:77:78:64:a4:7b:59: b2:ea:db:35:fd:e3:6c:fb:9d:80:c6:06:fe:47:8e: 2f:c5:47:6d:a4:8c:1b:c2:49:9c:c6:5e:21:e8:a6: 02:29:eb:38:da:aa:36:1f:d0:c8:a1:27:cd:92:30: 6e:92:60:9b:75:97:12:e2:9b:7a:8a:cb:4a:53:e7: 50:15:3d:0c:96:6e:fd:49:c4:1a:06:1b:4d:e0:43: 12:90:ae:91:2d:a2:1b:b1:1d:98:88:25:2f:47:fa: 34:dc:1c:53:34:27:ba:7e:64:c2:74:e9:69:47:ac: 43:0b:0e:64:91:c4:7e:fc:4f:06:55:84:37:fb:c6: 2d:4b:51:b6:da:0a:72:77:7d:13:ee:20:bf:4c:a2: 88:af:8d:94:e2:18:11:a4:12:aa:45:b6:bc:a1:4e: 59:d4:b8:93:98:49:78:2d:52:34:c1:54:71:03:9a: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:B5:71:B0:E1:FD:CB:55:20:15:D1:B7:59:CE:8B:0E:D6:00:5E X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7c:e8:84:14:bf:e6:d7:c6:4a:c2:55:99:e8:50:01:c9:1a: 96:59:50:7e:a0:0a:d6:ad:9c:09:31:d8:f6:cc:2d:1e:b4:3a: a8:fd:6a:6d:4d:7e:ac:a9:13:22:b5:89:01:d4:a2:c3:b5:68: df:2e:80:06:72:87:3c:30:4b:45:f1:ca:d8:51:97:fb:12:02: 5e:20:f7:2a:36:ec:b6:c5:5f:6b:d7:88:64:6c:a0:4b:b0:c8: c2:86:f3:59:b1:69:ed:e9:a7:5b:a3:bc:6c:e1:e6:43:2a:7c: f9:f4:34:00:38:c7:5e:2a:e8:e4:db:6a:e2:6f:2e:e1:a3:69: 7a:ad:b4:ca:52:86:b1:27:1e:44:90:9c:fa:fe:3d:24:b6:d3: b2:2c:f6:42:db:45:3c:26:ad:2c:1a:a8:96:e8:58:ea:14:4e: 45:6d:ca:fe:a8:31:a0:34:29:56:95:86:3a:38:4f:dc:ac:d6: 30:ab:c1:8c:cc:9c:36:fb:9b:81:a7:51:34:5c:75:fd:18:eb: ac:f8:00:2b:20:61:fe:d7:f2:ed:13:38:88:77:ba:5e:9b:99: 7c:84:de:d3:41:85:b9:27:cf:06:e0:ff:26:98:59:79:3e:b9: 95:e5:1b:33:1a:6c:e2:f3:18:ce:5d:28:9e:d2:18:b4:33:24: 6a:88:a3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUwNDAzMDUyNTAxWhcNMjUwNDEwMDUyNTAxWjAYMRYwFAYD VQQDEw02N2VlMWJhZC0wMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4R9XTz7W4nNWfs5oskk7sB2L+06H3ucmWjXAd1uhr7d5VZRVFXUip/Cw4BD5 Zy5mS54UEp9jvyjVIYxLBfJBjFPqKm5Lk70ytRdiNXJRlooM3tV3eGSke1my6ts1 /eNs+52Axgb+R44vxUdtpIwbwkmcxl4h6KYCKes42qo2H9DIoSfNkjBukmCbdZcS 4pt6istKU+dQFT0Mlm79ScQaBhtN4EMSkK6RLaIbsR2YiCUvR/o03BxTNCe6fmTC dOlpR6xDCw5kkcR+/E8GVYQ3+8YtS1G22gpyd30T7iC/TKKIr42U4hgRpBKqRba8 oU5Z1LiTmEl4LVI0wVRxA5q0/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkTtXGw 4f3LVSAV0bdZzosO1gBeMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7fOiEFL/m18ZKwlWZ6FAByRqWWVB+oArWrZwJMdj2zC0etDqo/Wpt TX6sqRMitYkB1KLDtWjfLoAGcoc8MEtF8crYUZf7EgJeIPcqNuy2xV9r14hkbKBL sMjChvNZsWnt6adbo7xs4eZDKnz59DQAOMdeKujk22riby7ho2l6rbTKUoaxJx5E kJz6/j0kttOyLPZC20U8Jq0sGqiW6FjqFE5Fbcr+qDGgNClWlYY6OE/crNYwq8GM zJw2+5uBp1E0XHX9GOus+AArIGH+1/LtEziId7pem5l8hN7TQYW5J88G4P8mmFl5 PrmV5RszGmzi8xjOXSie0hi0MyRqiKMY -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:29 2025 by rpki-client