$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: sMmgdBOCe7HofuoRTlK6FsfWVsdLwTZz1aLB17y0TJI= Subject key identifier: 92:CA:A1:40:08:0B:A0:08:06:39:6E:3A:B6:F2:E3:EA:02:16:D1:D4 Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 04E7 Signing time: Sun 06 Apr 2025 23:22:59 +0000 Manifest this update: Sun 06 Apr 2025 23:22:59 +0000 Manifest next update: Sun 13 Apr 2025 23:22:59 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: a+EQDWJKeBBtTOsmnjObHKnUq6u7qFd5faxpe5HFi+M=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 23:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44 Validity Not Before: Apr 6 23:22:59 2025 GMT Not After : Apr 13 23:22:59 2025 GMT Subject: CN=67f30cd3-20c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:3f:6f:70:be:db:03:11:1c:e6:ee:18:3c: a0:2a:9d:12:dd:ae:ee:e0:d8:89:64:f4:73:de:ee: bb:45:40:89:50:bc:61:d4:6a:08:71:e4:35:f2:f5: 18:e1:a1:58:cc:45:8f:ce:3f:b9:ba:87:d1:14:ce: 22:5c:b2:63:a3:36:7e:9a:a6:50:f5:5e:b2:34:33: b0:e2:95:be:e3:21:e7:3c:6b:e2:dd:03:35:e4:69: e2:aa:b3:a0:31:d5:b1:16:8e:54:cf:c7:c4:d6:2b: 86:bc:3a:f2:0c:e4:51:1d:bb:ee:bd:32:52:bb:85: 3a:e9:10:b0:b2:25:c0:f8:ed:25:16:fc:8b:6f:83: 2a:58:63:cc:42:45:29:90:92:6b:e5:1f:9d:db:da: bc:bb:de:1d:58:74:6f:a0:2b:2d:d0:98:f3:94:df: a5:62:ae:64:9e:00:94:0e:f0:59:28:58:b9:d1:08: 82:20:8b:78:89:76:ae:4c:ca:00:d6:ec:41:9f:dd: f8:75:30:99:aa:6a:80:7d:7a:ec:2c:c0:03:3f:76: a4:ee:f1:0a:24:93:8f:fa:48:e4:33:0c:1b:f2:a1: 95:eb:33:c9:39:3a:b8:d6:1a:10:f6:05:c6:11:e2: 9d:18:fd:c9:c0:90:a8:6b:aa:40:b6:95:ff:70:15: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CA:A1:40:08:0B:A0:08:06:39:6E:3A:B6:F2:E3:EA:02:16:D1:D4 X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cb:34:da:d1:b5:d2:43:bf:e6:5f:b2:6f:ca:c4:3d:67:c1: 85:ae:e9:c6:14:9c:aa:8e:9d:26:d3:c7:4b:79:ff:d7:19:3f: 99:24:e7:f3:ea:39:75:4e:18:1d:4d:de:88:5a:99:0c:e3:7d: d5:17:00:c3:e4:50:1a:8e:4a:e3:71:90:76:07:a9:48:75:6c: 60:5e:76:bc:af:08:ea:5f:52:db:0c:9c:86:ed:3e:10:c3:d4: 12:92:e8:e1:2c:73:a2:83:b1:96:1c:42:4b:02:26:fb:23:92: 66:2a:9a:81:ff:f2:f8:2b:bb:90:5a:86:45:08:b9:59:6d:c4: 9c:f2:d0:55:a6:bf:90:0a:1d:97:e6:7d:83:9c:ad:3b:af:13: 95:a7:2d:c8:e4:fb:83:af:8e:82:a8:c7:42:47:33:d7:3d:c7: 8a:74:d3:a9:f8:60:a9:2b:ba:b0:a7:54:2f:1c:7c:5b:76:8b: 8d:e0:1a:cb:73:5e:c1:35:51:8b:5d:80:d6:db:b4:02:b3:02: 62:f7:eb:29:1b:7d:0d:16:4b:4b:1f:ad:cd:ee:0e:a9:a2:1c: 0b:1b:f0:35:97:07:c4:58:78:65:72:c3:33:83:35:2d:d1:82: aa:87:2c:95:36:bb:45:93:55:f6:24:b5:ed:7f:4e:b0:05:16: fe:0b:31:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUwNDA2MjMyMjU5WhcNMjUwNDEzMjMyMjU5WjAYMRYwFAYD VQQDEw02N2YzMGNkMy0yMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugE/b3C+2wMRHObuGDygKp0S3a7u4NiJZPRz3u67RUCJULxh1GoIceQ18vUY 4aFYzEWPzj+5uofRFM4iXLJjozZ+mqZQ9V6yNDOw4pW+4yHnPGvi3QM15GniqrOg MdWxFo5Uz8fE1iuGvDryDORRHbvuvTJSu4U66RCwsiXA+O0lFvyLb4MqWGPMQkUp kJJr5R+d29q8u94dWHRvoCst0JjzlN+lYq5kngCUDvBZKFi50QiCIIt4iXauTMoA 1uxBn934dTCZqmqAfXrsLMADP3ak7vEKJJOP+kjkMwwb8qGV6zPJOTq41hoQ9gXG EeKdGP3JwJCoa6pAtpX/cBVVmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLKoUAI C6AIBjluOrby4+oCFtHUMB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNyzTa0bXSQ7/mX7JvysQ9Z8GFrunGFJyqjp0m08dLef/XGT+ZJOfz 6jl1ThgdTd6IWpkM433VFwDD5FAajkrjcZB2B6lIdWxgXna8rwjqX1LbDJyG7T4Q w9QSkujhLHOig7GWHEJLAib7I5JmKpqB//L4K7uQWoZFCLlZbcSc8tBVpr+QCh2X 5n2DnK07rxOVpy3I5PuDr46CqMdCRzPXPceKdNOp+GCpK7qwp1QvHHxbdouN4BrL c17BNVGLXYDW27QCswJi9+spG30NFktLH63N7g6pohwLG/A1lwfEWHhlcsMzgzUt 0YKqhyyVNrtFk1X2JLXtf06wBRb+CzED -----END CERTIFICATE-----Generated at Mon Apr 7 17:24:50 2025 by rpki-client