$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: h76UYAHrNQiCRWj5BQsCQ7jry9dQ5RfHS7rsbTDIkRg= Subject key identifier: B7:87:54:C5:41:8C:E8:3B:6B:3C:05:24:00:44:BD:E4:69:70:9C:B6 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 0473 Signing time: Thu 03 Apr 2025 00:07:28 +0000 Manifest this update: Thu 03 Apr 2025 00:07:27 +0000 Manifest next update: Thu 10 Apr 2025 00:07:27 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 5f0VdO4aXefT2oV2Fx1AXZObUb9z+RL1ZtRpa7Aga5c=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D Validity Not Before: Apr 3 00:07:27 2025 GMT Not After : Apr 10 00:07:27 2025 GMT Subject: CN=67edd13f-1291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:46:0c:11:35:de:06:8e:bc:06:62:e8:4e: 88:3c:93:67:1f:b0:06:e9:e7:04:e3:e3:c2:ad:11: ac:cc:35:08:27:dc:f7:3e:32:41:11:5f:50:df:8e: 2b:e8:5f:e8:ec:39:90:d8:90:39:5f:05:1a:49:47: aa:36:5b:de:19:21:44:0b:e4:c7:86:d6:19:23:ce: e9:9a:a6:ff:0d:fa:04:b4:50:1d:e3:d1:0f:cc:40: 4d:9b:02:a5:24:14:b2:7e:ac:0b:ac:9f:4e:61:db: b0:aa:02:87:60:16:f3:f0:6b:e6:6c:ae:e5:e1:95: 6b:4c:41:f1:23:db:fc:78:68:02:33:8c:6c:79:17: 4e:7b:9f:03:4e:dd:a2:61:66:d7:a5:f9:17:3f:08: ee:a3:72:1d:44:b6:af:56:19:05:7b:ce:5f:de:51: 69:5b:c4:8e:1e:cf:d7:8c:d9:ca:47:65:ce:bb:fb: a4:d3:bc:bc:17:66:0f:e7:5f:bc:dd:c8:8e:61:3b: 5c:23:a9:f6:8a:c7:0d:1e:a1:8c:c6:1c:ce:52:7e: b4:8f:91:59:86:9c:29:ea:ae:08:22:47:e0:f5:19: 9d:b3:b2:dd:7b:60:bf:b3:aa:c8:dd:ec:7a:a7:4d: 8f:b3:4e:d0:03:c1:b9:bc:46:8a:98:e2:e6:3c:21: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:87:54:C5:41:8C:E8:3B:6B:3C:05:24:00:44:BD:E4:69:70:9C:B6 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:da:dc:1a:da:60:1c:87:f5:f1:58:86:f7:06:c5:ae:16:72: ac:42:29:42:3e:e9:ca:f5:28:5e:fd:56:5e:c9:4b:a4:20:b9: 57:34:6d:f6:77:c1:ec:d9:6f:c8:f7:b7:bb:8a:24:97:98:cb: 06:a0:a1:72:2a:49:e2:e8:bf:a5:2d:07:be:7d:26:ec:19:ff: 15:67:f9:ed:85:b9:67:fe:27:2d:78:72:b3:fc:5f:9d:33:fd: 0e:0d:64:d1:7f:9a:f0:0b:39:84:0b:96:7c:32:43:33:10:f2: a8:c6:14:f6:d9:9d:20:cb:0b:cd:e7:b9:ed:d8:87:c3:f8:3b: f9:ac:6c:cd:ba:87:bf:14:2d:f0:f8:6d:f4:b4:9b:93:76:39: 89:db:dd:ff:12:1d:83:1b:af:04:33:09:3c:55:2f:81:ee:fc: 73:08:ed:5f:2c:59:96:bf:ed:40:94:c8:71:b8:49:c8:78:64: fd:0d:1c:43:68:5d:95:45:fd:32:ea:cd:59:89:c9:08:b0:80: 8d:4d:f4:f9:36:bb:24:e0:8e:74:f8:2f:90:ed:86:9e:5c:ac: 1c:41:30:1f:3e:77:87:2e:7c:b3:aa:48:8b:67:42:af:3e:46: e0:30:89:8f:4e:51:28:a0:87:99:c6:35:33:5c:26:91:d1:ff: c5:22:64:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNDAzMDAwNzI3WhcNMjUwNDEwMDAwNzI3WjAYMRYwFAYD VQQDEw02N2VkZDEzZi0xMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSJGDBE13gaOvAZi6E6IPJNnH7AG6ecE4+PCrRGszDUIJ9z3PjJBEV9Q344r 6F/o7DmQ2JA5XwUaSUeqNlveGSFEC+THhtYZI87pmqb/DfoEtFAd49EPzEBNmwKl JBSyfqwLrJ9OYduwqgKHYBbz8GvmbK7l4ZVrTEHxI9v8eGgCM4xseRdOe58DTt2i YWbXpfkXPwjuo3IdRLavVhkFe85f3lFpW8SOHs/XjNnKR2XOu/uk07y8F2YP51+8 3ciOYTtcI6n2iscNHqGMxhzOUn60j5FZhpwp6q4IIkfg9Rmds7Lde2C/s6rI3ex6 p02Ps07QA8G5vEaKmOLmPCEG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeHVMVB jOg7azwFJABEveRpcJy2MB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb2twa2mAch/XxWIb3BsWuFnKsQilCPunK9She/VZeyUukILlXNG32 d8Hs2W/I97e7iiSXmMsGoKFyKkni6L+lLQe+fSbsGf8VZ/nthbln/icteHKz/F+d M/0ODWTRf5rwCzmEC5Z8MkMzEPKoxhT22Z0gywvN57nt2IfD+Dv5rGzNuoe/FC3w +G30tJuTdjmJ293/Eh2DG68EMwk8VS+B7vxzCO1fLFmWv+1AlMhxuEnIeGT9DRxD aF2VRf0y6s1ZickIsICNTfT5Nrsk4I50+C+Q7YaeXKwcQTAfPneHLnyzqkiLZ0Kv PkbgMImPTlEooIeZxjUzXCaR0f/FImRB -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:45 2025 by rpki-client