$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: xIwNgJurJEkzcJzWQcTlYiGKSZgW2VWzN2TJZM7wKso= Subject key identifier: 7F:E6:E4:7A:6A:9C:BA:BB:CD:8E:A5:A6:A5:E1:AF:97:C8:E5:2E:0F Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 0788 Signing time: Sat 10 May 2025 21:01:10 +0000 Manifest this update: Sat 10 May 2025 21:01:09 +0000 Manifest next update: Sat 17 May 2025 21:01:09 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: WRYesGHSPMXFrdlIQLfzVGgv9BcomB5XX1s6ynfwAJc=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: TvcOHSsYCyXpnMLRDhy2fSmnr1T+wVns1s4NPPpAH1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: May 10 21:01:09 2025 GMT Not After : May 17 21:01:09 2025 GMT Subject: CN=681fbe96-6d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:14:09:59:a8:8f:77:42:6c:ff:88:0c:1d: 3e:d4:3b:eb:de:33:6d:f7:1c:ec:28:ac:cd:cf:a8: 23:25:c5:86:b1:e2:82:70:ed:2e:91:b4:ae:81:75: f0:49:b7:1d:12:32:7d:f8:16:ac:67:70:3a:36:0b: cf:c2:62:0b:ed:48:97:92:9d:65:c1:ac:7f:ed:79: 27:75:3a:37:b6:bd:5e:97:c3:42:89:90:ec:a6:73: d5:34:31:94:d0:12:26:88:01:f2:f5:d6:f6:1b:4d: 78:1c:fe:38:9b:56:d7:d3:43:bf:1d:91:b5:b7:55: 1c:5a:c3:39:e3:70:a9:ab:e5:c3:af:7d:fe:bf:fe: e6:c7:54:13:38:45:89:18:cf:9b:be:c4:dc:8f:f2: 88:8a:76:6b:54:14:74:f7:a5:38:f0:8d:67:8d:c5: 14:39:5a:80:de:14:18:e3:bd:69:f1:82:ef:fb:31: cb:8b:99:cf:20:3f:99:cf:b6:9d:81:20:1e:4b:38: de:83:b8:49:2a:8a:b1:fb:7b:cf:3f:78:8b:16:4b: 7a:8f:65:c5:c8:16:41:c5:9c:97:7d:c0:ff:20:dc: dd:18:f5:94:1f:ca:1b:41:9c:86:52:57:d6:08:0b: 8a:ac:27:70:f9:5b:76:05:51:f6:d1:25:c3:84:f8: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:E4:7A:6A:9C:BA:BB:CD:8E:A5:A6:A5:E1:AF:97:C8:E5:2E:0F X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d2:75:e4:5a:9b:cf:9b:dd:c4:c3:84:d6:39:ff:2b:f7:d2: cb:29:d3:19:e9:70:b6:6c:a8:68:be:43:d8:de:e9:d8:c0:cf: 8b:c3:f1:68:ed:4a:5e:30:fb:76:43:46:b0:f4:34:a6:d8:58: 9c:0a:eb:70:11:aa:e8:ee:d6:30:4b:ad:0a:4f:4f:8e:92:db: 96:ac:9b:a6:75:45:bc:51:ef:5b:c7:9d:48:b3:d0:d5:dc:8b: 99:a2:21:8a:3f:97:cd:d0:38:89:e0:81:8f:95:3f:92:25:7b: 76:94:96:67:9e:8a:87:f8:7f:e0:a5:cc:5c:36:4f:86:ef:21: b4:7a:90:fc:40:35:b7:00:1d:e4:1f:d2:b8:59:c3:f0:f6:bf: 30:a7:32:c1:e1:95:1d:0c:c0:d3:dd:14:15:da:0c:35:e5:8b: b6:07:f7:d6:50:44:90:d1:b7:d0:b4:0c:ba:14:fe:bf:1d:03: 32:db:6c:4a:42:26:e0:c9:d2:fc:6f:fc:92:3c:f5:41:8c:2f: 36:c1:6b:0e:e5:9c:16:d6:28:05:50:46:cd:b4:62:d7:46:fe: 37:8e:66:67:2d:13:c5:b8:ea:43:b5:55:04:fa:f3:67:9e:84: 0c:e6:fd:6c:46:9e:b8:db:91:eb:e2:15:d8:11:bf:b6:66:30: cd:2d:d8:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwNTEwMjEwMTA5WhcNMjUwNTE3MjEwMTA5WjAYMRYwFAYD VQQDEw02ODFmYmU5Ni02ZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8QUCVmoj3dCbP+IDB0+1Dvr3jNt9xzsKKzNz6gjJcWGseKCcO0ukbSugXXw SbcdEjJ9+BasZ3A6NgvPwmIL7UiXkp1lwax/7XkndTo3tr1el8NCiZDspnPVNDGU 0BImiAHy9db2G014HP44m1bX00O/HZG1t1UcWsM543Cpq+XDr33+v/7mx1QTOEWJ GM+bvsTcj/KIinZrVBR096U48I1njcUUOVqA3hQY471p8YLv+zHLi5nPID+Zz7ad gSAeSzjeg7hJKoqx+3vPP3iLFkt6j2XFyBZBxZyXfcD/INzdGPWUH8obQZyGUlfW CAuKrCdw+Vt2BVH20SXDhPjowwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/m5Hpq nLq7zY6lpqXhr5fI5S4PMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz0nXkWpvPm93Ew4TWOf8r99LLKdMZ6XC2bKhovkPY3unYwM+Lw/Fo 7UpeMPt2Q0aw9DSm2FicCutwEaro7tYwS60KT0+OktuWrJumdUW8Ue9bx51Is9DV 3IuZoiGKP5fN0DiJ4IGPlT+SJXt2lJZnnoqH+H/gpcxcNk+G7yG0epD8QDW3AB3k H9K4WcPw9r8wpzLB4ZUdDMDT3RQV2gw15Yu2B/fWUESQ0bfQtAy6FP6/HQMy22xK QibgydL8b/ySPPVBjC82wWsO5ZwW1igFUEbNtGLXRv43jmZnLRPFuOpDtVUE+vNn noQM5v1sRp6425Hr4hXYEb+2ZjDNLdhq -----END CERTIFICATE-----Generated at Mon May 12 18:19:55 2025 by rpki-client