$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: Cgs1GIx3Znmz4UoC5jzav1H9g00P8a036kqpippAhw0= Subject key identifier: 7F:67:FD:29:09:89:5D:DD:AF:03:CB:63:7B:A7:3B:72:40:D7:33:37 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 01C9 Signing time: Thu 15 May 2025 02:26:17 +0000 Manifest this update: Thu 15 May 2025 02:26:17 +0000 Manifest next update: Thu 22 May 2025 02:26:17 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: qMlbpUkBweORuFn6Q7b+WOcgfZ6PM0wS42wKXc9p/+s=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=) 3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: 7UjEjVVCyN4uGyX9bNWcmVqFnHgs+rp9yqIxKOI8E30=) 4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: rV9ie1oJtm2rSFQCCjvltoUnDjD6SpJTDB+pUT5QuIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: May 15 02:26:17 2025 GMT Not After : May 22 02:26:17 2025 GMT Subject: CN=682550c9-972d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:55:5d:a9:79:96:3e:ba:f6:cd:04:ff:37: 4a:e4:36:cd:00:16:6a:6c:f5:17:0d:82:99:44:86: 2e:c4:62:41:e7:c9:68:65:76:24:70:6e:88:e5:a6: 2d:4e:60:c6:17:d9:ee:71:e8:72:dc:28:3f:21:b1: d4:e6:43:1c:4a:0c:86:02:f2:27:1e:6f:3c:c3:ef: 0e:5d:b3:a8:b9:83:da:6d:13:6d:7b:17:f7:f5:91: 9a:37:27:71:63:b3:e8:ac:66:7b:d1:f3:15:95:7c: fe:85:54:28:99:17:90:42:63:0a:c5:12:dd:d0:9b: e0:fd:29:b4:8a:ad:33:cf:20:5b:64:5b:25:c9:89: 7f:ac:68:98:1a:15:ea:f1:eb:7f:65:f1:0d:76:45: d7:d6:fa:e6:b6:84:85:f3:ac:b1:5e:f7:0b:59:e8: 0f:2d:0d:d1:c1:ca:a1:ea:82:91:06:dd:84:de:7b: fb:c2:03:d3:0a:62:c8:50:62:9a:7a:97:af:f2:b9: d5:e9:34:a2:77:58:c1:ce:75:f7:81:46:1c:88:7c: f3:56:17:a8:a7:90:3a:09:0e:f1:5c:31:16:ac:1f: 3f:9a:f2:ee:51:9c:dd:a5:1d:f0:1b:9f:46:5b:61: 50:9e:50:a4:8b:da:82:a9:a9:68:19:fc:06:90:49: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:67:FD:29:09:89:5D:DD:AF:03:CB:63:7B:A7:3B:72:40:D7:33:37 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:f7:f0:4f:a4:b5:5f:d4:23:4d:53:15:58:86:57:50:ec: 9d:4d:0b:8a:04:cf:11:07:37:41:5d:d7:65:1d:34:2d:ea:12: 11:87:95:c5:7d:3b:84:a4:82:7d:1d:73:67:59:95:02:8d:6d: d7:a1:e9:11:9c:78:90:22:3b:da:3f:e6:ab:ab:2c:6a:67:eb: df:f7:b8:3a:c4:05:5d:e6:94:d5:85:f7:c6:3b:11:12:f3:d4: f4:18:77:93:4e:69:45:9b:af:de:94:62:0f:15:ea:4b:0b:75: 0a:ce:bf:db:ef:f4:e4:71:c9:89:fd:27:12:74:bb:c5:82:c7: d8:7a:d5:90:20:c9:86:19:6b:3f:9e:bf:0d:b6:19:44:42:14: ba:b8:89:26:0a:58:de:10:3a:ba:e6:c2:68:8f:d3:e4:30:8a: f4:27:3b:5b:82:38:42:eb:84:e4:02:d0:77:7b:cc:0b:79:0b: 7b:51:76:78:44:87:b3:68:fd:23:40:82:26:6d:11:8d:92:cf: 98:e7:d8:85:c3:d2:06:3f:c2:92:39:a2:ba:29:7e:6e:7c:f0: 23:61:ea:08:0f:48:b6:09:bc:26:f9:88:97:cc:28:2c:4a:26: 9f:58:08:49:10:29:75:3d:d9:34:28:58:d4:d4:5b:63:55:29: 5f:22:5f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUwNTE1MDIyNjE3WhcNMjUwNTIyMDIyNjE3WjAYMRYwFAYD VQQDEw02ODI1NTBjOS05NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWZVXal5lj669s0E/zdK5DbNABZqbPUXDYKZRIYuxGJB58loZXYkcG6I5aYt TmDGF9nucehy3Cg/IbHU5kMcSgyGAvInHm88w+8OXbOouYPabRNtexf39ZGaNydx Y7PorGZ70fMVlXz+hVQomReQQmMKxRLd0Jvg/Sm0iq0zzyBbZFslyYl/rGiYGhXq 8et/ZfENdkXX1vrmtoSF86yxXvcLWegPLQ3Rwcqh6oKRBt2E3nv7wgPTCmLIUGKa epev8rnV6TSid1jBznX3gUYciHzzVheop5A6CQ7xXDEWrB8/mvLuUZzdpR3wG59G W2FQnlCki9qCqaloGfwGkEluoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9n/SkJ iV3drwPLY3unO3JA1zM3MB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7zvfwT6S1X9QjTVMVWIZXUOydTQuKBM8RBzdBXddlHTQt6hIRh5XF fTuEpIJ9HXNnWZUCjW3XoekRnHiQIjvaP+arqyxqZ+vf97g6xAVd5pTVhffGOxES 89T0GHeTTmlFm6/elGIPFepLC3UKzr/b7/TkccmJ/ScSdLvFgsfYetWQIMmGGWs/ nr8NthlEQhS6uIkmCljeEDq65sJoj9PkMIr0JztbgjhC64TkAtB3e8wLeQt7UXZ4 RIezaP0jQIImbRGNks+Y59iFw9IGP8KSOaK6KX5ufPAjYeoID0i2Cbwm+YiXzCgs SiafWAhJECl1Pdk0KFjU1FtjVSlfIl9T -----END CERTIFICATE-----Generated at Fri May 16 06:29:30 2025 by rpki-client