$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: SPNoMkBYhS0QB7b8xRIficNLfgAG6OMEBpm9qJbnbN4= Subject key identifier: 7E:BF:9E:88:99:F9:6F:F8:6E:CC:A6:7F:D3:1A:42:40:2D:86:C5:B4 Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 016F Signing time: Thu 13 Mar 2025 02:41:24 +0000 Manifest this update: Thu 13 Mar 2025 02:41:23 +0000 Manifest next update: Thu 20 Mar 2025 02:41:23 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: bXlivOdde6uFMvbjvaRO5q+PKHkOekIpMPMZY5bSUEY=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: 56O4jNAGsWq8QxLhQ86Wzd380hCjYQVi8/lo+JDEK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 02:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604 Validity Not Before: Mar 13 02:41:23 2025 GMT Not After : Mar 20 02:41:23 2025 GMT Subject: CN=67d245d4-1904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:63:fd:2a:16:bb:3c:a5:2e:63:94:22:57: a9:b2:42:0c:cb:96:2c:78:30:ad:9f:57:23:4a:e1: c4:ac:73:b5:11:05:1d:aa:18:f4:91:b1:56:0d:4f: db:d6:c2:87:0e:1f:c0:33:0c:7c:38:d9:30:9c:fd: b2:bf:a5:f2:14:9c:dc:e6:8b:74:40:68:e0:3b:f3: 5f:b6:db:30:d9:a1:c0:38:db:e9:cd:29:4a:b5:fd: cf:15:b1:c0:e6:d5:0d:0d:91:dd:9d:90:e5:d6:35: ba:ca:11:c6:e5:f5:a2:41:97:06:ce:39:42:39:7d: b3:b7:6b:8e:24:f8:64:68:b6:00:3b:aa:f2:e3:69: 19:2d:d6:05:53:5c:53:99:84:9a:0c:0f:66:cd:08: ae:b3:94:2e:38:57:6d:8c:10:13:28:c7:93:e4:92: da:7e:8a:ae:b1:bf:00:62:b9:b2:49:e8:46:f9:fb: 6a:d1:59:5a:54:57:fa:a7:16:e0:2c:cc:d7:d8:c7: 37:c2:95:e0:20:70:f2:99:fd:76:4b:c5:16:d1:cb: f5:32:13:30:0d:01:11:b2:3e:c3:d4:8d:ea:50:1a: a0:5e:cf:54:c2:49:4e:ea:6a:b2:8f:24:e1:f8:62: 12:f0:2d:8a:2f:32:39:e6:b6:34:ad:8c:f3:ec:cb: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BF:9E:88:99:F9:6F:F8:6E:CC:A6:7F:D3:1A:42:40:2D:86:C5:B4 X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:4e:6a:67:36:69:20:ae:b7:6b:c1:bb:e0:d0:20:d3:21:10: dd:28:f4:2b:5d:fa:f7:e1:70:1d:af:3a:ea:32:76:df:3c:88: 3a:b7:ad:f8:9e:3d:71:ef:f4:4c:3a:8b:f2:b7:d1:b0:fe:43: f1:33:93:7e:a4:6a:00:8d:3b:f3:99:66:df:af:94:bb:2d:64: 52:2e:91:2b:e6:fe:12:b6:7c:10:76:9f:db:40:09:e5:d4:c6: 36:0e:7a:d9:a4:d8:e8:b1:73:cb:c3:5f:f1:a5:b5:f6:4c:bf: 6e:1a:a6:3f:0c:4d:67:35:d4:64:03:43:e0:87:69:36:24:4b: b2:38:3a:1e:12:85:ad:5d:2c:46:e9:c2:d1:26:ed:b9:eb:88: fb:c1:88:c1:33:88:1f:43:e3:05:49:ee:3e:d0:13:ad:35:1d: a6:69:ac:a0:fd:66:50:3e:12:49:c6:7f:5f:6f:c9:a1:fe:91: c1:64:05:df:62:6b:91:1a:37:01:cb:0f:c5:36:87:bf:30:5c: 7b:3b:11:5d:5d:f2:a1:d7:d1:d8:ba:06:3d:be:c9:46:aa:e1: 32:b8:2f:0f:e8:97:b8:71:fc:3b:0c:3a:19:d8:c0:c2:0a:82: 42:ce:be:20:93:1a:63:c9:14:2c:5f:7e:dd:0a:f2:40:ce:bd: c8:d9:97:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjUwMzEzMDI0MTIzWhcNMjUwMzIwMDI0MTIzWjAYMRYwFAYD VQQDEw02N2QyNDVkNC0xOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu1j/SoWuzylLmOUIlepskIMy5YseDCtn1cjSuHErHO1EQUdqhj0kbFWDU/b 1sKHDh/AMwx8ONkwnP2yv6XyFJzc5ot0QGjgO/Nfttsw2aHAONvpzSlKtf3PFbHA 5tUNDZHdnZDl1jW6yhHG5fWiQZcGzjlCOX2zt2uOJPhkaLYAO6ry42kZLdYFU1xT mYSaDA9mzQius5QuOFdtjBATKMeT5JLafoqusb8AYrmySehG+ftq0VlaVFf6pxbg LMzX2Mc3wpXgIHDymf12S8UW0cv1MhMwDQERsj7D1I3qUBqgXs9UwklO6mqyjyTh +GIS8C2KLzI55rY0rYzz7Msa0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6/noiZ +W/4bsymf9MaQkAthsW0MB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoTmpnNmkgrrdrwbvg0CDTIRDdKPQrXfr34XAdrzrqMnbfPIg6t634 nj1x7/RMOovyt9Gw/kPxM5N+pGoAjTvzmWbfr5S7LWRSLpEr5v4StnwQdp/bQAnl 1MY2DnrZpNjosXPLw1/xpbX2TL9uGqY/DE1nNdRkA0Pgh2k2JEuyODoeEoWtXSxG 6cLRJu2564j7wYjBM4gfQ+MFSe4+0BOtNR2maayg/WZQPhJJxn9fb8mh/pHBZAXf YmuRGjcByw/FNoe/MFx7OxFdXfKh19HYugY9vslGquEyuC8P6Je4cfw7DDoZ2MDC CoJCzr4gkxpjyRQsX37dCvJAzr3I2Ze7 -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:19 2025 by rpki-client