$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: R+3+Akbk6GpaLLqUUnWEM4fxtFt+sVeS6HHWADbaiZ0= Subject key identifier: 25:0F:22:DC:5C:69:29:90:0B:BC:3F:71:24:B0:65:92:46:90:51:0C Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 34A0 Signing time: Tue 08 Apr 2025 14:33:27 +0000 Manifest this update: Tue 08 Apr 2025 14:33:26 +0000 Manifest next update: Tue 15 Apr 2025 14:33:26 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: tPqq8GQ1PEBixDzyHG7vbqrhxxbLaukvmJCWLk1MiaE=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 14:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878 Validity Not Before: Apr 8 14:33:26 2025 GMT Not After : Apr 15 14:33:26 2025 GMT Subject: CN=67f533b7-bf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:6b:6f:48:e8:ba:19:84:bd:d9:1a:ac:68: d6:91:12:25:c7:9a:c1:9b:35:64:0c:2d:cd:70:db: 4c:78:44:99:50:34:73:d3:a7:0b:04:20:a1:f9:bc: 80:9e:5a:ca:cb:8d:18:5f:33:85:10:d4:43:61:f1: 8a:49:40:8c:c7:2e:8d:27:2b:75:5d:c1:52:6e:30: 6c:79:6d:e5:55:62:4d:cc:39:4f:22:12:cd:a5:5d: 62:b0:fb:e5:4e:13:32:fb:48:ec:bc:6e:15:c5:a1: c3:4d:8d:ba:7c:1c:11:22:42:e7:b0:50:6e:30:a2: a8:56:b1:19:ab:35:11:41:07:32:ea:a3:fa:60:28: 77:5b:4b:0b:05:a8:64:63:35:3a:e6:c0:0e:17:f4: bd:14:47:91:21:94:27:e8:c7:56:6d:8c:d1:05:54: 7a:b8:0c:c3:b4:9d:ca:45:55:4b:f7:0f:b3:44:82: d0:81:f4:d8:40:4a:89:55:9c:90:7c:c6:eb:01:fa: 59:05:d6:3e:77:a8:b7:31:a9:33:af:2f:57:a1:39: c6:3c:83:61:ae:f7:d0:2a:a0:1c:47:25:f1:6a:47: 43:fe:85:bf:d7:17:f0:1d:7c:e9:47:fa:d2:21:82: d1:f1:fe:ce:1a:1e:86:7e:29:ef:25:1e:e9:6a:b0: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0F:22:DC:5C:69:29:90:0B:BC:3F:71:24:B0:65:92:46:90:51:0C X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:66:33:30:0a:3c:ba:d8:06:b0:e5:9c:a4:a5:e7:df:3e:41: 2a:6a:e1:58:44:98:f2:eb:bb:1b:47:a0:d2:02:60:97:c1:a3: 0b:59:af:68:16:7e:26:2f:58:47:8a:e0:70:d4:d1:85:2b:d8: e7:bc:cc:62:97:92:5f:92:29:0c:c1:19:61:3d:96:d5:f0:9c: 5d:bb:0e:48:37:94:28:48:b9:c3:18:6f:1a:4d:19:c4:1b:99: f8:02:d6:6e:bc:66:79:cd:34:50:9d:21:fe:5b:9f:9f:7b:c6: 92:9a:3a:79:0d:eb:89:6e:cf:eb:a2:cd:9a:1a:cd:78:c7:3e: 52:3d:c5:e7:aa:2e:25:ac:ff:27:d9:16:ea:09:19:86:34:2f: c3:d6:d3:36:c3:b3:40:15:f9:a8:6f:af:5c:ce:3c:82:d9:51: db:73:93:4b:57:9d:07:1c:22:16:fc:4b:96:d7:43:9b:c7:f6: 18:f6:d5:18:04:6e:04:06:9e:02:ed:25:11:97:fa:96:c9:b5: 97:fc:d3:b2:74:02:50:a9:e7:33:21:13:97:c0:83:b6:75:25: 46:44:8a:a5:74:1b:5a:ca:7b:2e:d4:ee:6c:19:83:d4:7a:d0: bd:80:fe:c4:b8:12:3a:d4:a2:22:46:11:c0:89:a2:fa:87:99: 6a:10:52:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUwNDA4MTQzMzI2WhcNMjUwNDE1MTQzMzI2WjAYMRYwFAYD VQQDEw02N2Y1MzNiNy1iZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwghrb0jouhmEvdkarGjWkRIlx5rBmzVkDC3NcNtMeESZUDRz06cLBCCh+byA nlrKy40YXzOFENRDYfGKSUCMxy6NJyt1XcFSbjBseW3lVWJNzDlPIhLNpV1isPvl ThMy+0jsvG4VxaHDTY26fBwRIkLnsFBuMKKoVrEZqzURQQcy6qP6YCh3W0sLBahk YzU65sAOF/S9FEeRIZQn6MdWbYzRBVR6uAzDtJ3KRVVL9w+zRILQgfTYQEqJVZyQ fMbrAfpZBdY+d6i3Makzry9XoTnGPINhrvfQKqAcRyXxakdD/oW/1xfwHXzpR/rS IYLR8f7OGh6GfinvJR7parA2XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUPItxc aSmQC7w/cSSwZZJGkFEMMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0ZjMwCjy62Aaw5ZykpeffPkEqauFYRJjy67sbR6DSAmCXwaMLWa9o Fn4mL1hHiuBw1NGFK9jnvMxil5JfkikMwRlhPZbV8Jxduw5IN5QoSLnDGG8aTRnE G5n4AtZuvGZ5zTRQnSH+W5+fe8aSmjp5DeuJbs/ros2aGs14xz5SPcXnqi4lrP8n 2RbqCRmGNC/D1tM2w7NAFfmob69czjyC2VHbc5NLV50HHCIW/EuW10Obx/YY9tUY BG4EBp4C7SURl/qWybWX/NOydAJQqeczIROXwIO2dSVGRIqldBtaynsu1O5sGYPU etC9gP7EuBI61KIiRhHAiaL6h5lqEFK2 -----END CERTIFICATE-----Generated at Tue Apr 8 16:14:19 2025 by rpki-client