$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: YlxnfDwWMJgCRlgSoOeQizrWS/TCQGmLR3Rx0++Wcjc= Subject key identifier: C9:64:0D:24:36:36:72:40:41:5F:16:7C:CA:BB:5B:74:CD:06:BD:C0 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 0171 Signing time: Sat 29 Mar 2025 03:20:06 +0000 Manifest this update: Sat 29 Mar 2025 03:20:05 +0000 Manifest next update: Sat 05 Apr 2025 03:20:05 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: BGp1/Aw46yixxn+FFLfM49YODVJ7zfU3ahZi6PUYL+0=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: lrJXxDbusDQNnxZVLvp/KiXpw4drpdRHgf2/ruvhTVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9 Validity Not Before: Mar 29 03:20:05 2025 GMT Not After : Apr 5 03:20:05 2025 GMT Subject: CN=67e766e6-b8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:0b:ac:9c:bb:93:af:db:80:f1:ae:de:e0: d9:cb:4d:87:32:4f:44:b1:88:af:2d:03:78:eb:3d: df:c8:95:d5:ba:d0:a7:f3:0e:c0:92:dd:bf:50:aa: 93:2c:1e:13:c4:64:83:70:77:21:50:01:ac:ce:29: 52:4c:bc:29:18:3d:e7:aa:ec:cd:85:50:04:6b:7f: c9:18:bc:16:1d:79:9d:6b:b4:e6:ba:c5:46:be:f7: 8b:6e:5d:36:d2:80:94:50:56:29:02:10:9c:e9:4a: c4:a9:64:e4:79:0c:58:34:25:4f:b6:69:a6:c6:55: 51:17:d3:6e:5e:d6:83:6c:e0:a9:22:51:fd:43:36: 01:e4:22:39:2c:80:92:32:fe:38:f7:61:b7:d0:96: 25:a6:c1:c2:22:e9:09:93:e7:b1:87:43:c7:d0:d5: 3d:01:77:c2:ef:34:06:df:d0:c2:d8:b5:92:de:d2: 4f:be:40:d9:07:5e:02:43:18:6e:5e:75:bd:c4:bc: e5:50:27:53:a9:7b:37:89:96:65:f5:a4:72:1f:0d: d2:4f:76:50:be:09:c0:3a:de:ae:ed:95:f0:3c:b5: 48:96:d6:6b:bf:ce:44:6e:62:4f:b0:8b:92:af:88: 2c:95:49:ea:09:03:ed:3d:22:29:3b:ad:b9:83:da: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:64:0D:24:36:36:72:40:41:5F:16:7C:CA:BB:5B:74:CD:06:BD:C0 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:be:2c:82:ed:fc:01:d3:ba:f0:d8:78:40:d4:4a:3d:6d:fa: 51:06:0a:eb:a8:f5:a9:6a:d6:ea:2a:f1:57:f9:38:26:a2:50: 69:30:03:a6:33:68:19:ef:19:5a:1f:86:57:9a:10:a7:82:e9: fe:6b:aa:23:b6:29:f6:f3:72:ce:a4:2f:cc:ec:85:14:c4:6d: e6:a6:13:c8:8c:c4:85:25:34:df:80:ad:88:36:cd:89:12:cc: c4:17:1e:41:66:6d:8f:e5:96:17:be:21:e8:6c:92:79:2a:f9: 58:29:fc:c6:9a:cc:9c:26:20:e5:22:7b:e0:e6:47:d8:92:57: 33:08:ff:c4:e4:99:d0:46:4e:b4:2e:97:01:e6:1b:7d:00:b5: e6:fc:5d:66:b8:ee:e3:dc:cb:d0:e2:b2:9b:c1:ef:38:a0:38: 9a:de:f1:5a:93:39:32:4c:dc:9c:0a:71:64:30:af:6d:8d:fa: 24:5d:f4:b0:ff:58:9c:d9:6f:f4:03:b1:60:83:08:29:fd:81: e7:2a:40:73:41:d2:d6:2a:82:65:39:01:4e:e9:cc:cb:c4:ae: 67:32:36:cc:b0:27:d9:90:b0:24:9f:ec:0e:ec:ac:d0:84:4c: 83:30:bf:ca:d5:03:b4:73:86:f3:a9:9a:93:e4:6b:0e:8e:13: 0b:1e:28:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwMzI5MDMyMDA1WhcNMjUwNDA1MDMyMDA1WjAYMRYwFAYD VQQDEw02N2U3NjZlNi1iOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZULrJy7k6/bgPGu3uDZy02HMk9EsYivLQN46z3fyJXVutCn8w7Akt2/UKqT LB4TxGSDcHchUAGszilSTLwpGD3nquzNhVAEa3/JGLwWHXmda7TmusVGvveLbl02 0oCUUFYpAhCc6UrEqWTkeQxYNCVPtmmmxlVRF9NuXtaDbOCpIlH9QzYB5CI5LICS Mv4492G30JYlpsHCIukJk+exh0PH0NU9AXfC7zQG39DC2LWS3tJPvkDZB14CQxhu XnW9xLzlUCdTqXs3iZZl9aRyHw3ST3ZQvgnAOt6u7ZXwPLVIltZrv85EbmJPsIuS r4gslUnqCQPtPSIpO625g9qseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlkDSQ2 NnJAQV8WfMq7W3TNBr3AMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5viyC7fwB07rw2HhA1Eo9bfpRBgrrqPWpatbqKvFX+TgmolBpMAOm M2gZ7xlaH4ZXmhCngun+a6ojtin283LOpC/M7IUUxG3mphPIjMSFJTTfgK2INs2J EszEFx5BZm2P5ZYXviHobJJ5KvlYKfzGmsycJiDlInvg5kfYklczCP/E5JnQRk60 LpcB5ht9ALXm/F1muO7j3MvQ4rKbwe84oDia3vFakzkyTNycCnFkMK9tjfokXfSw /1ic2W/0A7Fggwgp/YHnKkBzQdLWKoJlOQFO6czLxK5nMjbMsCfZkLAkn+wO7KzQ hEyDML/K1QO0c4bzqZqT5GsOjhMLHiig -----END CERTIFICATE-----Generated at Fri Apr 4 22:20:00 2025 by rpki-client