$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: 1oazle1ZTMZTCU1gA+79tHGKbmHzvQCylxc7c9pQ3d4= Subject key identifier: 41:08:DC:2C:F1:41:0E:95:69:34:2E:76:38:5F:71:20:03:D1:60:AE Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02B4 Signing time: Thu 03 Apr 2025 01:27:29 +0000 Manifest this update: Thu 03 Apr 2025 01:27:28 +0000 Manifest next update: Thu 10 Apr 2025 01:27:28 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: tnh+R39DNmt5Erd+AIAq7GZ2wqC2JfhuOU0UpthcRB4=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: DBuDl77P/pL9wYiNriRl+mRJ7TJ0bOfQxLP7wzjEQtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973 Validity Not Before: Apr 3 01:27:28 2025 GMT Not After : Apr 10 01:27:28 2025 GMT Subject: CN=67ede401-aa81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:a0:30:c3:76:8c:9e:28:18:05:1b:a1:2b: 0e:08:c4:79:06:5d:e9:10:b8:a8:95:97:99:d7:fc: a7:76:27:b9:7a:2a:39:42:c9:67:7a:ec:91:01:b1: 9d:b5:5f:8a:d1:bc:02:25:20:f8:96:f8:3b:b6:57: ac:e2:94:e5:ff:26:f7:f4:e9:7d:fb:42:52:e1:e7: 71:dc:d6:f0:2b:95:2a:88:30:9d:f1:4f:c3:48:54: d8:9e:2d:08:94:88:a3:c0:51:e6:ae:62:50:2c:10: 20:42:f2:ad:72:a7:17:56:0f:49:3d:e1:92:d9:ab: 88:34:35:eb:da:08:b2:3b:26:74:36:c5:19:5d:2d: 92:50:d2:58:f0:2f:bb:29:62:ed:49:0b:32:0f:64: 71:58:88:a1:6f:0b:16:bb:db:5b:f2:43:aa:88:12: a5:a5:08:62:ef:f1:03:4c:82:c0:39:ab:e3:b6:60: c0:36:aa:8e:28:c4:f1:0e:0c:24:bc:8d:b4:a2:bb: e4:9b:df:bb:1e:39:68:36:aa:b3:4f:09:7b:85:d4: 93:ad:e6:d5:79:34:f6:0c:91:2a:53:41:30:b6:2a: 98:50:1f:4e:da:e8:e3:7b:d5:1e:fc:05:9f:15:c3: 6a:81:5e:e8:81:fb:8a:d0:34:1e:57:75:92:b2:9a: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:08:DC:2C:F1:41:0E:95:69:34:2E:76:38:5F:71:20:03:D1:60:AE X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2e:39:1e:73:1f:42:95:32:3d:e4:2b:e3:56:e9:09:49:f0: 0a:0f:74:5c:97:9a:0b:f6:f8:ac:70:f6:7d:47:b3:05:d9:36: 02:70:01:2d:34:72:3f:b2:fb:f4:96:f8:72:83:42:62:43:43: 46:ed:4a:3b:ca:41:b6:62:c3:2d:b4:75:15:07:6c:5e:c3:5c: 06:02:e9:eb:35:1d:17:62:47:de:50:0d:4d:fd:60:a8:76:d9: a0:c8:fc:62:22:11:a0:e1:3b:94:ae:4a:f7:b5:af:66:be:35: 92:7c:56:48:66:72:60:0e:a7:e8:fe:38:26:81:6b:3c:6f:20: a4:42:7a:55:11:09:70:8d:e0:f0:48:0c:f4:59:b2:88:d7:10: d0:89:bb:e5:cc:93:fd:d5:d9:1f:09:0a:b5:bd:f6:1e:3e:69: d7:12:39:31:02:9a:11:30:b8:47:a2:8b:b5:ef:64:d4:de:2e: 8d:d1:e7:da:e3:48:c5:ab:c1:d4:42:4f:b0:1e:05:47:fb:68: af:68:57:5c:11:06:58:3b:85:b1:cf:29:37:a4:99:d6:2c:6d: d0:10:cc:2b:79:b2:16:2c:70:61:3f:84:f3:01:33:10:a6:ed: 0e:ac:c6:85:83:13:2c:47:c3:25:f1:ee:c8:e6:b7:25:17:5c: cb:6b:bc:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNDAzMDEyNzI4WhcNMjUwNDEwMDEyNzI4WjAYMRYwFAYD VQQDEw02N2VkZTQwMS1hYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV6gMMN2jJ4oGAUboSsOCMR5Bl3pELiolZeZ1/yndie5eio5QslneuyRAbGd tV+K0bwCJSD4lvg7tles4pTl/yb39Ol9+0JS4edx3NbwK5UqiDCd8U/DSFTYni0I lIijwFHmrmJQLBAgQvKtcqcXVg9JPeGS2auINDXr2giyOyZ0NsUZXS2SUNJY8C+7 KWLtSQsyD2RxWIihbwsWu9tb8kOqiBKlpQhi7/EDTILAOavjtmDANqqOKMTxDgwk vI20orvkm9+7HjloNqqzTwl7hdSTrebVeTT2DJEqU0EwtiqYUB9O2ujje9Ue/AWf FcNqgV7ogfuK0DQeV3WSspqegQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEI3Czx QQ6VaTQudjhfcSAD0WCuMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYLjkecx9ClTI95CvjVukJSfAKD3Rcl5oL9viscPZ9R7MF2TYCcAEt NHI/svv0lvhyg0JiQ0NG7Uo7ykG2YsMttHUVB2xew1wGAunrNR0XYkfeUA1N/WCo dtmgyPxiIhGg4TuUrkr3ta9mvjWSfFZIZnJgDqfo/jgmgWs8byCkQnpVEQlwjeDw SAz0WbKI1xDQibvlzJP91dkfCQq1vfYePmnXEjkxApoRMLhHoou172TU3i6N0efa 40jFq8HUQk+wHgVH+2ivaFdcEQZYO4Wxzyk3pJnWLG3QEMwrebIWLHBhP4TzATMQ pu0OrMaFgxMsR8Ml8e7I5rclF1zLa7w+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:28 2025 by rpki-client