$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json) Hash identifier: AF9hCaNy7yMJdQjJC6CNo5myyQH+j7KhT2neMmvx/2k= Subject key identifier: 94:BE:A2:2B:83:65:96:17:8F:39:12:B5:D6:8C:E8:8C:1F:3F:AD:2A Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Certificate serial: 148B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft Manifest number: 148B Signing time: Fri 04 Apr 2025 16:57:26 +0000 Manifest this update: Fri 04 Apr 2025 16:57:25 +0000 Manifest next update: Fri 11 Apr 2025 16:57:25 +0000 Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: Fov14XSMlFjHbrOZRcZpVqOLSD+h8QhiAP655IaoP2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5259 (0x148b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174125 Validity Not Before: Apr 4 16:57:25 2025 GMT Not After : Apr 11 16:57:25 2025 GMT Subject: CN=67f00f75-1470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:d7:23:1f:65:de:f8:08:b1:b9:1c:e2:ff: 6e:bf:fa:4d:f7:47:ea:fd:29:70:31:9d:9d:e9:7b: dd:d1:a7:0a:54:71:28:b5:f2:ea:f2:dc:f3:67:11: a7:ad:9c:22:22:e5:16:89:8f:06:6b:41:8b:36:1d: c4:00:53:3c:f1:e1:f9:9d:8a:73:93:cf:67:42:8a: b7:0b:0e:26:5b:3a:0f:c7:f4:e4:72:63:aa:bb:38: fe:0b:60:7b:b7:7a:1c:1d:e6:51:d6:27:46:39:03: 89:ee:fe:89:ba:af:f2:84:a7:db:30:5b:8b:5d:f3: 2c:4b:85:0d:8a:f1:40:33:7c:03:1b:95:fa:76:6e: b4:7d:5a:23:38:9b:20:07:8c:32:ca:49:06:69:2d: 05:5a:8e:07:fb:3e:bc:5d:0f:be:77:17:dd:ac:1f: d0:a3:c6:8e:13:b3:08:17:ef:d7:48:83:65:7d:46: c8:1b:49:47:42:17:37:5a:c5:8b:33:d3:fd:db:34: ac:01:ad:1d:f6:6a:09:69:58:e7:aa:3f:c8:17:8f: 03:26:f5:45:49:47:4d:00:e6:90:05:21:0f:55:64: 57:4f:c2:6e:07:c9:5d:83:21:4c:59:ba:c0:77:6c: dd:67:b9:03:5f:7b:ad:fb:7d:19:90:d8:d4:bd:fa: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BE:A2:2B:83:65:96:17:8F:39:12:B5:D6:8C:E8:8C:1F:3F:AD:2A X509v3 Authority Key Identifier: keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d7:a5:40:5b:30:2d:0e:02:07:8f:a9:7e:11:85:2f:5c:02: 8e:f4:23:d1:65:c6:c2:c5:41:09:76:4b:84:75:c5:4b:5f:55: c9:99:67:fa:dc:5f:83:1d:0a:cd:48:84:cd:1a:44:1a:1a:f4: 86:df:70:99:3d:53:25:7a:f2:10:04:b8:17:2c:7e:92:6f:71: 98:0f:24:7f:c5:48:b4:a7:3e:23:f2:a8:c7:d5:34:b1:f7:7b: e1:87:ed:62:3b:81:82:36:7c:15:24:15:ce:48:4c:ed:8b:11: b9:42:f9:2f:0a:62:4f:99:3b:8a:72:9d:83:de:80:ae:4a:39: 94:43:c4:47:aa:52:16:10:c0:63:b6:61:27:c3:43:fa:06:ea: 90:55:62:ff:8b:99:6e:38:54:66:48:1e:a0:2b:14:62:9e:c7: ba:f8:ce:f7:22:96:af:f8:08:b2:36:6d:82:e6:9f:96:d6:e4: b6:9a:8a:a2:9e:ee:f1:0e:b1:dd:5c:e5:d3:9d:f8:0f:8f:2e: 71:d6:e2:fc:d6:8d:dc:ca:29:07:4c:11:3f:70:0c:b3:d4:99: b8:e4:9d:03:69:4f:5c:e5:b6:67:18:68:20:3a:ba:f9:d1:9d: f4:1d:cb:81:79:c3:b9:81:e5:8e:ab:6f:21:1c:0b:f1:fb:79: 39:f2:b6:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF NzVGQ0I3MTAwHhcNMjUwNDA0MTY1NzI1WhcNMjUwNDExMTY1NzI1WjAYMRYwFAYD VQQDEw02N2YwMGY3NS0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz3XIx9l3vgIsbkc4v9uv/pN90fq/SlwMZ2d6Xvd0acKVHEotfLq8tzzZxGn rZwiIuUWiY8Ga0GLNh3EAFM88eH5nYpzk89nQoq3Cw4mWzoPx/TkcmOquzj+C2B7 t3ocHeZR1idGOQOJ7v6Juq/yhKfbMFuLXfMsS4UNivFAM3wDG5X6dm60fVojOJsg B4wyykkGaS0FWo4H+z68XQ++dxfdrB/Qo8aOE7MIF+/XSINlfUbIG0lHQhc3WsWL M9P92zSsAa0d9moJaVjnqj/IF48DJvVFSUdNAOaQBSEPVWRXT8JuB8ldgyFMWbrA d2zdZ7kDX3ut+30ZkNjUvfpazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS+oiuD ZZYXjzkStdaM6IwfP60qMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa16VAWzAtDgIHj6l+EYUvXAKO9CPRZcbCxUEJdkuEdcVLX1XJmWf6 3F+DHQrNSITNGkQaGvSG33CZPVMlevIQBLgXLH6Sb3GYDyR/xUi0pz4j8qjH1TSx 93vhh+1iO4GCNnwVJBXOSEztixG5QvkvCmJPmTuKcp2D3oCuSjmUQ8RHqlIWEMBj tmEnw0P6BuqQVWL/i5luOFRmSB6gKxRinse6+M73Ipav+AiyNm2C5p+W1uS2moqi nu7xDrHdXOXTnfgPjy5x1uL81o3cyikHTBE/cAyz1Jm45J0DaU9c5bZnGGggOrr5 0Z30HcuBecO5geWOq28hHAvx+3k58rbg -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:06 2025 by rpki-client