$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: v/pJbNnTjY66Ik9SRXeNxM8lUptM1Bx1cFuUwUpPEBU= Subject key identifier: 36:C3:BA:82:C3:D3:F8:1A:B5:F9:82:EA:0C:BF:BC:84:6C:82:A7:72 Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 1034 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 102C Signing time: Wed 12 Mar 2025 17:21:15 +0000 Manifest this update: Wed 12 Mar 2025 17:21:14 +0000 Manifest next update: Wed 19 Mar 2025 17:21:14 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: hD3VPugwd8xZU9+MpAuXJ9ak0YP4FDwZgrMEWq/jIwo=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: hG1fGJzQ3JbtXbpeIbWQ7QaLlc8Fngz5Q1TdRya0bg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 17:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4148 (0x1034) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974 Validity Not Before: Mar 12 17:21:14 2025 GMT Not After : Mar 19 17:21:14 2025 GMT Subject: CN=67d1c28a-3d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:11:b7:96:aa:95:bb:0c:94:04:5f:0a:10: f8:59:48:6d:47:c9:79:79:99:75:88:f2:6e:fa:67: de:2b:e3:49:c7:b8:ec:ff:ba:a5:5b:8e:1e:91:43: 96:19:96:e5:d5:b3:dc:1e:2a:08:60:54:54:75:18: 97:0b:e7:9d:a0:6a:6d:e1:a6:7e:8d:ee:9f:7a:48: 90:85:8f:fb:26:9d:ac:56:7a:dd:47:ad:fe:f7:ee: 36:cf:af:5d:0f:6f:99:b0:e1:23:23:23:c0:00:0b: 37:16:26:14:be:d8:3d:b9:89:cc:30:f7:43:70:e9: db:6f:96:57:ad:b4:db:f3:5e:7f:dc:f0:b1:27:3f: 8a:b9:81:41:ac:88:bc:f1:98:45:e0:29:ff:ab:fc: 98:ad:18:96:14:c8:7b:2e:9e:f3:f0:f6:61:d5:a7: 79:87:ff:50:7b:03:1c:15:23:9e:14:79:b9:ea:91: b3:df:cc:f5:ba:e3:29:61:d5:fe:f7:c3:9b:e3:95: 41:f3:e3:15:20:07:6f:9b:35:e4:93:d9:7e:f4:db: 4c:e8:42:f7:5e:ee:82:a8:43:18:33:86:82:87:ea: 21:f9:85:af:96:27:dd:58:34:c7:3f:12:42:b5:ea: ee:c4:69:92:a9:d5:0c:e0:f2:b7:68:da:79:7a:66: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C3:BA:82:C3:D3:F8:1A:B5:F9:82:EA:0C:BF:BC:84:6C:82:A7:72 X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2c:c1:57:27:db:4c:f8:23:b2:d5:3c:a7:16:ff:d5:ee:9a: 79:58:88:e0:1f:4a:2b:61:6e:48:85:ed:ec:28:93:86:19:5f: 73:fa:62:14:0f:5f:fe:a7:05:93:61:63:95:7a:35:ae:39:09: 5e:ef:70:e4:64:09:29:3b:2f:a8:70:d2:75:b4:1b:84:49:44: 39:6a:1b:5f:4c:79:ce:a9:3e:9a:f5:2a:67:02:cd:eb:74:ef: 95:98:01:9a:8c:3a:a4:9f:ed:bf:d5:89:9a:b2:b0:06:2f:0b: 9f:05:78:35:5f:9d:9c:90:d6:03:1e:5e:91:d0:8e:6f:95:b7: fd:23:fe:65:03:dc:6f:88:ea:6b:50:58:28:b0:f8:6e:a1:89: 6f:3b:e9:1d:dc:91:e0:91:b6:5a:d2:a9:b7:f4:a0:3b:0b:63: 7a:aa:ea:79:53:08:73:e9:6d:47:ae:0a:5c:57:ce:ab:f7:c4: 2b:67:af:40:d9:14:12:1b:09:1d:f3:ca:2f:62:34:fa:33:90: 5c:30:6d:df:82:b6:c3:36:de:89:00:26:5b:79:47:9e:e2:e6: 40:c0:ca:54:c3:de:f9:7f:b6:dc:5a:bc:fc:0b:49:76:58:27: 0c:be:26:43:c0:f4:56:56:26:44:b9:ad:6f:00:09:74:2e:70: 3a:92:19:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwMzEyMTcyMTE0WhcNMjUwMzE5MTcyMTE0WjAYMRYwFAYD VQQDEw02N2QxYzI4YS0zZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSARt5aqlbsMlARfChD4WUhtR8l5eZl1iPJu+mfeK+NJx7js/7qlW44ekUOW GZbl1bPcHioIYFRUdRiXC+edoGpt4aZ+je6fekiQhY/7Jp2sVnrdR63+9+42z69d D2+ZsOEjIyPAAAs3FiYUvtg9uYnMMPdDcOnbb5ZXrbTb815/3PCxJz+KuYFBrIi8 8ZhF4Cn/q/yYrRiWFMh7Lp7z8PZh1ad5h/9QewMcFSOeFHm56pGz38z1uuMpYdX+ 98Ob45VB8+MVIAdvmzXkk9l+9NtM6EL3Xu6CqEMYM4aCh+oh+YWvlifdWDTHPxJC teruxGmSqdUM4PK3aNp5embXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbDuoLD 0/gatfmC6gy/vIRsgqdyMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvLMFXJ9tM+COy1TynFv/V7pp5WIjgH0orYW5Ihe3sKJOGGV9z+mIU D1/+pwWTYWOVejWuOQle73DkZAkpOy+ocNJ1tBuESUQ5ahtfTHnOqT6a9SpnAs3r dO+VmAGajDqkn+2/1YmasrAGLwufBXg1X52ckNYDHl6R0I5vlbf9I/5lA9xviOpr UFgosPhuoYlvO+kd3JHgkbZa0qm39KA7C2N6qup5Uwhz6W1HrgpcV86r98QrZ69A 2RQSGwkd88ovYjT6M5BcMG3fgrbDNt6JACZbeUee4uZAwMpUw975f7bcWrz8C0l2 WCcMviZDwPRWViZEua1vAAl0LnA6khk/ -----END CERTIFICATE-----Generated at Thu Mar 13 21:29:15 2025 by rpki-client