$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json) Hash identifier: +8elHuU2r1hFzjdjUDFdeRtiaR4ffWA/9LVLtLq9KfE= Subject key identifier: 36:81:02:E4:F3:C6:A8:DF:18:67:DB:43:05:43:17:DC:77:72:EB:15 Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB Certificate serial: 1119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft Manifest number: 1109 Signing time: Fri 04 Apr 2025 17:22:26 +0000 Manifest this update: Fri 04 Apr 2025 17:22:26 +0000 Manifest next update: Fri 11 Apr 2025 17:22:26 +0000 Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: m6IdVA0lPs0EGB965YVN/OCuiqpfgfoZArIYWNMssoQ=) 2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=) 3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4377 (0x1119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196172 Validity Not Before: Apr 4 17:22:26 2025 GMT Not After : Apr 11 17:22:26 2025 GMT Subject: CN=67f01552-bb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:6c:99:8f:21:18:0d:97:43:35:ab:ef:90: 1d:27:ea:73:64:39:20:ec:18:63:c3:e5:7b:0f:ca: 9d:96:09:04:91:4f:25:35:f1:5d:ed:21:2f:d9:24: 36:54:d6:cd:b0:67:8f:62:9d:d1:2c:9a:b4:c2:41: 31:54:cc:0c:29:3c:b7:0b:40:a2:3b:85:6c:c8:b7: 99:34:15:a4:8f:d4:26:ad:b2:14:9f:c5:78:fe:a9: 61:7a:e3:2c:c9:91:a4:25:65:d0:46:eb:86:3b:d4: 5f:d6:27:76:ce:d8:8b:2d:66:04:55:f2:e4:cc:a7: a5:e9:57:b2:7f:35:2a:ec:cd:17:7f:6f:54:3a:fe: a0:0c:e9:ac:1f:44:98:71:af:86:12:b1:bf:cf:ef: 7e:c0:8a:2e:46:c9:d6:60:4b:35:d4:95:a7:56:c6: 7e:95:0a:aa:df:e7:35:77:3b:8d:8d:e0:e8:3e:d1: f3:d6:05:73:b6:d7:8b:60:05:28:33:ef:68:af:f0: b8:e1:e4:92:bf:0f:f0:06:db:59:2a:62:05:b5:31: 28:5c:b5:cd:d9:d6:fa:54:25:75:8c:9e:83:75:90: ea:3d:c4:d2:85:7d:8a:d3:4f:dd:9a:8d:a7:e2:f0: 83:d1:0c:97:20:76:e7:d2:a8:8b:10:30:60:d3:03: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:02:E4:F3:C6:A8:DF:18:67:DB:43:05:43:17:DC:77:72:EB:15 X509v3 Authority Key Identifier: keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f9:a5:e0:da:20:3c:1a:bd:c2:59:76:24:cd:a8:03:69:03: 6d:e5:bf:0e:ff:2f:97:bc:a4:01:70:2e:a7:cb:53:78:7a:0e: 75:07:76:07:6e:ad:33:19:e1:a2:26:81:3f:6e:f5:09:4d:a5: a7:05:27:57:b9:41:9f:7b:19:40:4c:73:b3:17:34:cb:c9:43: 0a:83:ba:6c:a9:2c:0b:cb:48:d1:d9:15:f1:87:ad:4e:d7:3d: 46:d5:a7:67:62:36:33:0c:1b:1b:12:7b:e7:6c:61:43:f0:63: 17:a5:87:d0:5b:13:06:1d:c8:de:66:2d:b6:11:ed:29:24:8b: 74:df:b6:40:a7:0f:b4:b3:48:1c:3e:a9:41:03:88:10:07:a7: 68:a8:cf:1f:5b:a7:7a:1a:0f:ae:ec:8d:04:1d:e7:60:0e:7c: 00:6b:78:43:a2:07:61:42:05:68:3a:6e:c3:3d:8f:e7:b6:0b: 1e:1f:45:77:c3:fd:04:21:ad:82:b9:08:89:9a:bb:22:8c:d4: 5d:08:15:59:12:22:96:f4:44:b8:98:be:13:85:68:b0:b2:57: 70:b5:a3:1b:c4:8a:79:e1:03:9a:58:40:7d:0c:5c:9c:5f:f4: 37:5d:41:0d:3e:a9:c0:74:95:db:da:14:eb:12:5f:4c:d1:ba: 96:f5:5f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE MDBDNDQ3REIwHhcNMjUwNDA0MTcyMjI2WhcNMjUwNDExMTcyMjI2WjAYMRYwFAYD VQQDEw02N2YwMTU1Mi1iYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bVsmY8hGA2XQzWr75AdJ+pzZDkg7Bhjw+V7D8qdlgkEkU8lNfFd7SEv2SQ2 VNbNsGePYp3RLJq0wkExVMwMKTy3C0CiO4VsyLeZNBWkj9QmrbIUn8V4/qlheuMs yZGkJWXQRuuGO9Rf1id2ztiLLWYEVfLkzKel6VeyfzUq7M0Xf29UOv6gDOmsH0SY ca+GErG/z+9+wIouRsnWYEs11JWnVsZ+lQqq3+c1dzuNjeDoPtHz1gVztteLYAUo M+9or/C44eSSvw/wBttZKmIFtTEoXLXN2db6VCV1jJ6DdZDqPcTShX2K00/dmo2n 4vCD0QyXIHbn0qiLEDBg0wPJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaBAuTz xqjfGGfbQwVDF9x3cusVMB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2 WmpXOXItQWkxNFhRREVSOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw+aXg2iA8Gr3CWXYkzagDaQNt5b8O/y+XvKQBcC6ny1N4eg51B3YH bq0zGeGiJoE/bvUJTaWnBSdXuUGfexlATHOzFzTLyUMKg7psqSwLy0jR2RXxh61O 1z1G1adnYjYzDBsbEnvnbGFD8GMXpYfQWxMGHcjeZi22Ee0pJIt037ZApw+0s0gc PqlBA4gQB6doqM8fW6d6Gg+u7I0EHedgDnwAa3hDogdhQgVoOm7DPY/ntgseH0V3 w/0EIa2CuQiJmrsijNRdCBVZEiKW9ES4mL4ThWiwsldwtaMbxIp54QOaWEB9DFyc X/Q3XUENPqnAdJXb2hTrEl9M0bqW9V8u -----END CERTIFICATE-----Generated at Sun Apr 6 06:43:34 2025 by rpki-client