$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: k7Djptwj1caYfjguVps4lByibmHFbws27v0jHmQGNVw= Subject key identifier: A4:29:9B:BA:CD:CB:79:E2:3C:A5:0C:B4:AF:4D:49:96:DE:0F:B2:B6 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 09BA Signing time: Wed 12 Mar 2025 19:46:34 +0000 Manifest this update: Wed 12 Mar 2025 19:46:33 +0000 Manifest next update: Wed 19 Mar 2025 19:46:33 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: Xo+wNSlbiDv1aIrE2xDMU8oBQXlzHJK2FvX4GXmBioI=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: PN8KDNG+lfB8OMD8c5W9WAaHU3MIVkDLw5J7GhvF+L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 19:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC Validity Not Before: Mar 12 19:46:33 2025 GMT Not After : Mar 19 19:46:33 2025 GMT Subject: CN=67d1e499-e30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:33:93:21:fa:83:d7:35:8c:f7:ee:62:cc: c6:5f:62:b2:ef:af:58:33:2b:48:0d:f7:23:55:2a: f6:1b:c5:38:e4:2b:41:53:ad:1a:a3:fc:c1:f9:3a: 1a:d1:e0:9a:81:eb:b8:de:62:68:c3:2d:28:53:2f: 6a:d3:03:00:bb:ee:9a:81:b1:11:91:68:51:13:92: 0a:13:44:07:35:de:ef:58:74:d9:e4:2b:1d:67:b2: c3:0a:c9:d7:21:8d:ea:3d:ad:c9:d9:fc:c9:8f:b7: 7b:4b:8d:fc:9b:57:40:01:77:d7:56:70:a1:dc:4e: 0b:46:c2:98:16:f2:92:da:14:ab:fb:46:b3:ab:86: 8d:eb:46:b7:b9:35:88:64:78:03:c1:9d:c2:7a:67: df:c1:21:c5:87:e0:97:10:09:fc:63:dc:25:8a:64: 24:d8:44:9a:a5:41:aa:1b:ab:13:59:10:37:fd:40: bc:b1:ad:50:3f:76:e9:6a:b9:eb:a4:09:0c:d3:fc: 01:1f:3c:f3:df:ef:c4:27:71:23:b8:09:57:b2:c6: 72:a0:d5:8a:f0:44:a1:16:9f:98:73:3c:bc:01:f2: b1:6a:05:2d:90:8f:5a:e2:f9:e3:13:c3:4f:18:a8: b8:9f:3f:43:c9:01:de:f1:68:1f:2c:dd:a1:bf:56: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:29:9B:BA:CD:CB:79:E2:3C:A5:0C:B4:AF:4D:49:96:DE:0F:B2:B6 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:13:f8:4d:36:00:95:a1:1d:f6:fc:2a:0e:65:47:b1:56:b1: a8:b3:06:49:51:44:9b:47:d1:8d:7c:d8:8e:c5:d0:9d:cf:7a: 1a:09:a4:fd:eb:e1:1a:50:7b:d2:99:f5:d8:b2:1f:d6:c9:13: 9d:44:44:d1:e6:a2:d2:51:ec:a0:92:e3:dc:a9:7b:4a:4a:55: b5:c4:e3:ba:32:85:ed:12:13:47:09:29:8c:b1:d2:d1:c7:e6: af:56:2a:1c:98:37:22:4a:a8:62:65:bf:bb:a6:9e:0d:5a:33: 24:c3:a9:b0:05:ad:ec:11:47:62:1c:9f:6a:3c:8a:3c:3f:d7: 8b:3f:69:35:02:02:0a:be:87:12:3c:a1:7c:1e:31:48:af:8b: 95:2e:1c:25:8d:a9:e1:b1:dd:9c:4e:65:b0:bc:60:bd:e9:16: 58:cb:12:70:a8:73:f4:39:3a:15:bd:16:e5:f5:d5:ae:19:22: ae:7d:d7:fa:71:57:00:ac:02:53:9e:5c:d7:aa:bf:f2:49:3f: f0:3a:4a:76:37:ba:79:ff:bc:a0:f5:83:b9:b5:ea:d3:66:8d: 19:fc:ae:62:5c:b8:b3:ee:b0:a9:45:89:21:bd:be:20:db:bb: bc:7f:df:98:0f:3c:7e:ff:9f:6d:64:1f:6a:5a:fd:95:17:41: b5:a8:13:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjUwMzEyMTk0NjMzWhcNMjUwMzE5MTk0NjMzWjAYMRYwFAYD VQQDEw02N2QxZTQ5OS1lMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9IzkyH6g9c1jPfuYszGX2Ky769YMytIDfcjVSr2G8U45CtBU60ao/zB+Toa 0eCageu43mJowy0oUy9q0wMAu+6agbERkWhRE5IKE0QHNd7vWHTZ5CsdZ7LDCsnX IY3qPa3J2fzJj7d7S438m1dAAXfXVnCh3E4LRsKYFvKS2hSr+0azq4aN60a3uTWI ZHgDwZ3CemffwSHFh+CXEAn8Y9wlimQk2ESapUGqG6sTWRA3/UC8sa1QP3bparnr pAkM0/wBHzzz3+/EJ3EjuAlXssZyoNWK8EShFp+Yczy8AfKxagUtkI9a4vnjE8NP GKi4nz9DyQHe8WgfLN2hv1b5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQpm7rN y3niPKUMtK9NSZbeD7K2MB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWE/hNNgCVoR32/CoOZUexVrGoswZJUUSbR9GNfNiOxdCdz3oaCaT9 6+EaUHvSmfXYsh/WyROdRETR5qLSUeygkuPcqXtKSlW1xOO6MoXtEhNHCSmMsdLR x+avViocmDciSqhiZb+7pp4NWjMkw6mwBa3sEUdiHJ9qPIo8P9eLP2k1AgIKvocS PKF8HjFIr4uVLhwljanhsd2cTmWwvGC96RZYyxJwqHP0OToVvRbl9dWuGSKufdf6 cVcArAJTnlzXqr/yST/wOkp2N7p5/7yg9YO5terTZo0Z/K5iXLiz7rCpRYkhvb4g 27u8f9+YDzx+/59tZB9qWv2VF0G1qBNZ -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:43 2025 by rpki-client