$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: WZ1fNr0FvKx++DwAdhnF8aGdPCLkoYZ0QWxNwBwvKy0= Subject key identifier: A3:4D:9D:52:7C:50:AD:56:2F:47:91:B2:00:99:1B:99:DF:80:DF:31 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 0106 Signing time: Thu 13 Mar 2025 03:26:01 +0000 Manifest this update: Thu 13 Mar 2025 03:26:01 +0000 Manifest next update: Thu 20 Mar 2025 03:26:01 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: vkGYoXe+wt4ARCUpcKUcJONNtfk189PZLWZEYmZo7LQ=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678 Validity Not Before: Mar 13 03:26:01 2025 GMT Not After : Mar 20 03:26:01 2025 GMT Subject: CN=67d25049-d6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:59:6f:ab:de:55:43:31:60:21:c7:f5:0d: 2f:73:c9:0e:f4:e6:6d:d5:0f:a0:38:13:92:18:51: 89:50:ee:60:29:f2:30:85:cf:f0:69:9a:7e:76:ce: 66:59:54:23:cb:60:c3:a7:3d:5b:e3:74:69:43:68: ab:15:d7:31:34:99:eb:04:b9:2f:41:84:18:d9:22: be:43:97:1a:38:95:66:db:7c:a4:1c:e3:a5:bc:a2: 94:6c:7a:62:d5:ed:35:a0:9d:1f:ff:84:e4:0d:bc: fb:b5:5e:ab:33:97:b2:e7:bb:fc:9d:fc:6d:1a:0c: 8e:84:f8:b3:c4:95:16:72:19:8c:65:1c:2f:6d:29: d7:cb:60:87:39:5d:34:d6:c7:38:99:a5:36:8e:d7: 1c:53:1e:78:23:a6:79:3d:38:da:bd:d3:77:43:14: ce:32:b3:de:1a:98:4c:a3:98:f9:8b:b5:a0:5f:64: 01:43:ab:0e:67:4b:52:3e:cb:49:c1:9a:48:da:58: 81:80:e1:6c:4e:e5:11:73:ae:f2:15:cc:11:12:f8: 57:20:ae:78:a7:1b:e1:9d:d5:c6:64:ac:9c:3c:54: 51:33:4c:4f:4e:4e:4a:42:21:aa:b6:f8:e3:a7:3b: 48:c4:17:57:13:ad:4d:e4:1a:52:88:b0:8c:91:60: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4D:9D:52:7C:50:AD:56:2F:47:91:B2:00:99:1B:99:DF:80:DF:31 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:34:1f:4c:90:1c:79:4d:9a:89:35:ab:50:5b:91:06:ee:b4: 0a:2c:ee:1f:f0:68:89:13:f5:a3:65:7a:52:30:39:75:00:d5: 60:5c:e2:26:a0:4c:84:f0:e1:bd:f3:2f:84:04:ba:92:e3:52: 53:3c:cf:c2:88:a3:d7:d6:c6:42:90:51:30:48:dd:1b:b3:40: e1:ff:c6:95:c3:38:8b:8d:2a:57:65:de:7e:4e:9a:53:9d:85: 16:e8:6b:be:cd:8f:81:ed:55:4d:e5:99:e1:06:91:20:f2:ef: a5:31:ef:87:00:21:c2:b9:20:11:46:94:15:89:54:3b:d0:df: 56:5d:e1:71:80:42:c3:b3:96:7a:76:45:23:0f:7b:47:93:7c: 4d:69:25:bb:8f:d1:bc:87:68:f7:12:a9:a2:48:88:43:87:a6: 43:88:32:c9:8b:c8:16:e1:4f:14:4f:a2:88:48:ac:b3:3e:d0: 11:37:8a:67:d4:e0:12:dd:51:89:98:d9:51:c5:39:73:96:14: 32:8e:b5:64:16:11:45:0d:76:1a:20:f1:e2:d5:3e:f7:8d:19: d7:1f:9c:77:87:e6:03:3f:71:61:b2:75:6d:66:c5:3a:85:8d: 2f:e7:b3:6a:a8:e2:b5:09:20:c9:8d:9f:17:47:a5:37:76:d8: 5b:c3:7a:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwMzEzMDMyNjAxWhcNMjUwMzIwMDMyNjAxWjAYMRYwFAYD VQQDEw02N2QyNTA0OS1kNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1tZb6veVUMxYCHH9Q0vc8kO9OZt1Q+gOBOSGFGJUO5gKfIwhc/waZp+ds5m WVQjy2DDpz1b43RpQ2irFdcxNJnrBLkvQYQY2SK+Q5caOJVm23ykHOOlvKKUbHpi 1e01oJ0f/4TkDbz7tV6rM5ey57v8nfxtGgyOhPizxJUWchmMZRwvbSnXy2CHOV00 1sc4maU2jtccUx54I6Z5PTjavdN3QxTOMrPeGphMo5j5i7WgX2QBQ6sOZ0tSPstJ wZpI2liBgOFsTuURc67yFcwREvhXIK54pxvhndXGZKycPFRRM0xPTk5KQiGqtvjj pztIxBdXE61N5BpSiLCMkWCgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNNnVJ8 UK1WL0eRsgCZG5nfgN8xMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaNB9MkBx5TZqJNatQW5EG7rQKLO4f8GiJE/WjZXpSMDl1ANVgXOIm oEyE8OG98y+EBLqS41JTPM/CiKPX1sZCkFEwSN0bs0Dh/8aVwziLjSpXZd5+TppT nYUW6Gu+zY+B7VVN5ZnhBpEg8u+lMe+HACHCuSARRpQViVQ70N9WXeFxgELDs5Z6 dkUjD3tHk3xNaSW7j9G8h2j3EqmiSIhDh6ZDiDLJi8gW4U8UT6KISKyzPtARN4pn 1OAS3VGJmNlRxTlzlhQyjrVkFhFFDXYaIPHi1T73jRnXH5x3h+YDP3FhsnVtZsU6 hY0v57NqqOK1CSDJjZ8XR6U3dthbw3pj -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:18 2025 by rpki-client