$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: 7hINMb0Ocf9pDGaTpXp5+YdrJf+JLQUjAD0PQkCGvcw= Subject key identifier: 75:A8:50:15:56:48:2D:8F:57:A0:0F:F4:0B:89:8B:40:69:30:75:06 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 0319 Signing time: Sat 05 Apr 2025 01:20:32 +0000 Manifest this update: Sat 05 Apr 2025 01:20:31 +0000 Manifest next update: Sat 12 Apr 2025 01:20:31 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: SsKeL2x6DlIob+aKfNT0lJ31+gKioCtkdfa+mH+JSiM=) 2: 48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa (hash: MMIkwa2VF05y1vJp43/649+EQByZjCMwwH+3GumiKxU=) 3: EF789834F4DA11EFB3FF6B19C4F9AE02.roa (hash: x6KLXmxialEvQm9chZWjV+m4aGyDo45aTYp7F93yY6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08 Validity Not Before: Apr 5 01:20:31 2025 GMT Not After : Apr 12 01:20:31 2025 GMT Subject: CN=67f08560-05f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:b0:33:ac:82:d1:63:6f:f7:6a:9a:49:88: 9b:2c:ba:31:ab:00:bc:3d:aa:e9:c3:73:b2:5f:f7: 30:ef:3c:da:02:79:b0:e0:e2:c7:1a:58:f2:3b:fe: 11:b5:b9:7d:cf:5d:70:da:66:98:fb:73:96:a4:c0: 58:99:f3:17:ee:cd:e3:16:d2:c5:62:35:42:6f:a4: 0a:57:0b:bd:7c:48:6c:7a:70:52:c4:8d:3b:3d:55: 21:ab:31:4b:5b:18:47:47:4a:58:14:05:37:40:96: 26:00:28:e3:cc:83:86:f4:33:d0:7c:81:e4:e7:b3: 2e:74:bd:21:b8:a2:fb:7c:14:54:12:47:02:a4:04: 0b:6e:57:57:ee:e9:60:9b:ef:8a:da:0f:d1:f0:0e: dc:38:7f:04:ec:70:37:c3:a0:fe:8e:61:2a:2d:9e: e6:26:0d:6a:d3:14:15:7a:86:f3:74:de:cf:3a:0f: f8:3c:6f:89:fb:c4:28:69:3c:a2:7f:9f:81:46:16: 0f:3f:b7:36:af:05:00:52:a9:72:1e:c5:6e:76:34: 98:b1:40:db:fc:c0:16:e0:23:bb:60:5f:fa:b1:53: a6:a2:75:0d:37:4c:a1:b2:56:bf:3c:9f:6e:84:23: 72:9a:a8:df:a5:48:dc:d8:0c:2e:6b:73:44:98:cc: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A8:50:15:56:48:2D:8F:57:A0:0F:F4:0B:89:8B:40:69:30:75:06 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7a:4e:a1:4f:fc:3a:b4:be:80:91:29:db:78:3c:26:5e:d7: 79:a0:14:7b:00:f0:a8:9f:58:b4:c8:01:66:a4:e5:50:c0:ec: 40:07:3c:04:22:be:7e:52:ed:c3:75:ce:10:d1:aa:e8:31:a6: 9d:23:4b:21:40:d5:8e:ed:81:af:69:1b:ce:2c:1b:e9:16:ac: 1b:d4:a3:5a:3d:12:50:2c:63:ba:9f:ba:b8:bf:20:2f:a3:a3: ec:bc:5c:51:57:df:a0:d1:29:32:8d:10:12:c5:47:af:bc:07: 03:1c:a6:00:1c:8a:fe:cd:8b:da:57:b5:3a:2f:b0:e5:12:ca: df:2a:96:35:ad:d7:8c:90:ef:19:ae:fd:3a:31:74:2e:fb:f1: 5e:12:c9:47:33:e4:bf:ac:bb:9e:e2:bd:31:b0:1e:66:2e:71: ac:01:6b:3c:03:56:f5:08:f9:d2:2b:44:85:91:8d:29:48:69: a9:84:69:0d:bb:00:b0:44:9c:62:24:19:3d:ac:de:d9:c7:d5: ad:40:be:91:8c:a3:a2:db:12:d6:80:b9:c1:77:0f:7a:f7:72: d5:aa:a3:98:9a:f0:5a:dd:f8:25:3c:b5:01:df:a1:c3:06:04: 40:1f:ae:dc:f7:9f:c5:9d:dd:47:30:83:80:c2:10:cc:ca:cd: 5e:60:cb:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwNDA1MDEyMDMxWhcNMjUwNDEyMDEyMDMxWjAYMRYwFAYD VQQDEw02N2YwODU2MC0wNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMawM6yC0WNv92qaSYibLLoxqwC8Parpw3OyX/cw7zzaAnmw4OLHGljyO/4R tbl9z11w2maY+3OWpMBYmfMX7s3jFtLFYjVCb6QKVwu9fEhsenBSxI07PVUhqzFL WxhHR0pYFAU3QJYmACjjzIOG9DPQfIHk57MudL0huKL7fBRUEkcCpAQLbldX7ulg m++K2g/R8A7cOH8E7HA3w6D+jmEqLZ7mJg1q0xQVeobzdN7POg/4PG+J+8QoaTyi f5+BRhYPP7c2rwUAUqlyHsVudjSYsUDb/MAW4CO7YF/6sVOmonUNN0yhsla/PJ9u hCNymqjfpUjc2Awua3NEmMxaPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWoUBVW SC2PV6AP9AuJi0BpMHUGMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyek6hT/w6tL6AkSnbeDwmXtd5oBR7APCon1i0yAFmpOVQwOxABzwE Ir5+Uu3Ddc4Q0aroMaadI0shQNWO7YGvaRvOLBvpFqwb1KNaPRJQLGO6n7q4vyAv o6PsvFxRV9+g0SkyjRASxUevvAcDHKYAHIr+zYvaV7U6L7DlEsrfKpY1rdeMkO8Z rv06MXQu+/FeEslHM+S/rLue4r0xsB5mLnGsAWs8A1b1CPnSK0SFkY0pSGmphGkN uwCwRJxiJBk9rN7Zx9WtQL6RjKOi2xLWgLnBdw9693LVqqOYmvBa3fglPLUB36HD BgRAH67c95/Fnd1HMIOAwhDMys1eYMvp -----END CERTIFICATE-----Generated at Sat Apr 5 10:27:52 2025 by rpki-client