$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: nSEJMiL4S+Io2VxdCiOsGGMGkHdWtLh3k6AbfR8ofyI= Subject key identifier: 45:AC:67:1C:1E:50:90:18:AF:DE:CB:06:BC:97:A7:EF:26:58:39:82 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: EF Signing time: Fri 11 Apr 2025 04:32:08 +0000 Manifest this update: Fri 11 Apr 2025 04:32:08 +0000 Manifest next update: Fri 18 Apr 2025 04:32:08 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: EpRJOj2V0wQ7yXgmdE6ps4SfAPuvq2yZv327RzSuzWE=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: avXsfjELw9kpDvws2JPtdoH0HM/yAF3dKj0UAvRbtj0=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: EikgtLBFZ+GcMX0vibVaRvnZCJfkspVWoQB1eoPQJJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Apr 11 04:32:08 2025 GMT Not After : Apr 18 04:32:08 2025 GMT Subject: CN=67f89b48-3f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:9b:f4:97:08:af:6f:ae:93:8b:a5:47:25: 4b:df:0a:c6:24:68:fc:3d:3e:fc:bf:a3:bc:50:01: 6d:86:21:50:d5:90:41:eb:40:f5:e6:42:02:22:01: 2f:93:b3:c4:6c:97:3d:b6:b7:b9:c5:13:0f:49:14: a0:c0:f7:2b:5f:dd:bd:e3:1f:ca:65:c7:e3:4a:23: f8:d8:7d:a1:4d:f5:08:4f:86:df:f0:d5:10:44:f8: 6a:30:e4:6f:5f:21:ec:b3:84:4f:34:fa:f3:73:9e: 21:5a:1e:50:b6:a4:4f:63:ee:83:12:ea:90:d0:3f: 21:7a:eb:ce:aa:9e:d5:37:29:97:1e:23:29:9c:8e: db:a2:4f:55:0e:5c:7d:64:22:84:a0:82:d1:7c:0e: 26:0d:b4:9b:64:90:e4:1b:6a:d4:51:c0:af:a6:e5: dc:a4:e2:b1:1f:b0:24:f7:25:b6:e8:99:bb:0c:b4: 51:1e:b1:ca:9a:33:22:78:b1:6a:47:31:5c:30:37: 62:da:ab:63:6b:f0:74:22:4e:37:6f:a9:78:8d:37: 9b:9e:c9:0d:5c:65:b2:69:39:b3:6a:f4:f0:ab:e8: 29:a0:70:d4:f5:db:51:0d:a9:54:8b:ec:61:b7:31: d6:2b:e3:61:2f:2d:20:93:4b:86:22:b4:08:cc:f5: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AC:67:1C:1E:50:90:18:AF:DE:CB:06:BC:97:A7:EF:26:58:39:82 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:1c:9c:2f:e3:23:17:60:a0:ff:c8:06:29:97:a6:06:a4: 24:00:c6:7d:fc:f5:ca:ab:0e:f7:94:08:75:b9:2f:e5:1b:e3: d5:70:3d:50:14:3a:b6:1d:63:d2:4f:e6:a8:f6:ea:b2:e8:07: 3a:75:d8:61:97:7c:a9:fc:99:8b:ed:a1:da:b5:34:af:0e:e2: b3:56:61:35:05:8e:af:bf:ba:83:a4:9c:88:92:66:6a:cc:e6: 12:0b:b4:23:df:ff:b2:81:11:17:49:8d:5c:f4:af:fa:cd:f8: ff:8e:81:50:62:48:2b:4d:1f:a6:cc:69:93:83:e3:87:64:d9: 55:48:84:eb:e8:41:86:5f:93:97:8d:a5:34:08:c7:b6:3d:a2: b7:fd:e9:cf:30:82:c8:3c:ea:7a:97:b1:e2:bc:e8:11:e6:33: d0:f8:4b:56:b2:d0:7c:16:4f:0a:e7:b0:cd:75:91:2f:0f:c8: e1:22:df:ad:1b:8f:6f:29:d6:ef:6b:dc:8a:32:e1:80:67:f3: b0:85:db:24:84:80:eb:76:af:11:a2:3e:7a:14:3a:f0:20:6f: 4f:23:ba:c7:05:7f:50:d0:0a:6a:87:9a:79:fd:59:83:e7:1d: b0:3f:dc:68:3a:c1:74:a0:4b:c5:c0:37:7e:4c:ad:5b:6e:32: 27:26:d5:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUwNDExMDQzMjA4WhcNMjUwNDE4MDQzMjA4WjAYMRYwFAYD VQQDEw02N2Y4OWI0OC0zZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc2b9JcIr2+uk4ulRyVL3wrGJGj8PT78v6O8UAFthiFQ1ZBB60D15kICIgEv k7PEbJc9tre5xRMPSRSgwPcrX9294x/KZcfjSiP42H2hTfUIT4bf8NUQRPhqMORv XyHss4RPNPrzc54hWh5QtqRPY+6DEuqQ0D8heuvOqp7VNymXHiMpnI7bok9VDlx9 ZCKEoILRfA4mDbSbZJDkG2rUUcCvpuXcpOKxH7Ak9yW26Jm7DLRRHrHKmjMieLFq RzFcMDdi2qtja/B0Ik43b6l4jTebnskNXGWyaTmzavTwq+gpoHDU9dtRDalUi+xh tzHWK+NhLy0gk0uGIrQIzPVtEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWsZxwe UJAYr97LBryXp+8mWDmCMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZPRycL+MjF2Cg/8gGKZemBqQkAMZ9/PXKqw73lAh1uS/lG+PVcD1Q FDq2HWPST+ao9uqy6Ac6ddhhl3yp/JmL7aHatTSvDuKzVmE1BY6vv7qDpJyIkmZq zOYSC7Qj3/+ygREXSY1c9K/6zfj/joFQYkgrTR+mzGmTg+OHZNlVSITr6EGGX5OX jaU0CMe2PaK3/enPMILIPOp6l7HivOgR5jPQ+EtWstB8Fk8K57DNdZEvD8jhIt+t G49vKdbva9yKMuGAZ/OwhdskhIDrdq8Roj56FDrwIG9PI7rHBX9Q0Apqh5p5/VmD 5x2wP9xoOsF0oEvFwDd+TK1bbjInJtXy -----END CERTIFICATE-----Generated at Sun Apr 13 04:33:31 2025 by rpki-client