$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json) Hash identifier: DglQfVfuzGOVQXtLvOyaMDOWD0AhP6ZQNDi3AHYxjM4= Subject key identifier: D8:E4:A0:BB:43:06:1B:50:A4:D7:1E:97:78:D9:A7:7A:03:48:B3:6A Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft Manifest number: 0313 Signing time: Mon 07 Apr 2025 00:47:08 +0000 Manifest this update: Mon 07 Apr 2025 00:47:08 +0000 Manifest next update: Mon 14 Apr 2025 00:47:08 +0000 Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: 3pJwuXoSTtYijTGvoGfZtVsIosHknj6d/ET4lYMx5Ho=) 2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: YgVhX2rX+zPQ1467o887/FhnDxbWRkvwY5a2EYtW2qQ=) 3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: 4fhVLBhfu57aeFMCKT6xqBWKFb9Ogft79B2/qJ68TUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 00:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235 Validity Not Before: Apr 7 00:47:08 2025 GMT Not After : Apr 14 00:47:08 2025 GMT Subject: CN=67f3208c-bd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:16:dd:fa:bb:d0:e5:f0:df:64:79:89:7d: 8c:b1:35:fd:53:15:ce:af:0e:23:bf:57:b1:dd:2a: 67:fb:11:78:37:04:f7:4a:48:d2:90:cf:e6:6c:e9: 66:82:4c:1c:c5:e4:40:a8:d9:ea:ec:dc:d0:e5:14: 86:35:24:cd:6b:9d:e3:f2:6a:4f:20:6c:94:05:42: 50:27:4c:97:a1:80:75:38:62:8d:12:09:1b:b0:50: de:7e:a3:ab:b2:9a:d8:83:91:d0:06:20:0f:8b:23: 54:44:92:11:97:f1:c9:51:d2:34:98:c9:89:a9:66: cc:20:bf:04:ef:28:e4:02:99:a6:65:83:b1:d3:c1: 8e:5f:48:44:0b:aa:ab:c1:52:cd:dd:5f:12:92:c7: eb:02:1c:6d:72:dd:42:98:c8:a2:bb:ad:a9:2c:65: 62:6a:32:12:62:8d:fd:36:4d:15:3f:bf:5d:52:96: 08:09:7e:54:bd:ed:e5:e9:a8:b4:5f:47:ee:13:5e: 6e:4d:85:62:f5:5a:76:50:af:39:a8:96:93:90:72: 54:5a:a1:93:92:2b:2b:26:6e:54:a1:57:f9:4a:44: d1:44:6f:05:b6:07:d5:9d:cd:30:3f:38:c1:ac:f3: 97:10:6b:3e:e8:de:00:c3:e8:d2:7e:80:e9:b1:dd: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:A0:BB:43:06:1B:50:A4:D7:1E:97:78:D9:A7:7A:03:48:B3:6A X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:18:77:3a:3e:fc:e5:40:70:9d:0e:52:be:a6:e0:45:06:9f: 11:7a:7a:ba:b5:6a:3e:11:eb:38:ee:55:1e:38:bd:35:de:24: 01:d1:4f:06:53:c7:41:eb:cb:d3:07:31:13:51:2e:91:dc:aa: c2:03:de:b8:5f:51:1d:0d:a4:d2:e1:5c:53:cf:c2:da:14:d5: e4:d0:71:77:59:2d:b0:c6:0b:f2:a6:c4:ae:42:c4:30:5d:58: f6:0b:84:45:6c:f2:20:6e:45:80:ba:19:8d:c1:46:46:8a:48: 85:f0:f6:85:b2:06:fe:b4:ba:2f:53:d1:0b:e1:2c:23:65:d8: 28:de:7c:69:d8:70:cb:02:cb:c1:c1:06:66:73:2a:d2:a0:a6: 83:ed:30:4f:ee:54:cf:e9:e9:fa:ca:bc:92:06:cf:a4:9c:ec: 28:50:b9:7b:76:75:c3:97:11:62:25:53:44:56:83:d2:c2:ab: eb:c2:07:b7:dc:0f:2a:5c:25:34:37:cc:3f:c9:68:42:94:40: b5:fe:6c:9c:74:21:32:e0:be:ba:51:9d:1f:d3:2e:62:71:e1: 62:92:b2:b0:71:12:c8:0c:f1:6a:cb:b4:8f:6a:06:33:ed:49: 91:4b:3e:99:34:7b:0d:e7:99:1e:78:01:db:79:57:c7:0e:ab: 94:c0:cf:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjUwNDA3MDA0NzA4WhcNMjUwNDE0MDA0NzA4WjAYMRYwFAYD VQQDEw02N2YzMjA4Yy1iZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn24W3fq70OXw32R5iX2MsTX9UxXOrw4jv1ex3Spn+xF4NwT3SkjSkM/mbOlm gkwcxeRAqNnq7NzQ5RSGNSTNa53j8mpPIGyUBUJQJ0yXoYB1OGKNEgkbsFDefqOr sprYg5HQBiAPiyNURJIRl/HJUdI0mMmJqWbMIL8E7yjkApmmZYOx08GOX0hEC6qr wVLN3V8SksfrAhxtct1CmMiiu62pLGViajISYo39Nk0VP79dUpYICX5Uve3l6ai0 X0fuE15uTYVi9Vp2UK85qJaTkHJUWqGTkisrJm5UoVf5SkTRRG8FtgfVnc0wPzjB rPOXEGs+6N4Aw+jSfoDpsd1bbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjkoLtD BhtQpNcel3jZp3oDSLNqMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0 LS1nSVBlMXBlaWJXSS01bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/GHc6PvzlQHCdDlK+puBFBp8Renq6tWo+Ees47lUeOL013iQB0U8G U8dB68vTBzETUS6R3KrCA964X1EdDaTS4VxTz8LaFNXk0HF3WS2wxgvypsSuQsQw XVj2C4RFbPIgbkWAuhmNwUZGikiF8PaFsgb+tLovU9EL4SwjZdgo3nxp2HDLAsvB wQZmcyrSoKaD7TBP7lTP6en6yrySBs+knOwoULl7dnXDlxFiJVNEVoPSwqvrwge3 3A8qXCU0N8w/yWhClEC1/mycdCEy4L66UZ0f0y5iceFikrKwcRLIDPFqy7SPagYz 7UmRSz6ZNHsN55keeAHbeVfHDquUwM9L -----END CERTIFICATE-----Generated at Tue Apr 8 19:06:29 2025 by rpki-client