$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: soq/G1rlX2uM98O/FFKEiMpgflKlZfnAe8es2w05dvI= Subject key identifier: 8B:08:85:12:67:BC:10:E3:3B:40:C3:7B:C9:5A:26:7F:74:11:5D:4B Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 34B1 Signing time: Thu 10 Apr 2025 14:41:57 +0000 Manifest this update: Thu 10 Apr 2025 14:41:57 +0000 Manifest next update: Thu 17 Apr 2025 14:41:57 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: by1Bw2gkaYxTztnw5AYJOgmM640boYuun1ijXUxHiGM=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50 Validity Not Before: Apr 10 14:41:57 2025 GMT Not After : Apr 17 14:41:57 2025 GMT Subject: CN=67f7d8b5-bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:00:cd:0b:a2:d1:fc:9f:52:6c:f3:23:dd: e4:97:a5:8c:61:87:4f:68:fa:8f:d5:6d:dd:a9:77: 97:2e:0c:11:83:53:cf:e5:50:de:df:05:2a:fd:6d: 21:65:ad:40:e3:0a:bc:f5:fb:dc:3b:63:e2:f4:50: b5:11:26:05:03:1f:6c:3c:b4:67:dc:89:41:01:e3: 1f:c2:8b:6d:3f:53:7f:7d:a4:24:80:25:d4:73:16: aa:28:69:fc:25:15:6d:b4:09:29:0b:f5:a5:2d:20: a6:97:9c:5a:0e:30:ef:ea:1b:57:28:11:7c:2f:12: 6e:e0:85:5c:f5:c8:7c:bd:57:5f:3c:39:57:4f:d1: 7a:c6:d2:fb:ec:37:d5:99:67:02:7b:d4:55:5a:32: 6b:97:76:3d:ec:16:66:52:db:93:32:33:85:c7:53: 0e:8f:4a:96:c6:d9:02:8a:c5:8c:88:b8:96:f1:1b: 0b:24:dc:85:0a:49:98:2e:d5:35:a3:15:4c:ad:0b: 7d:57:85:e7:56:66:2e:91:b7:7b:ae:09:18:19:df: 55:81:f9:17:06:c0:5c:38:a3:50:da:2f:30:fc:83: 68:41:f6:16:54:f0:b5:23:75:83:87:5e:ee:cc:5e: 90:82:1a:94:c7:8e:42:30:2c:30:53:f6:d7:c2:be: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:08:85:12:67:BC:10:E3:3B:40:C3:7B:C9:5A:26:7F:74:11:5D:4B X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:17:52:78:b2:35:7e:f0:30:65:39:05:44:a8:14:02:2a: 47:0e:ff:19:5d:2d:47:df:98:21:33:ad:56:d1:cf:e0:3e:bb: fd:56:d8:59:3c:88:5b:f4:d2:a7:64:67:5d:1a:8b:81:c9:8d: 7a:0f:6a:ad:59:fc:66:72:69:a7:32:c2:6f:51:50:00:31:56: 03:a6:93:32:e4:36:7d:c2:4f:94:0b:05:7c:d8:ff:02:17:5d: 07:1d:ec:02:09:a6:40:12:0d:af:77:77:ae:55:82:1f:aa:ca: 19:e2:6e:51:e1:8a:ef:75:d3:11:9e:26:af:a2:27:0c:ff:d6: a2:62:83:1b:23:76:b3:b4:f4:87:39:44:de:4a:9e:4e:a2:23: 84:48:15:14:06:00:c8:b1:35:f5:f8:a0:60:0e:ec:b0:21:1d: 8e:2b:a4:a0:18:87:be:71:25:e5:28:cd:13:0d:8c:0f:31:77: fb:e2:71:a9:1e:3a:ea:38:43:29:fc:02:00:b3:26:2a:63:82: ae:b5:89:f1:3e:6a:ed:c5:cb:1f:b9:f1:ad:ef:aa:f8:32:9f: 6f:b0:45:6b:0e:39:e1:b7:f2:7c:85:d1:f1:3e:a1:bc:c3:fe: 73:50:c6:76:d9:61:19:9e:5e:97:a3:e5:2d:e0:7e:c9:52:c6: b2:5d:99:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUwNDEwMTQ0MTU3WhcNMjUwNDE3MTQ0MTU3WjAYMRYwFAYD VQQDEw02N2Y3ZDhiNS1iYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR8AzQui0fyfUmzzI93kl6WMYYdPaPqP1W3dqXeXLgwRg1PP5VDe3wUq/W0h Za1A4wq89fvcO2Pi9FC1ESYFAx9sPLRn3IlBAeMfwottP1N/faQkgCXUcxaqKGn8 JRVttAkpC/WlLSCml5xaDjDv6htXKBF8LxJu4IVc9ch8vVdfPDlXT9F6xtL77DfV mWcCe9RVWjJrl3Y97BZmUtuTMjOFx1MOj0qWxtkCisWMiLiW8RsLJNyFCkmYLtU1 oxVMrQt9V4XnVmYukbd7rgkYGd9VgfkXBsBcOKNQ2i8w/INoQfYWVPC1I3WDh17u zF6QghqUx45CMCwwU/bXwr56uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsIhRJn vBDjO0DDe8laJn90EV1LMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxwRdSeLI1fvAwZTkFRKgUAipHDv8ZXS1H35ghM61W0c/gPrv9VthZ PIhb9NKnZGddGouByY16D2qtWfxmcmmnMsJvUVAAMVYDppMy5DZ9wk+UCwV82P8C F10HHewCCaZAEg2vd3euVYIfqsoZ4m5R4YrvddMRniavoicM/9aiYoMbI3aztPSH OUTeSp5OoiOESBUUBgDIsTX1+KBgDuywIR2OK6SgGIe+cSXlKM0TDYwPMXf74nGp HjrqOEMp/AIAsyYqY4KutYnxPmrtxcsfufGt76r4Mp9vsEVrDjnht/J8hdHxPqG8 w/5zUMZ22WEZnl6Xo+Ut4H7JUsayXZmr -----END CERTIFICATE-----Generated at Sat Apr 12 01:28:45 2025 by rpki-client