$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json) Hash identifier: h5kQqf9CJqY+AkxPpMScPnwI08aplc6qEgfe/NfW5Fk= Subject key identifier: F8:CB:84:90:CD:9D:5E:A5:BF:B2:4A:F0:5F:6B:E4:A2:14:49:14:D5 Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft Manifest number: 01A0 Signing time: Sun 11 May 2025 02:20:25 +0000 Manifest this update: Sun 11 May 2025 02:20:24 +0000 Manifest next update: Sun 18 May 2025 02:20:24 +0000 Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: 2mmBBcgLVGgyAt54hX9ekJR7kLKaUZRVquj40bAdkrg=) 2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Validity Not Before: May 11 02:20:24 2025 GMT Not After : May 18 02:20:24 2025 GMT Subject: CN=68200969-89f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:dc:c2:5d:7c:a0:e3:80:02:4e:28:74:0e: 10:36:3a:78:d8:db:b0:e9:8c:f3:cf:f0:a9:17:d2: 2d:b2:6a:1b:09:d6:7e:55:3a:38:f6:9c:49:3f:be: 70:90:ab:6f:aa:64:a1:66:8c:e9:85:76:03:d4:f4: 01:20:ad:5e:63:f8:08:48:29:d1:d4:b1:68:90:c1: 19:10:60:8b:29:e0:03:63:c3:8c:a1:61:a5:dc:dc: 6f:96:8e:14:60:64:65:76:84:90:e4:df:6d:22:ce: 17:9c:d0:3c:af:ca:02:c8:19:b1:fa:5e:10:e1:83: 0b:d8:a7:a2:ae:60:41:ff:de:13:2d:1c:ed:fa:ea: 8b:d0:70:ab:e6:71:ac:c8:1b:ea:ca:21:f9:e4:8d: f7:b1:31:52:f4:77:7d:7e:1c:15:f3:56:bd:63:0c: 14:66:d2:34:b5:35:ce:7f:a2:a2:4a:ea:10:38:d9: e6:9a:31:0e:43:e6:d5:0b:f2:70:98:36:d4:e1:42: 70:d6:e7:e4:9e:99:49:4d:f4:5e:99:b3:31:f0:24: a9:12:cc:6f:c6:a2:05:da:fc:d6:32:ce:42:dc:93: 40:b9:80:bc:50:2d:1a:14:ea:08:0c:21:a9:1c:bd: 50:a2:ac:70:32:fc:6d:5f:ef:9b:69:14:53:c2:2b: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CB:84:90:CD:9D:5E:A5:BF:B2:4A:F0:5F:6B:E4:A2:14:49:14:D5 X509v3 Authority Key Identifier: keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:72:b8:a6:a7:f2:1b:38:cb:92:dd:d4:34:15:8f:96:03:55: 0a:05:dd:2e:28:01:6e:05:ac:26:1c:06:7f:66:af:14:e0:a0: 37:09:0b:4d:da:a2:4f:28:89:91:ac:18:e8:3e:42:32:4c:19: 3e:51:c2:84:f8:92:a1:d8:01:64:6f:38:b9:b2:92:f0:73:8c: 95:f4:ae:96:c0:61:83:9f:51:f1:b7:95:fa:45:60:d9:47:14: f2:29:b0:a9:18:b4:8f:89:23:d4:78:bf:ab:08:1e:4a:93:ac: 9e:bf:2f:ec:82:e2:64:54:ca:13:23:2d:4d:17:b2:38:f8:a3: b2:4a:d9:66:db:63:4f:8d:7f:69:01:7c:87:a0:d5:39:ec:29: 9f:94:e9:24:0e:4a:0f:94:a9:4f:c3:10:ba:fb:1f:e1:27:ff: 5d:0b:9a:b5:c0:e1:f9:41:cf:bd:14:4a:2f:00:2f:b2:e8:7c: 06:43:cd:a4:ef:f5:41:76:c9:d3:17:98:a4:14:33:c3:f4:85: ff:08:0e:e4:39:c7:d0:b8:aa:e3:f1:c6:51:38:92:dc:d0:8a: 4c:21:37:93:b3:9f:d3:24:0f:dd:5b:11:03:4b:91:ba:b8:10: 58:23:fc:03:d2:f0:4e:8b:3b:71:20:2b:60:ce:32:70:fa:a2: 5c:f6:c6:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5 ODEyRTZGNjUwHhcNMjUwNTExMDIyMDI0WhcNMjUwNTE4MDIyMDI0WjAYMRYwFAYD VQQDEw02ODIwMDk2OS04OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSfcwl18oOOAAk4odA4QNjp42Nuw6Yzzz/CpF9ItsmobCdZ+VTo49pxJP75w kKtvqmShZozphXYD1PQBIK1eY/gISCnR1LFokMEZEGCLKeADY8OMoWGl3Nxvlo4U YGRldoSQ5N9tIs4XnNA8r8oCyBmx+l4Q4YML2KeirmBB/94TLRzt+uqL0HCr5nGs yBvqyiH55I33sTFS9Hd9fhwV81a9YwwUZtI0tTXOf6KiSuoQONnmmjEOQ+bVC/Jw mDbU4UJw1ufknplJTfRembMx8CSpEsxvxqIF2vzWMs5C3JNAuYC8UC0aFOoIDCGp HL1QoqxwMvxtX++baRRTwitpzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjLhJDN nV6lv7JK8F9r5KIUSRTVMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x S29ObWRmb1BQektZRXViMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+crimp/IbOMuS3dQ0FY+WA1UKBd0uKAFuBawmHAZ/Zq8U4KA3CQtN 2qJPKImRrBjoPkIyTBk+UcKE+JKh2AFkbzi5spLwc4yV9K6WwGGDn1Hxt5X6RWDZ RxTyKbCpGLSPiSPUeL+rCB5Kk6yevy/sguJkVMoTIy1NF7I4+KOyStlm22NPjX9p AXyHoNU57CmflOkkDkoPlKlPwxC6+x/hJ/9dC5q1wOH5Qc+9FEovAC+y6HwGQ82k 7/VBdsnTF5ikFDPD9IX/CA7kOcfQuKrj8cZROJLc0IpMITeTs5/TJA/dWxEDS5G6 uBBYI/wD0vBOiztxICtgzjJw+qJc9sag -----END CERTIFICATE-----Generated at Mon May 12 19:10:12 2025 by rpki-client