$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json) Hash identifier: HcwMULePDEWJ+o080z+8snhsBAwlOMyloNcZUbW7GiM= Subject key identifier: 47:A0:B4:87:A5:A8:CC:A1:B1:59:60:83:A6:06:29:1F:3E:2D:DA:34 Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft Manifest number: E7 Signing time: Thu 03 Apr 2025 04:37:10 +0000 Manifest this update: Thu 03 Apr 2025 04:37:09 +0000 Manifest next update: Thu 10 Apr 2025 04:37:09 +0000 Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: Mb/PBls50ZaAUSuRkLX0jjadRxP7YKgpfeZsyiNXh8g=) 2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: lR8Bw6f2BJOLO8ooe7J/r1W5noPvKu/D4s9lgSl+fj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD Validity Not Before: Apr 3 04:37:09 2025 GMT Not After : Apr 10 04:37:09 2025 GMT Subject: CN=67ee1076-785e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:59:a7:69:84:19:17:3f:41:cf:18:1c:c8: 26:4a:0d:76:58:85:f4:4c:34:8f:11:44:45:7e:84: 64:a0:ae:68:1c:82:85:9b:a5:7c:05:09:8e:20:f8: 6c:16:6c:d9:c8:2b:10:af:79:e2:86:92:62:c0:f0: d8:dc:40:77:11:16:b3:44:66:ad:b0:53:17:e2:72: ed:21:76:19:7e:51:43:11:7d:2e:46:0c:c7:88:a3: a5:c8:7a:f2:17:99:f4:d5:b0:39:3d:d6:02:54:67: 42:98:75:c1:bd:79:e0:92:39:0d:d4:90:dc:21:8f: 8e:b5:dc:40:e7:40:85:ed:dc:6a:0f:df:ab:88:eb: ca:04:c9:a2:8e:e7:0a:67:fd:e8:d6:56:17:5a:f2: 6e:64:ff:b7:37:40:2e:58:67:29:61:28:56:d8:bd: 51:e9:d5:24:77:46:3d:95:af:88:ec:1c:c3:46:be: c1:40:ea:a1:af:ad:0a:fb:36:a3:80:f4:7f:a3:11: be:39:5c:8d:8a:16:24:c3:07:61:1a:7f:37:b4:a5: 1c:06:d5:aa:fb:15:2e:70:f9:70:3c:6c:51:e1:36: 79:fc:ed:63:fa:b7:ca:15:57:a2:54:32:53:9c:21: 5b:80:67:77:bb:1b:7f:98:b3:7b:b5:f7:8c:30:d9: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:B4:87:A5:A8:CC:A1:B1:59:60:83:A6:06:29:1F:3E:2D:DA:34 X509v3 Authority Key Identifier: keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8b:7c:09:fd:0b:c2:94:bf:bb:17:8a:d8:81:bd:de:59:2f: a1:2c:45:52:b4:50:11:12:4e:e5:fb:4a:88:e6:1d:9d:b9:96: 63:55:cb:97:19:0c:4c:67:79:10:9b:eb:26:e7:c4:32:a6:86: bd:aa:2e:64:9a:07:7c:7f:34:52:a7:ca:fd:1b:cc:4c:bf:35: 62:26:ff:8f:8a:47:57:51:be:3d:d8:4e:07:63:c9:42:9b:29: bb:34:fb:a2:58:ec:98:08:b9:44:32:0b:32:37:49:fe:15:f1: b7:59:55:34:08:22:d8:f3:f6:83:e6:d6:d4:5a:41:69:91:0f: b1:0e:1f:73:a2:3c:2a:5a:60:bd:55:38:37:9e:56:fc:a9:19: 21:20:cd:f1:59:4a:9f:d2:90:23:18:68:a0:31:31:e4:f7:17: 3d:02:62:76:01:6e:6b:cc:ce:7a:4e:a8:b2:f6:a3:26:3a:79: 1e:a2:57:5b:8a:8f:fe:6a:f7:67:94:9b:e3:6f:00:0e:2d:a7: af:e5:f7:25:15:1b:e6:23:9b:10:dd:c2:e2:a9:5d:6e:b2:c1: 3a:e4:d8:2c:a2:6f:f5:27:ed:72:a9:52:13:96:fd:1e:5c:da: 95:a2:23:a1:ff:db:2f:f3:90:c5:a3:02:c5:c8:ce:24:b5:b6: f5:b8:1d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKDE2N0Q2RUMzMkFEMEIzNTgxNUYyODg0N0FERDc5NzBF QjY3RjJEQkEwHhcNMjUwNDAzMDQzNzA5WhcNMjUwNDEwMDQzNzA5WjAYMRYwFAYD VQQDEw02N2VlMTA3Ni03ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6p9Zp2mEGRc/Qc8YHMgmSg12WIX0TDSPEURFfoRkoK5oHIKFm6V8BQmOIPhs FmzZyCsQr3nihpJiwPDY3EB3ERazRGatsFMX4nLtIXYZflFDEX0uRgzHiKOlyHry F5n01bA5PdYCVGdCmHXBvXngkjkN1JDcIY+OtdxA50CF7dxqD9+riOvKBMmijucK Z/3o1lYXWvJuZP+3N0AuWGcpYShW2L1R6dUkd0Y9la+I7BzDRr7BQOqhr60K+zaj gPR/oxG+OVyNihYkwwdhGn83tKUcBtWq+xUucPlwPGxR4TZ5/O1j+rfKFVeiVDJT nCFbgGd3uxt/mLN7tfeMMNmrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEegtIel qMyhsVlgg6YGKR8+Ldo0MB8GA1UdIwQYMBaAFBZ9bsMq0LNYFfKIR63Xlw62fy26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zRTQwMDY5OEIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMxZ1Y4b2hIcmRlWERyWl9M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuMXV3eXJRczFnVjhvaEhyZGVYRHJaX0xiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zRTQwMDY5OEIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMx Z1Y4b2hIcmRlWERyWl9MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfi3wJ/QvClL+7F4rYgb3eWS+hLEVStFAREk7l+0qI5h2duZZjVcuX GQxMZ3kQm+sm58Qypoa9qi5kmgd8fzRSp8r9G8xMvzViJv+PikdXUb492E4HY8lC mym7NPuiWOyYCLlEMgsyN0n+FfG3WVU0CCLY8/aD5tbUWkFpkQ+xDh9zojwqWmC9 VTg3nlb8qRkhIM3xWUqf0pAjGGigMTHk9xc9AmJ2AW5rzM56Tqiy9qMmOnkeoldb io/+avdnlJvjbwAOLaev5fclFRvmI5sQ3cLiqV1ussE65Ngsom/1J+1yqVITlv0e XNqVoiOh/9sv85DFowLFyM4ktbb1uB1E -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:42 2025 by rpki-client