$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json) Hash identifier: ge64YfMPxBAR+o6Y2kMX+6D21z4q4RdHjIsjWu61N2Y= Subject key identifier: BB:63:D9:78:72:A2:01:89:DB:C7:46:57:DF:BE:53:5E:3F:AD:C4:93 Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft Manifest number: F3 Signing time: Tue 13 May 2025 04:26:50 +0000 Manifest this update: Tue 13 May 2025 04:26:50 +0000 Manifest next update: Tue 20 May 2025 04:26:50 +0000 Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: dh+5fQD3TnyujUlEm5nbo6ZfhgBcBaPl3AIcrRpJ9gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E Validity Not Before: May 13 04:26:50 2025 GMT Not After : May 20 04:26:50 2025 GMT Subject: CN=6822ca0a-6b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c4:fe:05:ac:72:94:b7:96:63:d9:c9:9a:c1: 0f:62:c4:60:b4:96:b5:2e:32:af:2a:1e:20:79:62: bf:26:12:f7:0b:a0:e3:61:bd:af:18:5d:94:25:f1: 58:39:e3:26:4f:cb:ba:f6:26:31:b6:ed:65:f2:7d: d7:5b:21:c4:f5:ff:1c:a1:92:23:18:ca:98:c2:05: cf:47:61:65:ca:89:e3:91:4a:54:14:52:1b:5d:e3: e5:62:a7:52:4b:02:36:a2:63:ab:8b:1e:74:cf:e4: e0:13:53:6e:55:d4:a0:d4:19:72:47:20:1c:1a:b9: 77:df:90:2b:2d:b7:e5:7e:e5:7b:6a:5f:d8:6c:f0: 08:95:b8:99:bb:c8:c9:3c:33:2a:1d:29:1d:98:ca: e1:a5:50:f5:9f:00:35:b9:86:08:a7:5c:42:7c:bb: 6b:0d:61:f4:30:8b:68:70:1e:10:63:1c:62:0c:7e: fb:88:7f:37:b4:46:80:93:48:f2:92:f6:d0:56:d6: 42:b3:7d:b9:95:e4:98:3e:f3:2c:1c:5d:ee:0e:f7: a1:8d:66:d5:77:cf:fd:2e:2f:11:5f:19:d2:ac:a1: a4:51:c1:02:f4:94:ea:ca:29:90:61:2d:5a:7a:50: 0c:99:6d:6a:9b:d0:dc:aa:f9:48:06:2b:c4:f4:b7: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:63:D9:78:72:A2:01:89:DB:C7:46:57:DF:BE:53:5E:3F:AD:C4:93 X509v3 Authority Key Identifier: keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:28:82:3f:e7:00:24:99:08:54:aa:4f:56:1d:38:76:20: 58:94:e2:4d:13:29:ed:e6:5a:d5:e0:35:28:99:da:2a:0d:b4: f1:5c:25:94:70:aa:29:af:6b:b7:2e:11:d1:ae:46:a1:8e:c6: 24:70:36:31:20:48:0d:de:78:aa:33:37:fa:f0:6f:a4:0c:0e: 06:9a:a4:18:dd:0c:fe:7d:2c:e8:c6:2c:bd:7c:7e:f5:37:6f: 7c:f2:01:de:ab:7d:3a:38:18:ad:9f:20:63:8d:6e:d9:c2:27: 1a:45:c8:17:8a:85:0b:53:35:69:8d:67:e5:e4:32:4f:ad:cd: a9:c8:55:da:73:68:f1:ad:ed:ef:a2:09:ec:df:19:61:5f:b9: e8:9d:5e:e3:d1:10:21:bc:28:1c:a0:f6:ac:79:29:41:7d:5b: 09:54:b4:f2:6c:78:07:e4:06:12:2f:9c:77:d7:d5:9c:06:71: 9b:65:f3:81:fd:0d:c3:d5:3e:0b:11:fc:af:b5:b2:72:1e:e1: be:c9:74:3e:50:5f:88:2b:4d:bf:23:c8:cd:4c:28:3f:b0:be: 29:92:71:e1:cb:b7:f1:16:43:b0:d1:78:f1:bb:db:12:90:6c: f7:9a:4f:58:8a:7c:30:35:83:e4:fc:ed:90:ce:2d:69:9b:ae: 82:8f:09:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB MUJCOTZGM0UwHhcNMjUwNTEzMDQyNjUwWhcNMjUwNTIwMDQyNjUwWjAYMRYwFAYD VQQDEw02ODIyY2EwYS02YjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMT+BaxylLeWY9nJmsEPYsRgtJa1LjKvKh4geWK/JhL3C6DjYb2vGF2UJfFY OeMmT8u69iYxtu1l8n3XWyHE9f8coZIjGMqYwgXPR2FlyonjkUpUFFIbXePlYqdS SwI2omOrix50z+TgE1NuVdSg1BlyRyAcGrl335ArLbflfuV7al/YbPAIlbiZu8jJ PDMqHSkdmMrhpVD1nwA1uYYIp1xCfLtrDWH0MItocB4QYxxiDH77iH83tEaAk0jy kvbQVtZCs325leSYPvMsHF3uDvehjWbVd8/9Li8RXxnSrKGkUcEC9JTqyimQYS1a elAMmW1qm9DcqvlIBivE9LdDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtj2Xhy ogGJ28dGV9++U14/rcSTMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1 SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC8yiCP+cAJJkIVKpPVh04diBYlOJNEynt5lrV4DUomdoqDbTxXCWU cKopr2u3LhHRrkahjsYkcDYxIEgN3niqMzf68G+kDA4GmqQY3Qz+fSzoxiy9fH71 N2988gHeq306OBitnyBjjW7ZwicaRcgXioULUzVpjWfl5DJPrc2pyFXac2jxre3v ogns3xlhX7nonV7j0RAhvCgcoPaseSlBfVsJVLTybHgH5AYSL5x319WcBnGbZfOB /Q3D1T4LEfyvtbJyHuG+yXQ+UF+IK02/I8jNTCg/sL4pknHhy7fxFkOw0Xjxu9sS kGz3mk9YinwwNYPk/O2Qzi1pm66CjwnC -----END CERTIFICATE-----Generated at Wed May 14 13:05:49 2025 by rpki-client