$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json) Hash identifier: XjpjVnqVYFJpgKanzuMDcBYHtp+/RXo/QgUJPCKupzI= Subject key identifier: 1D:BD:54:11:5B:83:62:31:49:D5:4B:5E:BE:40:8A:75:90:B1:93:27 Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft Manifest number: 088D Signing time: Sun 06 Apr 2025 20:18:52 +0000 Manifest this update: Sun 06 Apr 2025 20:18:51 +0000 Manifest next update: Sun 13 Apr 2025 20:18:51 +0000 Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: 6/FY8Exkv11yTSMqTX7CJE4pGR3QYWoa/b2SgVW7VMU=) 2: CDBA3F66B9BD11EAAE22B109C4F9AE02.roa (hash: YmZW8IrF5Ot7b++uoJjSCiZIZtySz+iokfuITWaJe4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2 Validity Not Before: Apr 6 20:18:51 2025 GMT Not After : Apr 13 20:18:51 2025 GMT Subject: CN=67f2e1ab-25cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:c2:28:a2:64:fe:9a:80:e7:ee:7e:49:4e: 8b:a4:e3:e1:91:01:13:75:dc:b5:17:aa:3c:c6:4a: ac:04:e7:b1:39:6f:9d:d5:ee:73:de:b8:4e:3d:2d: 20:54:f0:b5:47:5a:2a:c3:2c:5d:84:a6:92:cd:34: 51:fd:96:dc:2b:ea:59:ec:7c:82:c8:9c:ac:a0:a6: bd:61:25:eb:70:a6:1d:dd:f4:ca:25:43:3b:cc:d1: c7:c0:ca:7b:22:e2:fe:9e:a0:8a:4e:ab:48:9e:58: de:13:ed:66:5e:43:10:78:6a:b3:ff:15:df:4b:61: e6:28:f7:f7:fe:05:80:12:3d:3c:08:10:c6:4f:f5: 96:d7:53:93:d6:dc:82:8d:a5:f3:6b:b0:0b:f5:e4: 93:82:4a:fb:bf:77:7b:41:04:d3:56:8b:44:e6:11: 86:d0:61:bf:97:db:2e:3b:39:d3:aa:8d:59:e8:24: fe:39:5d:95:1c:d3:81:3f:a7:63:3e:f3:5b:d2:51: c4:68:98:7e:e2:ab:a7:e7:bf:82:9b:fd:eb:b2:94: 7e:57:a8:1c:b9:7a:7c:d4:80:05:33:e7:15:81:f4: 7f:05:2a:71:68:0f:d3:a7:72:15:e6:ce:b0:5f:33: 45:09:52:44:4c:1e:c2:d6:85:ee:7f:ba:c4:a0:a1: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BD:54:11:5B:83:62:31:49:D5:4B:5E:BE:40:8A:75:90:B1:93:27 X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:58:b4:a1:a1:d0:a7:61:ec:f9:1c:f7:c9:d4:b8:91:db:c2: 5d:5d:e8:50:ca:7b:af:2a:e2:9a:73:96:78:d6:73:8a:8b:83: 4b:d6:c2:99:59:54:7c:32:f8:d5:96:62:94:ab:29:2a:5a:bf: 9f:15:03:8a:2d:96:b1:91:96:ca:ea:c0:9b:60:ef:f8:0d:fa: de:96:30:b6:97:4d:3e:17:19:f0:a2:97:df:52:69:27:a9:23: 93:ff:f0:4a:d0:24:21:ef:e2:ca:bb:03:1b:4b:4f:22:40:14: e5:86:b4:ad:32:c8:cf:69:ba:4b:bb:00:bf:e0:32:d4:78:02: ea:95:b6:c8:5d:99:f8:40:e1:29:a1:a7:4a:00:54:0f:fe:69: b7:fe:29:a8:1c:90:15:58:b9:9f:39:d3:f5:31:c9:df:47:13: 18:e7:ab:2e:8c:31:c4:a9:08:d9:e9:d6:03:15:48:5c:a2:48: 17:a9:30:a1:78:1f:d3:98:94:31:f6:b3:b8:fb:f5:15:5c:aa: 5f:0a:82:19:4d:c0:03:3e:29:50:e2:13:4b:e3:52:0d:97:b9: 3d:e7:87:c5:26:83:79:88:d2:34:85:83:76:ed:40:43:0b:6b: a9:cf:10:fb:a0:97:3c:5d:a8:60:c8:ea:74:5e:80:6e:18:8d: d4:d4:f0:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjUwNDA2MjAxODUxWhcNMjUwNDEzMjAxODUxWjAYMRYwFAYD VQQDEw02N2YyZTFhYi0yNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXnCKKJk/pqA5+5+SU6LpOPhkQETddy1F6o8xkqsBOexOW+d1e5z3rhOPS0g VPC1R1oqwyxdhKaSzTRR/ZbcK+pZ7HyCyJysoKa9YSXrcKYd3fTKJUM7zNHHwMp7 IuL+nqCKTqtInljeE+1mXkMQeGqz/xXfS2HmKPf3/gWAEj08CBDGT/WW11OT1tyC jaXza7AL9eSTgkr7v3d7QQTTVotE5hGG0GG/l9suOznTqo1Z6CT+OV2VHNOBP6dj PvNb0lHEaJh+4qun57+Cm/3rspR+V6gcuXp81IAFM+cVgfR/BSpxaA/Tp3IV5s6w XzNFCVJETB7C1oXuf7rEoKHUtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB29VBFb g2IxSdVLXr5AinWQsZMnMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0 MUhHYndLM0ZoN1BiaWVlOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQWLShodCnYez5HPfJ1LiR28JdXehQynuvKuKac5Z41nOKi4NL1sKZ WVR8MvjVlmKUqykqWr+fFQOKLZaxkZbK6sCbYO/4DfreljC2l00+FxnwopffUmkn qSOT//BK0CQh7+LKuwMbS08iQBTlhrStMsjPabpLuwC/4DLUeALqlbbIXZn4QOEp oadKAFQP/mm3/imoHJAVWLmfOdP1McnfRxMY56sujDHEqQjZ6dYDFUhcokgXqTCh eB/TmJQx9rO4+/UVXKpfCoIZTcADPilQ4hNL41INl7k954fFJoN5iNI0hYN27UBD C2upzxD7oJc8XahgyOp0XoBuGI3U1PBn -----END CERTIFICATE-----Generated at Mon Apr 7 00:12:12 2025 by rpki-client