$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: 08dDdvHctpeunGWT/8b81MrauukUruPEBRJU6ntb8Xw= Subject key identifier: CE:AA:3A:96:1B:14:34:BF:34:42:99:7D:AC:E0:15:7B:92:88:CB:AD Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: CE Signing time: Sun 11 May 2025 04:31:27 +0000 Manifest this update: Sun 11 May 2025 04:31:26 +0000 Manifest next update: Sun 18 May 2025 04:31:26 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: Hz9gEhj1Fwf320XwcsQNNA9Ns3EDpjIOr4MxOQa9nDE=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: L/NVWM+Df+GwuQqnyYWtlVp/5U+iQmr8G8cxiRiESFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: May 11 04:31:26 2025 GMT Not After : May 18 04:31:26 2025 GMT Subject: CN=6820281e-289a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:00:ca:68:0b:c8:d7:7b:31:07:bc:6f:f5: 87:02:2e:0f:03:51:83:5c:b8:20:4f:d8:b7:27:e8: a9:c7:b8:bf:ca:4f:95:fa:5c:1d:63:3d:41:d0:76: f2:da:fe:4e:0c:ef:68:e8:35:c1:bc:ec:af:2e:59: 52:df:61:42:1e:f8:a3:4e:e9:a3:18:5f:75:11:a5: 82:05:4e:61:a9:21:5c:aa:03:ef:20:d0:f5:75:70: ce:9b:f5:68:ca:92:d4:f8:25:a1:99:af:e8:8e:cc: 13:92:ff:10:dd:f2:51:34:26:1b:c8:59:0e:c7:95: 87:5d:af:b4:ba:81:1c:26:60:47:53:71:21:de:0e: 3e:82:e0:51:b7:fb:f2:6d:67:01:8f:02:f7:4e:c3: 1a:7d:80:38:ec:65:05:f6:b7:a0:62:d3:74:98:e9: 8a:31:e7:e4:39:e6:d0:fc:c8:83:46:b2:10:a9:f1: af:f4:34:5a:4e:29:44:02:75:bd:4e:02:6b:6f:67: ba:ac:d8:47:5c:0f:1c:3e:73:ba:77:92:93:66:db: 6c:b1:4e:26:a4:6b:9a:9a:ed:00:fc:13:a4:96:f8: 12:5b:e0:93:c7:f1:96:cf:87:b3:b8:97:b4:fd:f8: 16:35:82:f1:1f:30:ba:61:69:98:e3:17:fe:3e:b1: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:3A:96:1B:14:34:BF:34:42:99:7D:AC:E0:15:7B:92:88:CB:AD X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0d:9e:f9:50:6f:f8:cf:18:1f:37:26:b4:ed:9f:50:7f:a4: 12:cc:0f:7d:cf:54:c1:a9:e0:58:34:8b:9b:a9:54:0b:05:6d: 93:23:60:dc:ef:37:7b:2b:15:d2:a3:4a:57:d2:d3:2c:8a:0e: e5:83:6f:5b:29:5c:11:0b:e1:50:ec:90:5b:90:f4:19:07:8b: 2e:e6:3b:c8:96:f5:7c:fd:83:f5:f8:7d:f2:c8:6a:fc:37:ff: 10:ae:7e:4b:83:39:83:8f:7f:53:3e:9a:2b:b7:5f:8a:9e:74: 4c:8d:f0:90:31:f4:5c:ae:c0:3c:72:ee:a7:e9:40:e3:08:ca: 52:ad:d5:5c:b6:96:09:8e:c0:7e:64:15:5e:d9:a7:cc:21:4a: b6:f4:7c:be:32:b4:34:38:2b:14:e8:fd:c4:ca:e8:7c:cb:51: 89:68:db:f5:f9:2f:5c:0d:98:a0:17:45:3b:82:8e:be:c8:73: 82:e3:4b:c3:a7:5b:03:69:96:68:92:f3:af:73:ee:6d:ac:05: c5:a5:31:95:44:f6:20:f1:96:e2:2f:8d:10:9e:35:c7:9b:ab: 1c:c3:54:9f:40:23:ca:2b:76:56:79:71:c2:64:d7:86:a1:67: cd:89:4d:45:b2:60:28:8f:29:2e:32:a5:50:fd:5c:96:69:08: 20:74:aa:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy QThERjgwM0IwHhcNMjUwNTExMDQzMTI2WhcNMjUwNTE4MDQzMTI2WjAYMRYwFAYD VQQDEw02ODIwMjgxZS0yODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVAAymgLyNd7MQe8b/WHAi4PA1GDXLggT9i3J+ipx7i/yk+V+lwdYz1B0Hby 2v5ODO9o6DXBvOyvLllS32FCHvijTumjGF91EaWCBU5hqSFcqgPvIND1dXDOm/Vo ypLU+CWhma/ojswTkv8Q3fJRNCYbyFkOx5WHXa+0uoEcJmBHU3Eh3g4+guBRt/vy bWcBjwL3TsMafYA47GUF9regYtN0mOmKMefkOebQ/MiDRrIQqfGv9DRaTilEAnW9 TgJrb2e6rNhHXA8cPnO6d5KTZttssU4mpGuamu0A/BOklvgSW+CTx/GWz4ezuJe0 /fgWNYLxHzC6YWmY4xf+PrEXVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6qOpYb FDS/NEKZfazgFXuSiMutMB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2 NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+DZ75UG/4zxgfNya07Z9Qf6QSzA99z1TBqeBYNIubqVQLBW2TI2Dc 7zd7KxXSo0pX0tMsig7lg29bKVwRC+FQ7JBbkPQZB4su5jvIlvV8/YP1+H3yyGr8 N/8Qrn5LgzmDj39TPport1+KnnRMjfCQMfRcrsA8cu6n6UDjCMpSrdVctpYJjsB+ ZBVe2afMIUq29Hy+MrQ0OCsU6P3Eyuh8y1GJaNv1+S9cDZigF0U7go6+yHOC40vD p1sDaZZokvOvc+5trAXFpTGVRPYg8ZbiL40QnjXHm6scw1SfQCPKK3ZWeXHCZNeG oWfNiU1FsmAojykuMqVQ/VyWaQggdKoK -----END CERTIFICATE-----Generated at Sun May 11 16:20:39 2025 by rpki-client