$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json) Hash identifier: WZ9HV2F/O6suLivSRX1Kpj9ZVBCAynKT/+1M88bzw/E= Subject key identifier: B1:71:C0:F2:0E:B5:F2:B2:82:F6:DA:F0:80:A0:DD:A7:42:9C:D1:81 Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7 Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft Manifest number: 0826 Signing time: Fri 04 Apr 2025 11:21:01 +0000 Manifest this update: Fri 04 Apr 2025 11:21:01 +0000 Manifest next update: Fri 11 Apr 2025 11:21:01 +0000 Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: zevNA85ivRP4hrkEx/t3Zlvv9SWw2sUAKQD1yVtjArk=) 2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: bJ+G9MG3W7qYSBJ4RYqHR8PoqTtxITLZWzgBT2V6Pr8=) 3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: 7nhlkenTW8+xvmT1j5rdicJEKIXjxqwvtJaZOI4Twq8=) 4: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: hEWt+XscoSIRvNspgT17O6QA8xkXvwSyDLinflFHJWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 11:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199197 Validity Not Before: Apr 4 11:21:01 2025 GMT Not After : Apr 11 11:21:01 2025 GMT Subject: CN=67efc09d-4be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:26:41:fc:97:e2:f3:cd:24:97:cd:dc:e1:17: ad:c4:0a:04:f9:3e:c7:d1:42:ff:d6:04:08:9d:f4: 14:37:b0:f9:c5:d9:03:0c:1d:93:28:67:05:ef:e5: d3:3f:7d:71:86:06:f9:83:d8:b2:57:00:2f:a6:57: 17:01:17:ca:7b:f2:c0:13:9a:be:f8:d0:4f:38:92: f1:57:90:04:19:33:66:3e:2e:88:f8:e2:f3:bc:9b: c4:3d:8b:26:00:ee:c4:0a:22:38:94:bb:da:ea:c0: 28:9a:72:97:1a:e6:4e:c6:3c:43:d5:cc:2c:10:25: b4:a0:29:d6:0c:56:48:47:6e:34:96:98:00:0e:3b: b2:3d:af:ac:8f:47:38:0c:af:95:86:7d:68:8a:60: 92:d6:c6:f3:f7:5a:9b:e1:2b:1f:61:90:b1:08:8a: 2f:01:08:ea:2e:72:2d:63:c0:bf:00:40:56:1a:a0: 13:48:8a:7b:b3:a5:77:19:30:01:2e:32:ad:c8:03: d6:92:d7:5c:02:09:2a:cb:07:10:f8:e9:f8:40:fd: 15:f7:f6:20:34:07:2e:45:a8:17:44:ac:a5:04:a6: c2:56:e1:1c:64:2e:bb:a2:19:27:5b:b8:5a:32:26: 29:bc:55:0e:77:93:6b:57:f8:55:d9:70:69:6c:f9: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:71:C0:F2:0E:B5:F2:B2:82:F6:DA:F0:80:A0:DD:A7:42:9C:D1:81 X509v3 Authority Key Identifier: keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:70:d6:cd:b4:36:9d:23:71:a1:5a:26:c0:36:d4:77:10:27: dc:c8:1a:f9:5b:79:fd:5f:eb:cf:0a:b0:cd:5f:a7:a3:3d:16: 85:ac:65:a6:75:c2:e9:36:9a:62:c0:fb:71:26:c2:a7:11:28: c4:a2:90:3b:c5:23:ef:38:59:af:a1:15:d3:08:96:18:f4:08: 9d:ba:33:93:fd:cb:1b:d6:a9:a4:f4:04:31:ee:f2:fa:ef:2d: 68:e0:64:a6:50:44:cd:99:92:25:87:34:7b:94:21:78:2c:63: f9:5a:3b:e2:e5:1e:da:7a:80:26:0a:b1:dc:d2:90:ab:b0:18: 9c:a2:bf:74:a4:13:de:76:d0:30:6e:13:86:97:21:7e:75:21: ef:ae:ad:28:88:f3:6f:63:b1:c7:27:cc:57:38:3c:1d:19:de: 89:6c:63:47:28:20:32:2a:2f:35:f4:c9:26:4f:c1:4a:95:4d: 98:4b:45:24:25:e9:3e:b8:62:7b:9c:77:65:1d:dc:81:bb:bc: c2:23:8c:10:1c:01:25:79:7d:4b:4b:99:fe:cc:44:5d:52:b5: 93:19:5d:c6:a1:bd:cd:2a:f7:4d:1b:f8:2d:3a:c1:b4:56:f0: 8c:17:39:94:cf:d9:eb:1a:4b:b8:26:e9:27:0e:4b:9f:72:1d: 81:03:a3:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx MDY2MDkwQTcwHhcNMjUwNDA0MTEyMTAxWhcNMjUwNDExMTEyMTAxWjAYMRYwFAYD VQQDEw02N2VmYzA5ZC00YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CZB/Jfi880kl83c4RetxAoE+T7H0UL/1gQInfQUN7D5xdkDDB2TKGcF7+XT P31xhgb5g9iyVwAvplcXARfKe/LAE5q++NBPOJLxV5AEGTNmPi6I+OLzvJvEPYsm AO7ECiI4lLva6sAomnKXGuZOxjxD1cwsECW0oCnWDFZIR240lpgADjuyPa+sj0c4 DK+Vhn1oimCS1sbz91qb4SsfYZCxCIovAQjqLnItY8C/AEBWGqATSIp7s6V3GTAB LjKtyAPWktdcAgkqywcQ+On4QP0V9/YgNAcuRagXRKylBKbCVuEcZC67ohknW7ha MiYpvFUOd5NrV/hV2XBpbPkiIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFxwPIO tfKygvba8ICg3adCnNGBMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTE5Ny84NEIyRUM5OEYyN0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBr dTJ4WmVURnVWSWtRWmdrS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTcNbNtDadI3GhWibANtR3ECfcyBr5W3n9X+vPCrDNX6ejPRaFrGWm dcLpNppiwPtxJsKnESjEopA7xSPvOFmvoRXTCJYY9AidujOT/csb1qmk9AQx7vL6 7y1o4GSmUETNmZIlhzR7lCF4LGP5Wjvi5R7aeoAmCrHc0pCrsBicor90pBPedtAw bhOGlyF+dSHvrq0oiPNvY7HHJ8xXODwdGd6JbGNHKCAyKi819MkmT8FKlU2YS0Uk Jek+uGJ7nHdlHdyBu7zCI4wQHAEleX1LS5n+zERdUrWTGV3Gob3NKvdNG/gtOsG0 VvCMFzmUz9nrGku4JuknDkufch2BA6PW -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:54 2025 by rpki-client