$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: uQKbns2w39RhncztnOBJ/D8XTOWxuikpgwCSENVSIeo= Subject key identifier: 92:8B:23:3A:E6:09:FA:AE:2C:82:99:CF:57:51:E1:48:AF:12:01:A1 Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 0409 Signing time: Thu 17 Apr 2025 00:05:52 +0000 Manifest this update: Thu 17 Apr 2025 00:05:51 +0000 Manifest next update: Thu 24 Apr 2025 00:05:51 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: FxWfmFOvtxC9JK2Ag0g2zDKwL9JMszt6otXoQueNQ00=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Apr 17 00:05:51 2025 GMT Not After : Apr 24 00:05:51 2025 GMT Subject: CN=680045df-84da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:2b:45:21:3d:79:48:5c:fa:92:0d:1a:7c: c8:5d:a6:e7:e2:1b:e3:d5:3c:50:5b:63:8c:75:99: a1:85:7e:b3:ba:89:37:10:3d:47:46:e9:43:c5:53: ba:2f:53:0d:4b:78:88:6f:37:48:8f:53:18:be:b0: b9:42:7e:56:70:dd:44:35:fb:fd:20:c3:b6:6c:23: ff:d5:02:c6:88:8f:fc:45:06:70:fb:f2:28:14:10: 54:30:43:70:c1:d9:e2:c0:46:51:49:bd:97:11:b8: 53:b1:9a:78:4f:05:91:75:0b:35:53:5c:1f:d4:7c: 65:32:c2:45:4d:9b:ea:47:08:00:6e:d6:f0:77:2f: 3b:2f:33:12:91:6d:c0:dd:2a:48:f6:7b:36:32:d2: 5c:94:35:42:70:2a:38:d8:4e:a9:cc:04:f4:30:5e: 95:5c:ee:69:b8:59:65:bc:6d:5f:26:be:68:67:ee: 3a:2d:9a:f4:91:27:b6:24:d2:25:bd:06:48:9a:90: 46:6c:a6:55:57:89:6f:ad:8b:08:f1:07:e1:91:c5: e9:a7:83:2d:18:38:46:d6:50:4f:e2:2c:26:6f:f3: 88:54:90:97:67:c5:a6:0c:da:47:5f:7c:46:e6:df: fc:fa:c4:21:0a:9b:4f:2c:5d:34:54:59:23:2e:6a: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8B:23:3A:E6:09:FA:AE:2C:82:99:CF:57:51:E1:48:AF:12:01:A1 X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:30:ce:44:75:a7:97:f9:51:0b:9b:68:eb:95:7d:4e:06: 98:0c:22:17:43:6c:07:47:09:2c:e5:bf:38:57:e7:25:8c:23: 67:5e:9a:8a:92:02:49:d9:d9:36:b7:b2:03:08:71:f5:3e:01: 24:d9:48:7a:5a:10:9e:3b:27:71:a3:47:dd:9d:44:2c:cb:44: a9:6b:fe:5e:09:b9:bb:37:ee:ca:26:a3:b7:ae:58:a8:d1:39: 76:ab:67:cc:22:cb:fe:c0:da:2f:40:01:b7:80:4b:61:58:6a: 56:5a:37:ff:13:4b:5b:27:14:e6:dd:18:2b:a8:08:f5:6a:e2: f9:36:67:f5:de:57:05:9c:4f:bf:cd:94:23:83:ab:25:f9:7e: db:6e:17:46:09:15:0a:c8:9d:2f:b4:ea:53:7a:e7:8b:ef:30: cb:09:ba:7b:62:40:c3:b6:6e:62:d5:5f:98:92:57:c2:c2:95: f3:45:a9:ea:5a:40:ea:78:44:c4:3e:d3:9b:4b:24:85:e7:21: a2:14:c0:7f:56:a5:94:31:78:be:84:e1:f3:c1:42:2e:27:6f: aa:22:67:83:15:be:53:b6:e4:04:0b:1c:1e:ba:7b:7a:4c:bf: 8c:e8:6b:9b:ce:b8:99:76:21:7c:03:e7:69:11:c4:26:cc:b0: 70:07:3e:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUwNDE3MDAwNTUxWhcNMjUwNDI0MDAwNTUxWjAYMRYwFAYD VQQDEw02ODAwNDVkZi04NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3IrRSE9eUhc+pINGnzIXabn4hvj1TxQW2OMdZmhhX6zuok3ED1HRulDxVO6 L1MNS3iIbzdIj1MYvrC5Qn5WcN1ENfv9IMO2bCP/1QLGiI/8RQZw+/IoFBBUMENw wdniwEZRSb2XEbhTsZp4TwWRdQs1U1wf1HxlMsJFTZvqRwgAbtbwdy87LzMSkW3A 3SpI9ns2MtJclDVCcCo42E6pzAT0MF6VXO5puFllvG1fJr5oZ+46LZr0kSe2JNIl vQZImpBGbKZVV4lvrYsI8QfhkcXpp4MtGDhG1lBP4iwmb/OIVJCXZ8WmDNpHX3xG 5t/8+sQhCptPLF00VFkjLmoLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKLIzrm CfquLIKZz1dR4UivEgGhMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYzzDORHWnl/lRC5to65V9TgaYDCIXQ2wHRwks5b84V+cljCNnXpqK kgJJ2dk2t7IDCHH1PgEk2Uh6WhCeOydxo0fdnUQsy0Spa/5eCbm7N+7KJqO3rlio 0Tl2q2fMIsv+wNovQAG3gEthWGpWWjf/E0tbJxTm3RgrqAj1auL5Nmf13lcFnE+/ zZQjg6sl+X7bbhdGCRUKyJ0vtOpTeueL7zDLCbp7YkDDtm5i1V+YklfCwpXzRanq WkDqeETEPtObSySF5yGiFMB/VqWUMXi+hOHzwUIuJ2+qImeDFb5TtuQECxweunt6 TL+M6GubzriZdiF8A+dpEcQmzLBwBz6i -----END CERTIFICATE-----Generated at Fri Apr 18 15:09:45 2025 by rpki-client