$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: Kw5KyAp7A9lypda4VGiLd5l6/xk4kGoNb5NCG2hkWQ4= Subject key identifier: D4:57:12:4A:3C:71:30:F9:04:EA:FD:87:11:72:46:E6:A1:3B:77:0D Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1BB8 Signing time: Fri 04 Apr 2025 16:16:59 +0000 Manifest this update: Fri 04 Apr 2025 16:16:59 +0000 Manifest next update: Fri 11 Apr 2025 16:16:59 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: inyXsSZ9wUw1EGWrpLWoMo67bkIu6T3F/J8+JbB6nlc=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7108 (0x1bc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346 Validity Not Before: Apr 4 16:16:59 2025 GMT Not After : Apr 11 16:16:59 2025 GMT Subject: CN=67f005fb-a3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:4b:6b:9d:e5:97:54:5d:5d:ac:33:0e:09: a5:77:4f:9e:a1:74:24:30:24:df:d1:75:ae:62:1e: e9:68:44:88:06:42:b0:d8:37:8a:76:55:b0:11:e8: 66:f1:89:f9:c1:01:39:d2:3d:25:1f:66:f8:22:8e: fc:be:b1:f3:09:b0:af:83:ab:d5:7c:7e:83:62:5e: 25:51:0e:9d:6c:f3:93:b8:38:41:1a:80:1e:c3:2e: b1:38:3c:cf:21:f2:fd:1c:b1:bd:d7:84:cb:71:42: d0:c6:88:53:ca:1e:15:64:ac:11:8b:a7:e7:6a:5a: b0:b9:e2:40:36:0b:f5:85:aa:46:b6:b4:e2:09:2f: fe:12:bb:4e:be:46:19:cf:95:e5:0d:6b:fd:a4:29: d7:77:f0:f2:0c:52:d8:a2:f1:35:57:c2:7e:23:19: 16:d1:f9:24:ab:52:f4:05:10:d5:29:df:03:27:5f: 63:3c:af:6e:3e:b4:fe:9b:f1:3a:78:7a:05:1c:13: 3d:10:07:de:db:87:7e:bc:12:33:81:b1:cf:e3:46: 35:96:7c:0c:f1:22:c0:31:56:9d:34:42:60:00:58: 27:40:fb:5c:39:fc:3c:86:13:4d:3a:98:09:2d:de: cb:91:82:62:e6:4f:83:d6:69:a3:47:df:60:c7:5f: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:57:12:4A:3C:71:30:F9:04:EA:FD:87:11:72:46:E6:A1:3B:77:0D X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d6:30:25:b6:5d:d4:14:aa:60:b0:c6:0f:7d:4a:29:ff:56: 97:eb:09:c2:5d:a6:a0:9c:f0:37:a4:03:49:88:35:c5:54:c1: ad:66:d3:61:24:27:a0:8d:ad:6b:b9:0b:0e:ef:d5:da:c5:36: 4b:43:65:cc:d0:f2:f7:9c:d7:a6:f1:e6:b3:a7:5f:9c:f1:68: 9b:d3:82:26:a1:d3:62:fb:40:87:98:e6:37:c7:8c:da:84:6d: 45:fb:0e:fd:dc:39:54:a9:c4:6b:a6:7e:17:34:b3:1f:07:cf: b9:5e:66:60:73:40:05:1e:d5:b6:5c:9a:ca:c9:c7:ed:4f:85: c8:57:e6:9c:ac:69:f0:35:4e:05:3f:c4:4b:32:fd:9c:21:3f: 62:10:65:28:53:91:39:8f:39:19:a8:46:36:ed:ea:89:fa:f1: 55:67:de:a8:6e:1f:b9:db:46:f0:97:10:c9:9a:20:a2:3c:53: d7:74:a5:34:73:7c:80:5a:9f:ff:70:ff:a8:6d:66:10:39:49: 0d:a8:44:c0:39:09:90:24:c1:3f:0a:a6:fc:a3:80:25:81:b1: 4f:cd:35:30:e7:53:a9:2d:8c:03:b5:2a:42:33:67:39:ed:5c: eb:16:27:2d:c4:37:23:8d:60:e0:cd:a7:c5:77:63:2a:8e:9b: c7:c5:0b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjUwNDA0MTYxNjU5WhcNMjUwNDExMTYxNjU5WjAYMRYwFAYD VQQDEw02N2YwMDVmYi1hM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFlLa53ll1RdXawzDgmld0+eoXQkMCTf0XWuYh7paESIBkKw2DeKdlWwEehm 8Yn5wQE50j0lH2b4Io78vrHzCbCvg6vVfH6DYl4lUQ6dbPOTuDhBGoAewy6xODzP IfL9HLG914TLcULQxohTyh4VZKwRi6fnalqwueJANgv1hapGtrTiCS/+ErtOvkYZ z5XlDWv9pCnXd/DyDFLYovE1V8J+IxkW0fkkq1L0BRDVKd8DJ19jPK9uPrT+m/E6 eHoFHBM9EAfe24d+vBIzgbHP40Y1lnwM8SLAMVadNEJgAFgnQPtcOfw8hhNNOpgJ Ld7LkYJi5k+D1mmjR99gx1+/UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRXEko8 cTD5BOr9hxFyRuahO3cNMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU1jAltl3UFKpgsMYPfUop/1aX6wnCXaagnPA3pANJiDXFVMGtZtNh JCegja1ruQsO79XaxTZLQ2XM0PL3nNem8eazp1+c8Wib04ImodNi+0CHmOY3x4za hG1F+w793DlUqcRrpn4XNLMfB8+5XmZgc0AFHtW2XJrKycftT4XIV+acrGnwNU4F P8RLMv2cIT9iEGUoU5E5jzkZqEY27eqJ+vFVZ96obh+520bwlxDJmiCiPFPXdKU0 c3yAWp//cP+obWYQOUkNqETAOQmQJME/Cqb8o4AlgbFPzTUw51OpLYwDtSpCM2c5 7VzrFictxDcjjWDgzafFd2MqjpvHxQuD -----END CERTIFICATE-----Generated at Sat Apr 5 21:08:49 2025 by rpki-client