$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft File: 9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json) Hash identifier: JqOuJsjAoRpIFKu11kI6jIDKZNtqZtkXdPDj3AL9EIU= Subject key identifier: 86:EA:BE:0B:5F:F5:14:F6:D7:3C:C3:86:49:64:AF:4F:70:73:4E:E0 Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 Certificate issuer: /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft Manifest number: 0A8E Signing time: Fri 04 Apr 2025 19:43:22 +0000 Manifest this update: Fri 04 Apr 2025 19:43:21 +0000 Manifest next update: Fri 11 Apr 2025 19:43:21 +0000 Files and hashes: 1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: FepH9PI17g9BDl/HwfkefUWEL3ITLuzmW3modcipmRY=) 2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=) 3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: uIlmxyBkIRVTtfqtlVJMMghD2D4RDYW/jdv8jycrnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EAFB Validity Not Before: Apr 4 19:43:21 2025 GMT Not After : Apr 11 19:43:21 2025 GMT Subject: CN=67f03659-7893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:62:03:e2:51:56:9e:ce:50:05:b4:3e:5a: de:e1:6f:fd:84:a6:b7:9d:73:ff:75:80:4b:2f:11: 0a:ff:94:95:22:d2:cd:8c:d4:16:3d:c3:f3:8c:c0: ec:73:ad:b5:02:76:16:17:2b:ac:93:4e:32:92:bb: fa:dd:26:72:19:d6:aa:0f:b6:24:f8:d4:9e:10:54: c6:79:53:ad:ef:67:5e:b8:a0:b3:aa:1b:57:45:5b: b4:51:d8:56:89:b5:c8:ea:e1:cb:d7:da:58:3e:2c: 5b:f1:81:5d:37:7f:0b:23:d9:98:21:86:0a:e8:25: 2d:1b:90:37:8d:06:cd:47:a5:01:a3:e5:72:d8:fc: 3e:69:39:83:e1:14:db:ce:19:6b:fb:11:1f:5b:30: d2:78:9e:56:45:ef:9f:57:44:99:68:2e:b0:6f:89: 5e:9a:77:ec:5c:e9:d5:01:dd:c7:d7:d5:82:f0:90: 59:45:36:64:b9:00:5f:8d:e2:38:0c:2f:a9:87:50: a6:a0:f0:63:14:79:7b:09:2f:20:c5:ac:5e:96:62: a3:a0:1c:02:37:57:fc:c2:32:50:f7:6d:5d:5f:be: b7:51:15:32:59:9c:71:57:c2:29:f3:13:dd:ff:f4: a2:dd:15:ec:8e:e6:2b:86:c2:80:b0:0e:c6:bd:5c: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:BE:0B:5F:F5:14:F6:D7:3C:C3:86:49:64:AF:4F:70:73:4E:E0 X509v3 Authority Key Identifier: keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:92:92:92:06:cf:a1:65:6b:76:f9:f6:34:79:da:92:c4:e9: 26:cc:b7:d9:d3:68:ea:4a:d6:c0:11:c1:d4:76:84:7d:ed:b8: ca:4a:72:ad:3e:9d:a8:17:da:fb:42:8b:b0:4a:1a:9d:57:0a: 34:b7:67:3a:82:e9:24:fe:0c:fe:30:3e:97:09:57:34:b1:be: 2f:cb:22:0a:14:d7:af:6e:56:33:56:2b:53:9b:5d:c4:cc:85: 31:0f:7c:af:59:82:08:3e:3f:80:6d:a6:f2:c3:c4:25:7d:d4: 36:45:ba:33:04:02:f6:89:6e:0c:d7:d8:ac:21:54:fa:c4:dc: 98:d7:b0:29:c7:20:4c:67:8b:c2:db:45:ef:ae:8c:69:32:6e: 3a:fd:5b:6a:39:00:ca:fc:8d:2b:e2:32:5e:06:5c:ec:d3:78: fd:73:2d:14:56:82:a3:73:6f:7b:3e:3a:92:ad:25:3a:58:1b: 04:4a:ed:c4:76:28:f3:b6:04:3a:03:6f:e2:d9:b8:b5:d3:0d: fb:f2:00:e8:7a:fb:61:65:05:d3:54:f3:7f:b5:d4:79:d9:8e: 64:d0:a0:1a:a9:a0:8f:9c:57:9e:43:7c:42:94:ba:16:bb:ea: 97:1a:99:75:30:0f:f7:30:8e:dc:a7:61:e1:d9:c8:06:fd:f3: 96:ba:9b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD NEVFNzNGRjEwHhcNMjUwNDA0MTk0MzIxWhcNMjUwNDExMTk0MzIxWjAYMRYwFAYD VQQDEw02N2YwMzY1OS03ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwh5iA+JRVp7OUAW0Plre4W/9hKa3nXP/dYBLLxEK/5SVItLNjNQWPcPzjMDs c621AnYWFyusk04ykrv63SZyGdaqD7Yk+NSeEFTGeVOt72deuKCzqhtXRVu0UdhW ibXI6uHL19pYPixb8YFdN38LI9mYIYYK6CUtG5A3jQbNR6UBo+Vy2Pw+aTmD4RTb zhlr+xEfWzDSeJ5WRe+fV0SZaC6wb4lemnfsXOnVAd3H19WC8JBZRTZkuQBfjeI4 DC+ph1CmoPBjFHl7CS8gxaxelmKjoBwCN1f8wjJQ921dX763URUyWZxxV8Ip8xPd //Si3RXsjuYrhsKAsA7GvVzojwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbqvgtf 9RT21zzDhklkr09wc07gMB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0 RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUFGQi8wOTRGNzQ2RTU0RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBR RDZtZHZVZ002TUxFN25QX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHkpKSBs+hZWt2+fY0edqSxOkmzLfZ02jqStbAEcHUdoR97bjKSnKt Pp2oF9r7QouwShqdVwo0t2c6gukk/gz+MD6XCVc0sb4vyyIKFNevblYzVitTm13E zIUxD3yvWYIIPj+Ababyw8QlfdQ2RbozBAL2iW4M19isIVT6xNyY17ApxyBMZ4vC 20XvroxpMm46/VtqOQDK/I0r4jJeBlzs03j9cy0UVoKjc297PjqSrSU6WBsESu3E dijztgQ6A2/i2bi10w378gDoevthZQXTVPN/tdR52Y5k0KAaqaCPnFeeQ3xClLoW u+qXGpl1MA/3MI7cp2Hh2cgG/fOWupsl -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:42 2025 by rpki-client