$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: gFIS0eFjIonLkVmwpAx/+DhHr3nRfnUOXKt6zwVgt3o= Subject key identifier: E0:B4:61:F6:23:FA:32:E5:29:CF:FE:C5:6A:3D:33:CF:5B:5E:A0:B7 Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 34BD Signing time: Fri 04 Apr 2025 14:41:39 +0000 Manifest this update: Fri 04 Apr 2025 14:41:39 +0000 Manifest next update: Fri 11 Apr 2025 14:41:39 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: 4rAnowyCnsvvq75mM0G/MuOzMKxbhdqRhty7EiV9S9s=) 2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: h9F1tXbUdsyNYFPUVJCB1ist/+nNZLk15lU+6OKai0c=) 3: 0537EDD4E37C11EA8C217816C4F9AE02.roa (hash: SqzEVckRy0F20kGZ/i2KdXyFceQ+W0O7xzAWCq702q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09 Validity Not Before: Apr 4 14:41:39 2025 GMT Not After : Apr 11 14:41:39 2025 GMT Subject: CN=67efefa3-bd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:c8:88:a5:1a:77:e3:bd:ee:86:99:ac:7c: 3f:01:7d:d9:b0:a7:21:37:95:34:5c:57:e3:76:9f: 17:cd:41:10:9d:cf:c0:d9:3d:6b:1b:3b:4b:56:61: 6a:b1:b4:a3:28:bc:48:b4:95:68:5e:79:ef:f2:88: 16:a3:53:d6:08:1b:e5:7c:b7:7b:7f:f4:b3:52:6c: 11:68:df:3d:8f:b3:b9:c2:ed:83:a7:06:ae:08:e8: f1:ba:16:e3:64:bc:8f:d1:2d:61:5f:b7:6b:b9:f5: 63:71:87:0a:5b:5c:2c:7d:42:29:83:9b:49:6e:43: 08:53:db:3f:72:14:bc:92:d7:83:56:f0:89:95:7c: d6:84:e9:d2:97:a4:41:43:99:c2:b4:97:82:77:ba: e5:8a:14:bd:59:81:d0:93:72:4b:3f:de:97:7f:a5: ce:b1:8b:27:76:14:57:12:66:ee:87:f3:77:10:77: 71:b7:df:de:96:ea:c5:af:0a:63:b5:e1:79:74:ec: 1e:f0:79:5b:61:fd:2c:71:3b:4a:87:05:cd:46:e1: 3b:2b:78:bd:d6:75:c5:b5:b9:40:75:12:94:43:ab: a3:be:e6:9c:a6:36:e0:ea:ba:e0:23:f7:9e:5a:3b: 95:5e:06:58:53:1a:d9:e2:57:d7:5e:db:e5:98:79: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B4:61:F6:23:FA:32:E5:29:CF:FE:C5:6A:3D:33:CF:5B:5E:A0:B7 X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9e:aa:2e:2d:c5:9e:f1:f5:e9:d1:79:39:1f:0d:0e:a7:ef: 20:d5:ac:55:c3:cb:09:ec:11:42:ad:29:67:83:59:9e:7a:04: f6:9e:73:e0:f8:8d:6f:02:87:83:1a:3f:a2:45:70:15:11:29: a6:95:85:45:30:5d:c5:6b:ae:d8:a9:0f:69:e1:17:08:7e:96: 1e:b3:c9:d2:15:b2:af:5f:5e:45:00:cf:0c:18:11:ad:bf:47: dd:07:ec:59:82:a3:6a:a3:67:a6:92:54:fa:ce:d2:fa:cd:ea: ec:c3:c0:e0:3f:4a:56:eb:02:01:48:c0:39:8f:82:fc:c6:a3: 3c:84:8d:41:58:c4:5e:6f:12:73:6e:ee:56:d6:40:f5:a7:db: 2d:0a:1a:36:00:63:12:cf:4f:2d:21:08:20:73:65:f7:fa:bb: 32:ea:52:aa:76:19:78:da:f6:f2:f5:24:4a:dd:a4:8d:50:93: 31:57:05:93:24:d1:39:a0:79:ae:0d:b4:53:1b:fe:e4:73:c2: f9:31:7c:aa:a7:04:a7:3b:de:54:f0:b3:82:33:bf:c3:68:ec: 8e:4a:12:85:36:7d:b1:f1:b1:c5:bb:3f:57:cf:2f:77:a6:63: 1b:d6:91:0b:b2:d7:ff:7e:7f:d8:35:a5:90:05:90:49:15:77: 4a:c5:b0:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjUwNDA0MTQ0MTM5WhcNMjUwNDExMTQ0MTM5WjAYMRYwFAYD VQQDEw02N2VmZWZhMy1iZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2/IiKUad+O97oaZrHw/AX3ZsKchN5U0XFfjdp8XzUEQnc/A2T1rGztLVmFq sbSjKLxItJVoXnnv8ogWo1PWCBvlfLd7f/SzUmwRaN89j7O5wu2DpwauCOjxuhbj ZLyP0S1hX7drufVjcYcKW1wsfUIpg5tJbkMIU9s/chS8kteDVvCJlXzWhOnSl6RB Q5nCtJeCd7rlihS9WYHQk3JLP96Xf6XOsYsndhRXEmbuh/N3EHdxt9/elurFrwpj teF5dOwe8HlbYf0scTtKhwXNRuE7K3i91nXFtblAdRKUQ6ujvuacpjbg6rrgI/ee WjuVXgZYUxrZ4lfXXtvlmHmX3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC0YfYj +jLlKc/+xWo9M89bXqC3MB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLnqouLcWe8fXp0Xk5Hw0Op+8g1axVw8sJ7BFCrSlng1meegT2nnPg +I1vAoeDGj+iRXAVESmmlYVFMF3Fa67YqQ9p4RcIfpYes8nSFbKvX15FAM8MGBGt v0fdB+xZgqNqo2emklT6ztL6zersw8DgP0pW6wIBSMA5j4L8xqM8hI1BWMRebxJz bu5W1kD1p9stCho2AGMSz08tIQggc2X3+rsy6lKqdhl42vby9SRK3aSNUJMxVwWT JNE5oHmuDbRTG/7kc8L5MXyqpwSnO95U8LOCM7/DaOyOShKFNn2x8bHFuz9Xzy93 pmMb1pELstf/fn/YNaWQBZBJFXdKxbAz -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:53 2025 by rpki-client