$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft File: pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json) Hash identifier: ar3E7EWG+QCx5aY3191sNzGR9T+842lhc3o1IvbwdYg= Subject key identifier: 90:BF:34:F9:00:B7:95:59:66:E7:02:61:0A:0D:9A:DF:4B:CA:31:E4 Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23 Certificate issuer: /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft Manifest number: 77 Signing time: Tue 15 Apr 2025 05:33:14 +0000 Manifest this update: Tue 15 Apr 2025 05:33:14 +0000 Manifest next update: Tue 22 Apr 2025 05:33:14 +0000 Files and hashes: 1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: u8P4w8DCY1jCXnf8+Jsx/xldnCAeUX/klS+JRxSEcyw=) 2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: w11TSOq/EaycCd3tkTNvuoFONdTStuPzFxhygocn60Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423 Validity Not Before: Apr 15 05:33:14 2025 GMT Not After : Apr 22 05:33:14 2025 GMT Subject: CN=67fdef9a-75e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:6b:8a:a7:d4:ae:29:3c:fe:e9:3c:ed:72: 88:34:12:5f:40:ae:b0:b0:f8:ce:5c:50:21:1b:10: 87:c6:2d:2f:4f:e7:40:42:1f:69:82:b2:b1:d4:48: 00:e8:72:55:d4:25:34:b9:3c:ac:bc:5c:d6:a3:87: d0:10:ba:c8:63:df:78:d1:6d:68:17:4b:c5:86:8a: 53:59:fe:da:9a:21:a9:cc:e5:27:2b:96:3c:ac:54: f1:b1:a3:e5:79:5e:d3:d7:71:4e:aa:4b:71:41:d1: 12:96:eb:72:6d:94:34:e8:0e:36:ae:5a:9b:fc:e4: df:ff:4b:94:6b:2d:f0:b2:91:2f:08:ab:2b:f6:b3: b9:f4:64:b7:83:dc:e6:56:a5:c3:6a:c3:9c:3b:60: 55:72:29:92:4c:ff:1b:b3:65:c4:9c:84:56:f7:82: ee:ba:e1:10:3e:cc:c5:1f:4e:4b:51:f0:3d:91:7b: 91:7e:3c:c2:fe:17:57:cf:0f:00:43:e8:6d:09:22: f4:46:3d:24:96:7c:15:e2:8d:35:ac:55:8d:ea:dd: f8:5a:82:83:24:06:0f:48:68:84:87:99:c8:77:1e: 90:51:c1:8f:68:ca:4a:35:de:00:06:fa:77:33:0f: 04:49:32:ef:4f:ff:87:2a:43:16:1d:57:84:46:f2: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:34:F9:00:B7:95:59:66:E7:02:61:0A:0D:9A:DF:4B:CA:31:E4 X509v3 Authority Key Identifier: keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:01:79:17:9e:31:07:1c:af:77:4d:46:ad:40:bf:83:80: c4:26:c0:d7:c9:89:06:6a:6c:38:d0:30:0a:ea:92:4d:00:0e: 98:5e:f5:91:c4:57:35:36:7e:f3:31:5b:b5:a1:a8:93:b4:53: 41:43:9b:fd:2e:30:ae:30:51:56:a2:31:43:0d:b7:e4:55:a6: bd:78:74:7d:27:10:59:e3:38:d1:22:2a:fd:f3:54:3f:87:b5: a0:bf:d7:94:17:ec:3d:64:51:b5:66:be:ef:a3:c1:ca:47:d6: cf:1d:10:02:39:6c:1c:73:94:57:a4:4e:9a:8f:b3:5e:a7:33: 31:af:8f:fe:cf:73:41:45:7c:39:16:35:3e:e8:b6:2d:30:4e: 3c:ac:db:bc:88:72:7d:70:68:9d:38:6a:43:62:4e:4c:87:50: bd:cc:94:9f:6d:6f:b6:dc:c4:27:4d:6e:ca:09:79:c2:4c:da: 85:07:83:3f:ad:93:d0:e7:3d:19:a5:3a:f2:ff:02:ec:84:12: 30:06:7d:9b:2d:5c:8f:07:fd:6e:20:e0:c0:c8:45:14:97:b1: f7:d0:21:e6:f0:0d:d9:34:ca:82:55:bb:92:fd:d7:e5:b0:c7: a3:a7:c4:bf:a1:2d:b0:46:3b:d3:7d:b4:64:0d:6b:05:74:ad: 21:91:0f:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkYxMjExMC8GA1UEBRMoQTY5RUU2MkM1QUU4ODExNzRBNDIxMjM3NTlFQTQyM0Q2 MUY3MzQyMzAeFw0yNTA0MTUwNTMzMTRaFw0yNTA0MjIwNTMzMTRaMBgxFjAUBgNV BAMTDTY3ZmRlZjlhLTc1ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzYGuKp9SuKTz+6Tztcog0El9ArrCw+M5cUCEbEIfGLS9P50BCH2mCsrHUSADo clXUJTS5PKy8XNajh9AQushj33jRbWgXS8WGilNZ/tqaIanM5ScrljysVPGxo+V5 XtPXcU6qS3FB0RKW63JtlDToDjauWpv85N//S5RrLfCykS8Iqyv2s7n0ZLeD3OZW pcNqw5w7YFVyKZJM/xuzZcSchFb3gu664RA+zMUfTktR8D2Re5F+PML+F1fPDwBD 6G0JIvRGPSSWfBXijTWsVY3q3fhagoMkBg9IaISHmch3HpBRwY9oyko13gAG+ncz DwRJMu9P/4cqQxYdV4RG8i+pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkL80+QC3 lVlm5wJhCg2a30vKMeQwHwYDVR0jBBgwFoAUpp7mLFrogRdKQhI3WepCPWH3NCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRjEyL0ZGMzMzQjhBNjhD MTExRUZBNzUzQTE2NEM0RjlBRTAyL3BwN21MRnJvZ1JkS1FoSTNXZXBDUFdIM05D TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcHA3bUxGcm9nUmRLUWhJM1dlcENQV0gzTkNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RjEyL0ZGMzMzQjhBNjhDMTExRUZBNzUzQTE2NEM0RjlBRTAyL3BwN21MRnJvZ1Jk S1FoSTNXZXBDUFdIM05DTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbgAXkXnjEHHK93TUatQL+DgMQmwNfJiQZqbDjQMArqkk0ADphe9ZHE VzU2fvMxW7WhqJO0U0FDm/0uMK4wUVaiMUMNt+RVpr14dH0nEFnjONEiKv3zVD+H taC/15QX7D1kUbVmvu+jwcpH1s8dEAI5bBxzlFekTpqPs16nMzGvj/7Pc0FFfDkW NT7oti0wTjys27yIcn1waJ04akNiTkyHUL3MlJ9tb7bcxCdNbsoJecJM2oUHgz+t k9DnPRmlOvL/AuyEEjAGfZstXI8H/W4g4MDIRRSXsffQIebwDdk0yoJVu5L91+Ww x6OnxL+hLbBGO9N9tGQNawV0rSGRD40= -----END CERTIFICATE-----Generated at Tue Apr 15 10:29:50 2025 by rpki-client