$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: G8P0o6TeBAri5ns0/H+PWmeTqklFPFnbmN+4fhVejzw= Subject key identifier: 7A:8B:CB:A6:6B:35:E1:DD:EB:FA:21:61:35:31:E6:57:85:55:A3:DE Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: A7 Signing time: Fri 16 May 2025 22:13:32 +0000 Manifest this update: Fri 16 May 2025 22:13:31 +0000 Manifest next update: Fri 23 May 2025 22:13:31 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: kwtaNEmSbHJW21aBGg/ahwc+O5SQfJWv1edpxwpxqcg=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: May 16 22:13:31 2025 GMT Not After : May 23 22:13:31 2025 GMT Subject: CN=6827b88b-baf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:17:de:8c:b2:7b:9c:78:01:cf:b3:d2:39: 21:69:55:6b:57:97:21:f3:b5:80:95:0b:b2:ae:52: 93:81:96:c1:6a:c8:95:16:1c:50:c9:ff:ba:49:8c: 0b:21:b2:ec:68:92:08:8c:c5:03:91:80:15:e5:1b: f5:4b:31:68:72:d4:1c:01:7c:1e:22:15:6f:23:31: 63:d2:2c:51:64:93:43:b0:77:e4:b3:11:a3:9e:00: 2a:44:f2:51:df:0a:23:87:e3:9e:c3:66:19:b3:66: 98:94:e2:99:fa:e9:5d:9b:09:f8:a2:98:04:37:af: af:60:1e:f5:d3:d0:a7:f3:ca:b4:d2:da:ba:19:0d: 6a:e0:2c:d6:8a:a9:6d:50:f9:d8:54:98:9a:90:d9: 7a:03:fa:7c:32:78:b6:02:6e:88:9d:48:e8:b0:76: 60:96:13:78:94:66:a6:4c:f8:dd:18:16:86:f9:92: ab:e4:df:30:7b:1b:bf:41:26:5f:ca:a4:55:f5:ff: 1f:30:6b:24:4e:15:5e:10:e7:34:77:39:b9:b3:37: 32:08:59:92:a0:ff:fc:2d:03:c6:32:96:c4:22:81: aa:da:ea:82:db:9f:1b:20:15:02:ba:38:fe:83:da: af:4f:ee:5d:33:7e:ca:a1:0f:cc:ec:31:ca:4a:79: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:CB:A6:6B:35:E1:DD:EB:FA:21:61:35:31:E6:57:85:55:A3:DE X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7c:b5:e2:3d:0b:ea:da:72:7f:65:54:71:ce:2e:ec:e5:48: 8f:97:b1:27:e1:2f:6f:c5:e6:90:7c:1a:e4:c3:2a:50:d5:dc: e1:6a:0a:a9:ac:9b:96:71:52:aa:bc:97:90:8b:3f:ee:ba:61: 89:f1:b8:07:35:8b:bd:2b:e1:de:02:b4:f2:33:b5:8c:85:73: 94:ec:a8:93:ef:7a:89:71:62:90:4a:52:24:e1:c2:41:de:ad: 52:30:b2:cf:23:cb:db:76:bc:dd:34:11:6d:c8:6e:72:76:1c: bf:6e:11:8b:75:a3:1b:8e:2f:60:76:f2:dd:29:1f:51:80:49: 26:a3:74:75:4b:b0:a5:1f:39:56:5c:49:12:ef:a5:25:72:69: 6d:80:c6:9b:74:4f:26:9c:fb:d6:ed:c7:0c:35:3e:01:c3:21: 6e:0c:79:1f:d9:05:0a:91:52:bb:05:93:fe:6f:a7:29:01:0d: 79:64:c8:1c:9f:d5:94:13:9f:c2:42:21:e3:95:07:6d:64:57: 42:de:39:c5:09:ec:8a:59:36:ec:11:51:b7:83:4e:70:ce:7f: 1b:44:22:a4:7d:85:68:c4:0e:2e:a4:65:e5:20:87:46:ea:cc: d8:54:0c:76:90:c8:4a:16:43:4b:37:4f:b6:84:11:4d:08:66: 21:13:cb:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjUwNTE2MjIxMzMxWhcNMjUwNTIzMjIxMzMxWjAYMRYwFAYD VQQDEw02ODI3Yjg4Yi1iYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xMX3oyye5x4Ac+z0jkhaVVrV5ch87WAlQuyrlKTgZbBasiVFhxQyf+6SYwL IbLsaJIIjMUDkYAV5Rv1SzFoctQcAXweIhVvIzFj0ixRZJNDsHfksxGjngAqRPJR 3wojh+Oew2YZs2aYlOKZ+uldmwn4opgEN6+vYB7109Cn88q00tq6GQ1q4CzWiqlt UPnYVJiakNl6A/p8Mni2Am6InUjosHZglhN4lGamTPjdGBaG+ZKr5N8wexu/QSZf yqRV9f8fMGskThVeEOc0dzm5szcyCFmSoP/8LQPGMpbEIoGq2uqC258bIBUCujj+ g9qvT+5dM37KoQ/M7DHKSnk65wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqLy6Zr NeHd6/ohYTUx5leFVaPeMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyfLXiPQvq2nJ/ZVRxzi7s5UiPl7En4S9vxeaQfBrkwypQ1dzhagqp rJuWcVKqvJeQiz/uumGJ8bgHNYu9K+HeArTyM7WMhXOU7KiT73qJcWKQSlIk4cJB 3q1SMLLPI8vbdrzdNBFtyG5ydhy/bhGLdaMbji9gdvLdKR9RgEkmo3R1S7ClHzlW XEkS76UlcmltgMabdE8mnPvW7ccMNT4BwyFuDHkf2QUKkVK7BZP+b6cpAQ15ZMgc n9WUE5/CQiHjlQdtZFdC3jnFCeyKWTbsEVG3g05wzn8bRCKkfYVoxA4upGXlIIdG 6szYVAx2kMhKFkNLN0+2hBFNCGYhE8tJ -----END CERTIFICATE-----Generated at Sat May 17 15:01:54 2025 by rpki-client