$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: U4D2L0vRUoNIqISNaMuSR23K0yC1AEYbJLqxzDoY1Xs= Subject key identifier: EE:E6:08:62:5E:66:AB:23:6C:52:A9:74:A4:0F:0F:31:9F:7D:C0:B0 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 092C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0909 Signing time: Sun 06 Apr 2025 20:11:35 +0000 Manifest this update: Sun 06 Apr 2025 20:11:35 +0000 Manifest next update: Sun 13 Apr 2025 20:11:35 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: O475f5JzXna2l0o5tA5u8h5/Wi6FftpHgX6AVHXwA3I=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: D1MytX8PFSoPgxFDgyjmvW8kj3dmc3d5kXRVH2UDjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 20:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739 Validity Not Before: Apr 6 20:11:35 2025 GMT Not After : Apr 13 20:11:35 2025 GMT Subject: CN=67f2dff7-7a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6a:1f:df:70:e6:22:0f:03:50:60:11:64:59: b7:05:0b:b4:ad:e5:cb:07:26:74:63:8b:10:cc:dd: e3:4b:02:3f:12:6b:cd:3c:8a:4e:5c:b3:eb:7f:09: 7b:81:43:f7:e6:f8:b2:5e:12:f0:bd:b6:b9:b9:eb: 47:ff:d0:ef:af:e4:08:88:f1:77:f3:25:e0:5f:06: c7:e7:fa:5f:7d:7e:ac:15:bf:56:9a:df:0d:7d:c0: ed:29:4c:a0:85:56:e0:fb:e1:97:25:59:09:9c:90: 32:f6:84:99:a2:a2:4f:22:62:be:15:0f:ee:db:a6: 16:13:81:29:04:ac:10:96:22:7b:8f:57:89:84:f5: 4b:42:e9:82:34:36:2a:38:2e:4e:4e:6a:1d:81:27: 06:93:c9:9f:d3:b8:d8:72:93:ad:f3:44:5c:33:3a: 1f:8d:f7:e7:24:89:c2:4c:55:f5:d8:7e:0d:a0:fe: 87:b9:da:f5:68:41:ef:e3:fe:33:64:59:18:bd:58: 02:ac:68:8c:e8:97:a6:85:48:8e:7a:08:f0:b8:0e: 9e:90:9e:e9:7a:ec:3d:e2:58:8f:c1:33:82:4b:d6: 31:e7:60:98:40:9b:3c:42:43:06:62:a9:2a:71:40: 20:d1:db:64:b6:1d:3c:b7:94:5c:37:19:2c:90:46: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:08:62:5E:66:AB:23:6C:52:A9:74:A4:0F:0F:31:9F:7D:C0:B0 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:80:2b:81:53:34:a4:a0:45:4f:e3:66:df:6d:df:c1:03:0f: 1f:22:e0:70:4c:25:3a:52:f1:f8:7d:f4:f5:6b:c3:dc:ff:d8: 9c:fa:2d:93:96:63:63:4d:8e:57:4e:fd:40:2a:81:56:b6:35: 9a:82:5e:14:25:3f:f7:65:5d:15:c4:ab:98:00:8f:9a:c9:c2: d5:7a:1a:d2:11:3f:62:e2:d9:43:64:b1:7a:ac:91:91:39:64: 74:20:dd:b2:af:00:7e:ef:fb:24:96:b2:8c:76:0b:85:5e:91: cd:97:93:5f:36:53:bd:54:a4:15:ff:5c:cb:77:6b:d8:10:cd: fb:3b:89:1f:b3:c4:31:e6:fc:17:81:ee:04:b1:60:2e:ea:47: bb:ba:33:24:f3:39:02:46:72:e2:93:37:8c:6d:37:21:0e:d1: 24:44:09:4f:5c:d3:7c:0e:56:86:f5:a0:3c:8b:b8:23:4e:48: cc:62:cb:d0:49:f4:dd:6d:74:7e:0d:0d:a2:c9:84:5e:e4:c0: 1c:60:c9:27:4c:44:ed:a2:12:40:2e:18:ad:b4:1c:e1:f0:7c: 06:f9:80:0d:ac:9a:da:79:f8:54:5c:dc:e2:c7:63:3b:1c:0f: c6:4e:11:65:40:d8:ed:d2:81:c1:6a:87:a3:f7:63:da:ce:40: 11:90:8a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUwNDA2MjAxMTM1WhcNMjUwNDEzMjAxMTM1WjAYMRYwFAYD VQQDEw02N2YyZGZmNy03YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Wof33DmIg8DUGARZFm3BQu0reXLByZ0Y4sQzN3jSwI/EmvNPIpOXLPrfwl7 gUP35viyXhLwvba5uetH/9Dvr+QIiPF38yXgXwbH5/pffX6sFb9Wmt8NfcDtKUyg hVbg++GXJVkJnJAy9oSZoqJPImK+FQ/u26YWE4EpBKwQliJ7j1eJhPVLQumCNDYq OC5OTmodgScGk8mf07jYcpOt80RcMzofjffnJInCTFX12H4NoP6Hudr1aEHv4/4z ZFkYvVgCrGiM6JemhUiOegjwuA6ekJ7peuw94liPwTOCS9Yx52CYQJs8QkMGYqkq cUAg0dtkth08t5RcNxkskEbi+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7mCGJe ZqsjbFKpdKQPDzGffcCwMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZgCuBUzSkoEVP42bfbd/BAw8fIuBwTCU6UvH4ffT1a8Pc/9ic+i2T lmNjTY5XTv1AKoFWtjWagl4UJT/3ZV0VxKuYAI+aycLVehrSET9i4tlDZLF6rJGR OWR0IN2yrwB+7/sklrKMdguFXpHNl5NfNlO9VKQV/1zLd2vYEM37O4kfs8Qx5vwX ge4EsWAu6ke7ujMk8zkCRnLikzeMbTchDtEkRAlPXNN8DlaG9aA8i7gjTkjMYsvQ SfTdbXR+DQ2iyYRe5MAcYMknTETtohJALhittBzh8HwG+YANrJraefhUXNzix2M7 HA/GThFlQNjt0oHBaoej92PazkARkIri -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:40 2025 by rpki-client