$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: vDbLKnnj1OPh5qDZxha8VpaQBVDP71xu1TxA3SEkWMM= Subject key identifier: C3:9E:72:51:CC:A6:62:9C:7F:59:C1:85:AE:64:7A:6F:5B:4A:5B:7A Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: A7 Signing time: Fri 09 May 2025 05:09:37 +0000 Manifest this update: Fri 09 May 2025 05:09:37 +0000 Manifest next update: Fri 16 May 2025 05:09:36 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: tVjz0IxT4Cj3KtK2TcNlB3+6YDmw4pmAPL7OHnc2vO4=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: May 9 05:09:37 2025 GMT Not After : May 16 05:09:36 2025 GMT Subject: CN=681d8e11-0e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:98:84:ec:5d:ff:c3:f4:ec:75:d8:7d:28: d1:75:9d:e3:5b:69:14:b8:1e:6e:3b:81:47:18:13: 21:52:b7:9c:d1:c1:92:93:45:ec:51:09:69:f3:0c: de:d2:67:25:7a:7a:b4:16:30:4b:59:03:f6:df:4c: 6d:4c:e8:57:02:46:bd:e0:af:45:a1:95:2d:12:72: 02:89:f3:80:70:5f:62:61:39:49:b7:48:d3:f3:c7: 01:cf:38:fa:e9:db:d8:fc:c2:74:3f:b1:e0:52:b2: 9f:ea:e9:50:a4:0e:1c:f8:b3:5e:32:3b:38:27:80: 80:21:df:a9:fe:f8:23:67:67:38:05:e2:29:27:cb: a2:72:25:fb:28:ab:b1:be:83:15:71:2e:64:00:a0: bd:51:c5:ba:86:e3:de:ae:bc:83:56:53:31:11:ff: ed:eb:68:81:0d:04:b8:3c:60:6e:5a:44:2c:8d:88: 07:87:04:83:a4:a2:00:ee:7b:72:e5:8e:50:a2:a6: 93:fd:95:46:8b:0e:b7:35:83:7a:c0:a6:eb:6e:1a: 2b:6e:0b:d7:a5:53:ca:5e:32:6d:43:27:39:d1:88: 38:a6:5e:b4:02:0c:57:07:23:df:af:f9:77:ff:e5: b3:44:ee:40:0a:64:ba:bf:af:a7:08:33:40:57:fb: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9E:72:51:CC:A6:62:9C:7F:59:C1:85:AE:64:7A:6F:5B:4A:5B:7A X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:29:3a:87:e5:16:ef:f7:da:bc:8b:dc:b2:a5:73:bf:1f:f7: 81:80:bb:8e:80:0f:2f:cb:44:ec:4a:cf:8b:f5:96:51:4c:9d: 5a:e0:cf:0d:0d:94:62:d8:0f:a0:c1:47:13:31:35:9a:22:33: 4c:60:79:de:b5:6b:35:a8:83:47:7f:9c:6c:38:2a:e4:e3:94: 59:22:fe:13:6a:d4:0b:99:04:8d:48:80:45:65:81:80:17:12: ac:fb:c8:0a:69:38:13:0d:65:0d:f0:82:85:60:7a:c9:f7:7b: 1e:fd:ea:be:d7:fc:d7:d8:15:22:9a:ab:ff:91:6a:b1:aa:41: 70:06:81:ed:38:70:18:8f:fe:6e:86:20:1c:ea:f5:33:71:d0: ff:6c:52:19:c3:96:29:57:7a:ee:b8:ed:5d:b4:6b:74:c6:0b: 49:87:98:74:51:2f:c2:e0:76:e9:18:0d:3e:68:8d:c4:fe:53: 68:0a:9f:ec:48:7d:da:80:ce:5e:be:83:40:d1:d7:6f:08:2a: 51:1c:f4:10:a2:39:4c:e1:9b:41:01:40:1e:43:00:66:8e:27: 12:82:cd:e9:9d:29:85:e8:14:7c:a7:d6:e6:6c:8d:34:a0:e6: 1d:3a:58:95:1e:95:d3:81:ff:b2:8e:0b:95:38:01:d3:a4:e8: e5:7b:10:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw NkEwQ0I0NzEwHhcNMjUwNTA5MDUwOTM3WhcNMjUwNTE2MDUwOTM2WjAYMRYwFAYD VQQDEw02ODFkOGUxMS0wZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lSYhOxd/8P07HXYfSjRdZ3jW2kUuB5uO4FHGBMhUrec0cGSk0XsUQlp8wze 0mclenq0FjBLWQP230xtTOhXAka94K9FoZUtEnICifOAcF9iYTlJt0jT88cBzzj6 6dvY/MJ0P7HgUrKf6ulQpA4c+LNeMjs4J4CAId+p/vgjZ2c4BeIpJ8uiciX7KKux voMVcS5kAKC9UcW6huPerryDVlMxEf/t62iBDQS4PGBuWkQsjYgHhwSDpKIA7nty 5Y5QoqaT/ZVGiw63NYN6wKbrbhorbgvXpVPKXjJtQyc50Yg4pl60AgxXByPfr/l3 /+WzRO5ACmS6v6+nCDNAV/tAfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOeclHM pmKcf1nBha5kem9bSlt6MB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010 SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATKTqH5Rbv99q8i9yypXO/H/eBgLuOgA8vy0TsSs+L9ZZRTJ1a4M8N DZRi2A+gwUcTMTWaIjNMYHnetWs1qINHf5xsOCrk45RZIv4TatQLmQSNSIBFZYGA FxKs+8gKaTgTDWUN8IKFYHrJ93se/eq+1/zX2BUimqv/kWqxqkFwBoHtOHAYj/5u hiAc6vUzcdD/bFIZw5YpV3ruuO1dtGt0xgtJh5h0US/C4HbpGA0+aI3E/lNoCp/s SH3agM5evoNA0ddvCCpRHPQQojlM4ZtBAUAeQwBmjicSgs3pnSmF6BR8p9bmbI00 oOYdOliVHpXTgf+yjguVOAHTpOjlexBc -----END CERTIFICATE-----Generated at Sat May 10 21:11:06 2025 by rpki-client