$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: pReL6FvKuyoRQIxREBCRjYN2eab7Dwbi1TOzCNHAq6M= Subject key identifier: B6:1E:93:F3:99:B9:5C:21:BE:53:CC:C2:B3:03:5E:C4:0F:B2:A7:12 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0BEB Signing time: Sun 06 Apr 2025 18:36:00 +0000 Manifest this update: Sun 06 Apr 2025 18:35:59 +0000 Manifest next update: Sun 13 Apr 2025 18:35:59 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: VGAL7wSTC7QwsY430yloVfpKLsW2xF+UnWYb/Dy76Xk=) 2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: dn3kZoWooSddDB41uptssOk+YJNXq/e4qX48GOTMtT4=) 3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: 8Ead/6roCcIWAO/F6fTJ08XA18GUuGo77XaTq8IG4j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9 Validity Not Before: Apr 6 18:35:59 2025 GMT Not After : Apr 13 18:35:59 2025 GMT Subject: CN=67f2c98f-885b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:86:a6:18:48:cd:8d:33:47:bf:55:e9:58: 0d:8e:20:e9:c3:63:f6:62:74:05:f4:2e:8e:7b:eb: 56:88:9d:6d:72:32:7e:36:17:27:32:be:4d:58:f0: 6b:e1:ee:5b:95:84:b4:cf:b5:7d:1b:bb:6e:b5:db: e6:25:1b:a3:ed:da:67:30:85:39:c7:60:e7:45:91: 6b:28:30:c4:30:49:47:9f:5c:28:36:e3:a3:83:a3: c9:75:30:76:2e:f1:ab:ef:18:02:c8:7e:dc:3a:d9: e2:29:46:07:28:8a:8d:3a:62:01:2a:06:18:4f:94: 4d:a3:8a:fe:4c:ae:b9:f7:08:81:70:b7:cd:ee:02: 48:ec:73:50:b8:d2:ec:24:87:cd:43:01:65:72:bb: 75:94:0f:91:c3:99:d5:ce:50:d7:2c:61:12:26:3d: 3c:dc:46:58:77:7d:e8:74:9c:0f:5a:3e:5c:a8:ea: b4:3f:8a:43:bf:fb:04:3d:3e:d8:bc:b1:7b:ea:e0: a1:7b:21:e6:59:0b:59:af:af:6b:24:8e:28:c7:e8: 49:76:4f:95:00:5d:d0:39:e8:15:d8:fb:2e:9d:d5: b9:b0:44:f1:a2:fa:9e:99:2e:83:11:66:d6:d0:c6: f8:a5:8d:73:85:ca:0f:3a:8f:4f:40:90:d0:c1:42: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1E:93:F3:99:B9:5C:21:BE:53:CC:C2:B3:03:5E:C4:0F:B2:A7:12 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:2c:11:f6:0c:61:42:18:5c:ec:54:60:9f:d9:3a:fa:f8:a9: 7b:3e:16:36:df:8d:40:9a:88:e6:63:e5:01:90:70:91:e6:c8: 48:11:11:e0:4b:a2:74:46:21:f6:4a:ba:bd:f2:6a:18:07:67: bc:06:d4:0e:c4:23:22:cc:66:cb:ad:4a:16:4f:34:12:43:e0: df:f7:65:d8:60:6e:ec:f8:a2:1a:9a:85:ce:ab:53:42:7f:94: 76:8c:50:f8:69:b9:35:a8:38:ed:7f:69:91:c3:d8:e8:58:f7: 85:62:d8:c9:71:2f:65:78:96:ac:7d:c4:ec:ba:4d:6d:45:88: e2:e1:64:ae:ee:93:53:8f:20:83:9a:14:e7:b6:ef:77:26:8b: 07:8d:7d:49:ab:78:14:bb:54:36:5e:f1:4f:9c:d7:4d:3e:17: d8:58:56:3d:65:07:09:1d:fa:83:fd:87:de:76:7a:a9:76:f5: 3c:a1:05:5d:19:de:92:57:e5:d3:c1:e8:46:db:94:2c:96:b4: 62:fa:30:80:3f:63:1c:8e:4e:04:7d:90:71:62:fe:29:e6:21: 16:e9:37:9b:c4:a7:cf:7a:42:71:b6:b2:59:0e:c6:39:8d:5c: 59:a0:35:dc:f4:bb:36:2c:d0:d3:d1:e0:be:c3:22:8b:3c:a9: b2:f2:f0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjUwNDA2MTgzNTU5WhcNMjUwNDEzMTgzNTU5WjAYMRYwFAYD VQQDEw02N2YyYzk4Zi04ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGyGphhIzY0zR79V6VgNjiDpw2P2YnQF9C6Oe+tWiJ1tcjJ+NhcnMr5NWPBr 4e5blYS0z7V9G7tutdvmJRuj7dpnMIU5x2DnRZFrKDDEMElHn1woNuOjg6PJdTB2 LvGr7xgCyH7cOtniKUYHKIqNOmIBKgYYT5RNo4r+TK659wiBcLfN7gJI7HNQuNLs JIfNQwFlcrt1lA+Rw5nVzlDXLGESJj083EZYd33odJwPWj5cqOq0P4pDv/sEPT7Y vLF76uCheyHmWQtZr69rJI4ox+hJdk+VAF3QOegV2PsundW5sETxovqemS6DEWbW 0Mb4pY1zhcoPOo9PQJDQwULgtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYek/OZ uVwhvlPMwrMDXsQPsqcSMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZLBH2DGFCGFzsVGCf2Tr6+Kl7PhY2341AmojmY+UBkHCR5shIERHg S6J0RiH2Srq98moYB2e8BtQOxCMizGbLrUoWTzQSQ+Df92XYYG7s+KIamoXOq1NC f5R2jFD4abk1qDjtf2mRw9joWPeFYtjJcS9leJasfcTsuk1tRYji4WSu7pNTjyCD mhTntu93JosHjX1Jq3gUu1Q2XvFPnNdNPhfYWFY9ZQcJHfqD/YfednqpdvU8oQVd Gd6SV+XTwehG25QslrRi+jCAP2Mcjk4EfZBxYv4p5iEW6TebxKfPekJxtrJZDsY5 jVxZoDXc9Ls2LNDT0eC+wyKLPKmy8vA9 -----END CERTIFICATE-----Generated at Mon Apr 7 13:57:12 2025 by rpki-client