$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json) Hash identifier: UDBQ5WGfNUv0dob103nMTpxWM6+27MFy2aNHytlXGPA= Subject key identifier: 65:CF:0F:D6:34:4A:EA:1F:9D:24:A5:68:75:DF:6A:7E:AB:4A:55:F5 Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft Manifest number: CA Signing time: Sat 03 May 2025 05:04:16 +0000 Manifest this update: Sat 03 May 2025 05:04:15 +0000 Manifest next update: Sat 10 May 2025 05:04:15 +0000 Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: Ap2Hk+jiF9rWleYaH/eMeYAEGvaoNx/6belZfzlNskw=) 2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: 1cTaBvBAhxFneEeGlAFuRr/tcaFQd3vN8aAkRfuybSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Validity Not Before: May 3 05:04:15 2025 GMT Not After : May 10 05:04:15 2025 GMT Subject: CN=6815a3d0-b940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:c9:bb:e6:0a:9d:ff:9c:0c:fe:40:30:df: 43:cb:32:8d:f3:43:bd:48:cb:3c:d2:41:fb:08:24: 2c:a3:3b:d9:33:3c:dd:97:be:81:73:ba:e1:99:92: 20:10:fd:e1:c2:ab:c6:46:82:3c:3d:2d:e1:19:8b: e4:28:c5:5b:9e:af:0c:93:5b:ba:1f:72:07:ca:96: c2:ee:20:0d:f3:a4:69:67:0b:23:5b:e2:dd:74:3c: 43:00:02:6c:c0:17:0d:84:04:93:9b:9d:a7:bd:01: c7:53:e9:d1:d9:18:fa:cc:9f:17:70:f3:18:50:c8: d8:16:45:02:76:d9:06:da:1c:7c:c9:2f:21:cd:97: 97:ec:9d:cf:84:44:49:c1:0c:42:b6:bf:a2:14:14: 21:08:6d:af:77:11:73:d2:44:ac:b1:04:e7:3d:7c: c1:22:4f:44:61:fd:cb:40:71:ce:08:68:3a:6a:cf: b0:c2:e6:be:1b:81:fe:e4:6b:65:8c:17:ac:4c:8b: b3:fc:4e:be:1f:4a:aa:85:e0:6c:b7:79:3c:87:d5: 21:da:34:d0:40:91:19:2a:69:7a:8c:38:ab:bc:d2: 0b:91:a3:0b:0b:35:3a:79:9e:65:ec:76:35:32:67: 22:dd:fb:64:d3:64:a7:b9:d2:e7:12:73:57:ee:f8: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:0F:D6:34:4A:EA:1F:9D:24:A5:68:75:DF:6A:7E:AB:4A:55:F5 X509v3 Authority Key Identifier: keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:62:33:dd:8e:3e:0f:a7:1f:37:5a:da:08:88:f3:e0:86: 9d:4e:da:d0:b4:0f:1f:8a:e5:6a:f7:db:0a:ae:7b:c4:5f:b2: f5:eb:49:a4:b8:cb:18:1d:e2:13:e2:da:00:6c:f9:87:5b:97: 41:f4:f3:17:64:76:35:20:cf:ed:59:fd:9a:3e:77:82:29:1d: d6:6b:31:27:b2:03:7b:7f:05:84:bd:d7:7f:03:8d:a3:47:65: b7:0f:88:99:a0:3d:b2:4d:10:30:13:d2:05:74:e7:f5:8b:0f: 9b:84:98:e2:9d:ab:95:99:aa:14:96:b8:b7:c4:ea:0a:02:f8: 1f:31:ac:74:50:d7:78:ea:aa:2c:a4:9d:47:d7:6c:39:32:e9: 46:74:a1:94:a1:cf:4f:c8:fb:b6:be:f6:26:12:56:e8:d9:45: 34:42:92:c1:c2:17:88:8a:4c:5a:e7:40:f5:f8:5b:aa:07:80: b1:55:b6:da:3d:6c:69:92:ea:b7:46:c9:0e:93:b6:7b:4a:ba: 4a:51:84:59:4c:ea:c7:cf:31:f7:d6:15:05:a6:de:bd:36:17: d2:18:c2:30:fe:ef:8b:e3:fc:f1:fa:58:2b:44:c8:6d:f5:72: be:51:a4:21:af:f8:68:e5:22:07:b5:a7:82:b4:56:fb:53:2a: 26:e0:48:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy Q0FERjc3MDcwHhcNMjUwNTAzMDUwNDE1WhcNMjUwNTEwMDUwNDE1WjAYMRYwFAYD VQQDEw02ODE1YTNkMC1iOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qPJu+YKnf+cDP5AMN9DyzKN80O9SMs80kH7CCQsozvZMzzdl76Bc7rhmZIg EP3hwqvGRoI8PS3hGYvkKMVbnq8Mk1u6H3IHypbC7iAN86RpZwsjW+LddDxDAAJs wBcNhASTm52nvQHHU+nR2Rj6zJ8XcPMYUMjYFkUCdtkG2hx8yS8hzZeX7J3PhERJ wQxCtr+iFBQhCG2vdxFz0kSssQTnPXzBIk9EYf3LQHHOCGg6as+wwua+G4H+5Gtl jBesTIuz/E6+H0qqheBst3k8h9Uh2jTQQJEZKml6jDirvNILkaMLCzU6eZ5l7HY1 Mmci3ftk02SnudLnEnNX7vhupwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXPD9Y0 SuofnSSlaHXfan6rSlX1MB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp c2loZi1MWGVKZDhzcmZkd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAps2Iz3Y4+D6cfN1raCIjz4IadTtrQtA8fiuVq99sKrnvEX7L160mk uMsYHeIT4toAbPmHW5dB9PMXZHY1IM/tWf2aPneCKR3WazEnsgN7fwWEvdd/A42j R2W3D4iZoD2yTRAwE9IFdOf1iw+bhJjinauVmaoUlri3xOoKAvgfMax0UNd46qos pJ1H12w5MulGdKGUoc9PyPu2vvYmElbo2UU0QpLBwheIikxa50D1+FuqB4CxVbba PWxpkuq3RskOk7Z7SrpKUYRZTOrHzzH31hUFpt69NhfSGMIw/u+L4/zx+lgrRMht 9XK+UaQhr/ho5SIHtaeCtFb7Uyom4EjH -----END CERTIFICATE-----Generated at Mon May 5 02:44:50 2025 by rpki-client