$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: oqfhDn77jj+nDel9Vl1dIy+gIAl914pSURJ/Dq/ukWM= Subject key identifier: F3:72:E2:93:17:42:D0:12:DB:B2:59:FC:19:E2:65:45:99:36:FD:A0 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 0154 Signing time: Sun 11 May 2025 03:01:49 +0000 Manifest this update: Sun 11 May 2025 03:01:48 +0000 Manifest next update: Sun 18 May 2025 03:01:48 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: a1T0Ws00Qs8yTHyND1Z+RAUvuCDQHrirDCFV+yihpZw=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: b/tyuT5HVmPK9JfwUWtYKqOXXB/oMLOeGmEa5cvBbbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600, serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: May 11 03:01:48 2025 GMT Not After : May 18 03:01:48 2025 GMT Subject: CN=6820131d-4bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:e5:7f:f3:45:b1:de:82:48:26:34:e5:2f: 41:c3:c8:01:29:39:27:94:22:96:e6:7e:2c:bc:78: 6b:d4:35:d3:7a:8c:66:2c:cc:77:a7:33:20:1a:6d: b7:6b:bc:dc:55:e2:c5:98:8d:ea:87:15:85:ed:ed: 00:b7:b3:a4:c0:57:ef:69:be:2c:9f:71:55:1c:d8: 17:15:9e:0b:9e:8a:d5:8c:47:0a:d8:a1:ab:00:77: 7c:bb:1e:cf:fa:11:59:b9:ae:8d:82:99:22:8c:27: a9:16:a7:8c:e3:48:c9:cc:f0:84:40:a9:e5:a0:c4: 35:70:54:d5:ff:df:f5:e3:65:f7:45:e5:a3:8d:f5: cd:1e:5b:b9:a5:03:84:91:e5:ef:5c:d1:f1:31:63: 3d:b7:54:c4:c8:6a:3b:63:01:04:00:70:f0:85:08: 48:0e:f3:74:2e:48:57:ad:e6:61:56:ce:7e:32:9f: f4:46:9c:32:47:7f:35:bf:bc:13:4b:cf:ad:75:f7: c3:20:44:b9:ef:3e:09:c4:4e:00:f1:56:a5:4c:ef: 45:35:a4:cb:79:e7:75:32:63:d6:c0:33:73:4e:1b: f7:28:95:c0:3c:24:f1:a4:2c:bf:c4:11:d7:64:65: f8:78:34:c2:a7:a8:b5:4f:d2:c3:27:46:36:0a:9e: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:72:E2:93:17:42:D0:12:DB:B2:59:FC:19:E2:65:45:99:36:FD:A0 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f7:5c:45:4b:91:88:5e:0f:49:30:1b:9b:0e:2c:cb:66:0e: db:94:21:15:18:c7:49:61:f0:4e:d2:eb:e5:2d:bd:e3:d1:ee: 2c:e0:6a:7f:2f:fd:7f:8b:e5:b4:3a:10:77:1c:4f:5d:58:78: 44:fc:cb:6b:b2:b3:23:c6:3c:22:ff:7e:6b:36:37:8f:71:4a: c7:5c:6f:9c:31:d9:74:25:ba:55:3a:c2:c9:8d:88:6f:07:6e: 65:a3:82:fa:d1:38:29:a1:e7:cb:2f:61:07:39:62:62:32:80: a1:af:86:52:fe:d4:7f:26:3e:98:5b:6d:0c:46:de:02:04:7a: 03:5e:55:fc:8d:2d:f7:71:22:2e:96:ee:37:12:5f:a3:d6:bd: 18:0c:73:ef:b5:4d:c2:20:2b:36:b0:ff:08:1c:8c:a1:84:91: 7e:91:79:28:bc:cd:ea:f5:66:0b:aa:2b:d1:e1:2d:8a:04:1a: e7:fc:bf:7b:04:23:e1:76:1f:e4:b5:93:12:ae:c4:2f:00:78: 21:a9:d3:74:b7:53:04:d2:84:df:af:e1:3f:17:ad:3f:96:24: 2a:27:f4:a1:dc:8a:54:6d:9d:54:a5:a4:d7:0e:b2:0e:20:a6: eb:77:96:4e:22:52:e0:c6:6b:90:b2:dd:43:26:df:d1:a9:5a: 58:ab:6e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjUwNTExMDMwMTQ4WhcNMjUwNTE4MDMwMTQ4WjAYMRYwFAYD VQQDEw02ODIwMTMxZC00YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1Llf/NFsd6CSCY05S9Bw8gBKTknlCKW5n4svHhr1DXTeoxmLMx3pzMgGm23 a7zcVeLFmI3qhxWF7e0At7OkwFfvab4sn3FVHNgXFZ4LnorVjEcK2KGrAHd8ux7P +hFZua6NgpkijCepFqeM40jJzPCEQKnloMQ1cFTV/9/142X3ReWjjfXNHlu5pQOE keXvXNHxMWM9t1TEyGo7YwEEAHDwhQhIDvN0LkhXreZhVs5+Mp/0RpwyR381v7wT S8+tdffDIES57z4JxE4A8ValTO9FNaTLeed1MmPWwDNzThv3KJXAPCTxpCy/xBHX ZGX4eDTCp6i1T9LDJ0Y2Cp7hRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNy4pMX QtAS27JZ/BniZUWZNv2gMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI91xFS5GIXg9JMBubDizLZg7blCEVGMdJYfBO0uvlLb3j0e4s4Gp/ L/1/i+W0OhB3HE9dWHhE/MtrsrMjxjwi/35rNjePcUrHXG+cMdl0JbpVOsLJjYhv B25lo4L60TgpoefLL2EHOWJiMoChr4ZS/tR/Jj6YW20MRt4CBHoDXlX8jS33cSIu lu43El+j1r0YDHPvtU3CICs2sP8IHIyhhJF+kXkovM3q9WYLqivR4S2KBBrn/L97 BCPhdh/ktZMSrsQvAHghqdN0t1ME0oTfr+E/F60/liQqJ/Sh3IpUbZ1UpaTXDrIO IKbrd5ZOIlLgxmuQst1DJt/RqVpYq25U -----END CERTIFICATE-----Generated at Sun May 11 15:56:54 2025 by rpki-client