$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: wSs5Z/UF273JqR3eMbUtfbdx5IvGjEBE3EvqTb63gbU= Subject key identifier: 27:FE:BA:51:81:47:75:C7:DE:F0:29:1B:56:13:51:62:A4:81:99:CA Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0113 Signing time: Fri 11 Apr 2025 04:08:12 +0000 Manifest this update: Fri 11 Apr 2025 04:08:12 +0000 Manifest next update: Fri 18 Apr 2025 04:08:12 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: 5QrwstuOrSVobjbXIw5/r3Vv74TgxeLi2Bm5sy0GTCI=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Apr 11 04:08:12 2025 GMT Not After : Apr 18 04:08:12 2025 GMT Subject: CN=67f895ac-13f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:b9:56:a2:cd:8f:5f:e1:4b:3d:cb:46:0f: d7:df:fa:60:c8:c1:24:3d:c1:53:39:7f:b7:df:e2: a6:09:9c:dd:9c:f3:0b:b3:56:78:ca:26:a3:b7:08: 79:e7:57:f4:41:92:c3:31:a3:59:7e:d5:43:65:6b: 02:c5:eb:1b:a3:19:d7:b5:a1:27:30:de:9a:7c:c5: 35:38:83:2e:cd:a7:b7:2c:b3:2f:1d:1f:32:4e:68: d9:59:ee:f6:f7:42:23:96:8b:85:20:d0:f1:2f:3a: 2e:5c:bf:8c:46:11:e9:17:83:5f:e4:89:b7:7c:65: e6:f2:5f:fd:2c:21:20:58:ea:ff:e6:db:ef:2e:97: a0:7b:50:21:1b:ae:3c:1d:ba:49:55:80:5f:8a:71: 5a:82:6e:35:15:6f:6c:51:bd:16:5f:6f:42:16:70: 14:a1:ab:b8:57:41:2f:2d:39:c2:aa:70:a2:3b:2c: 0b:5d:ac:76:d1:8c:d3:15:a6:b0:69:7c:3f:26:5f: bb:f2:03:9c:01:50:bc:b9:4c:84:cb:78:31:68:01: 24:85:d9:4c:8c:23:94:4d:1d:0a:8b:45:a2:0f:bc: 15:8a:38:df:f3:95:33:f9:e5:ee:55:4b:78:ba:84: 0b:a4:8d:9e:cf:d0:84:af:a8:4d:7e:8d:d7:2f:6c: 7e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FE:BA:51:81:47:75:C7:DE:F0:29:1B:56:13:51:62:A4:81:99:CA X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e0:78:c6:13:70:fb:d1:cb:87:ee:2c:60:d9:39:9c:9d:53: 7b:c8:0a:21:99:7e:3c:2b:fe:ea:3b:1f:17:e4:c6:30:00:79: fa:53:20:75:c0:b1:5d:1b:93:84:16:bc:e4:dc:d4:25:f4:2d: ad:f1:8d:f6:92:78:70:a6:0a:cb:7c:28:32:10:86:85:ac:21: b3:aa:a8:21:6d:92:6a:87:28:6b:ba:f2:4e:b0:a0:65:2c:3c: 14:87:93:ca:86:6f:90:9c:2a:35:85:04:8b:ec:24:cf:b9:f6: cc:55:2e:4e:3e:5b:06:f1:47:da:61:19:cd:99:1a:cd:30:57: 25:9f:ba:39:46:9b:23:a6:59:8e:1e:25:45:37:c3:aa:9e:c8: c7:df:b8:08:f5:e6:42:9b:34:7f:5e:05:22:1d:22:2f:b9:57: 64:56:f1:59:50:55:55:e4:be:46:04:6c:df:bb:24:19:fb:74: 10:6b:2f:6f:cb:bd:de:41:82:04:40:80:50:82:4b:70:c5:d1: e6:54:01:fe:d1:8f:c2:a6:b2:f4:4b:02:68:8d:e6:75:91:34: 3b:78:6c:ef:c5:1b:09:14:47:e1:66:98:c0:6e:50:5b:6f:57: da:3d:7b:63:6c:51:da:2f:e3:c3:26:7c:f0:3e:1b:65:e0:12: f8:0c:e4:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwNDExMDQwODEyWhcNMjUwNDE4MDQwODEyWjAYMRYwFAYD VQQDEw02N2Y4OTVhYy0xM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJa5VqLNj1/hSz3LRg/X3/pgyMEkPcFTOX+33+KmCZzdnPMLs1Z4yiajtwh5 51f0QZLDMaNZftVDZWsCxesboxnXtaEnMN6afMU1OIMuzae3LLMvHR8yTmjZWe72 90IjlouFINDxLzouXL+MRhHpF4Nf5Im3fGXm8l/9LCEgWOr/5tvvLpege1AhG648 HbpJVYBfinFagm41FW9sUb0WX29CFnAUoau4V0EvLTnCqnCiOywLXax20YzTFaaw aXw/Jl+78gOcAVC8uUyEy3gxaAEkhdlMjCOUTR0Ki0WiD7wVijjf85Uz+eXuVUt4 uoQLpI2ez9CEr6hNfo3XL2x+XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCf+ulGB R3XH3vApG1YTUWKkgZnKMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB14HjGE3D70cuH7ixg2TmcnVN7yAohmX48K/7qOx8X5MYwAHn6UyB1 wLFdG5OEFrzk3NQl9C2t8Y32knhwpgrLfCgyEIaFrCGzqqghbZJqhyhruvJOsKBl LDwUh5PKhm+QnCo1hQSL7CTPufbMVS5OPlsG8UfaYRnNmRrNMFcln7o5RpsjplmO HiVFN8OqnsjH37gI9eZCmzR/XgUiHSIvuVdkVvFZUFVV5L5GBGzfuyQZ+3QQay9v y73eQYIEQIBQgktwxdHmVAH+0Y/CprL0SwJojeZ1kTQ7eGzvxRsJFEfhZpjAblBb b1faPXtjbFHaL+PDJnzwPhtl4BL4DOSa -----END CERTIFICATE-----Generated at Sat Apr 12 17:45:26 2025 by rpki-client