$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: cjpAGrE0bPLraUML6y96uyjjrlu/wmOJaJ3dSZTPG4E= Subject key identifier: 98:42:A3:42:ED:6C:E7:47:B2:24:2B:2D:2A:28:03:53:D8:B8:B8:4A Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 3516 Signing time: Sat 10 May 2025 14:22:44 +0000 Manifest this update: Sat 10 May 2025 14:22:43 +0000 Manifest next update: Sat 17 May 2025 14:22:43 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: GpjRI5Lokgu17DvSUDSg43V9XnYzdOZOj7at7/dpw5o=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) 3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) 4: 2073E864296811F0A6399A39C4F9AE02.roa (hash: 5FvqPzBcjWz4GHZxLZh7/YpHbTE9hTaIYil8ZlKlgWk=) 5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) 6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: XHgWXPYofK0UqDGJyFt5vqak/B9drtR7oomIl0a3mgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13699 (0x3583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: May 10 14:22:43 2025 GMT Not After : May 17 14:22:43 2025 GMT Subject: CN=681f6133-f441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:d2:b8:c9:af:00:9a:6c:57:2c:6b:17:73: 38:3c:e2:06:a9:a4:85:dc:ab:6d:0f:61:fe:38:df: d5:12:8a:38:e3:7c:64:40:fc:d5:ac:bd:d8:12:f7: b2:5d:40:2d:74:1e:0b:e4:a3:8d:48:8f:5b:62:df: 62:5b:1c:94:f7:8e:f6:b8:a6:87:a2:5c:e0:7f:98: 72:88:0a:56:16:88:6c:b6:0e:c0:0a:cd:7a:a3:df: 54:53:d9:1c:8c:f1:45:d8:21:b1:db:d3:87:69:92: a7:00:bb:ba:47:61:be:d2:94:21:87:56:dd:3c:75: d4:c0:95:49:e9:91:54:c1:73:d5:f6:61:1e:94:b5: 5f:1a:85:8a:54:93:2f:57:ea:1b:51:b0:05:3d:b7: 77:8a:57:55:fc:f2:11:e4:00:5e:8c:8e:0f:7e:87: 1f:d2:37:ba:d9:90:be:42:a0:1a:d5:86:1b:19:a3: 5b:48:e3:f2:9b:c9:63:f5:0b:e2:ac:5c:97:3a:3c: e2:36:e0:b8:31:05:54:27:2e:0b:91:3c:3b:57:5a: b2:af:ad:87:b2:77:5e:67:c7:bb:e5:10:0d:b5:48: d5:89:88:ef:c2:b7:61:1c:d4:14:43:37:7c:8c:9f: 13:93:c3:2d:2f:d7:0e:36:f3:7a:c5:f4:0c:9f:e5: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:A3:42:ED:6C:E7:47:B2:24:2B:2D:2A:28:03:53:D8:B8:B8:4A X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:39:ec:21:a8:a6:51:fd:f4:ea:e9:4f:38:42:01:14:67:6f: 4a:2f:47:4e:a0:87:81:44:82:e3:83:15:ee:21:e0:37:3f:cf: 35:be:5e:16:22:f7:f3:70:a1:d3:77:ff:a2:f7:fa:9b:14:f4: 74:c0:56:18:18:6e:f0:6c:5c:42:b3:b7:b1:d0:b2:66:b1:ed: b5:48:2d:a8:c0:16:91:30:9b:06:94:66:2b:af:45:a2:32:0a: d2:13:c7:39:50:d3:36:1c:b2:b1:f5:a3:8e:6c:1f:7a:fe:1c: 10:2d:59:05:6b:0a:a1:ab:55:90:76:f2:06:70:07:f8:ab:16: f7:0d:df:ff:e6:15:ec:23:29:a7:81:0a:36:0f:04:f3:32:eb: a1:11:ee:c4:bf:fc:12:6b:34:35:d9:eb:37:84:6b:2f:23:9c: e9:1e:7d:f1:80:d8:1b:2c:fb:bb:64:d6:6a:3d:ce:d0:34:68: 56:19:90:2d:b4:f5:7b:97:01:a5:70:17:48:74:a5:44:83:1b: 97:2f:fd:5e:b4:2e:74:89:9b:83:86:e3:c3:72:30:c4:be:0a: 5c:1e:6f:91:8d:74:81:9f:e5:0f:0d:75:49:6f:a6:31:97:08: c8:db:75:1a:08:e8:85:44:14:82:82:24:a0:10:bd:1e:4c:fa: 04:c7:02:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwNTEwMTQyMjQzWhcNMjUwNTE3MTQyMjQzWjAYMRYwFAYD VQQDEw02ODFmNjEzMy1mNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMTSuMmvAJpsVyxrF3M4POIGqaSF3KttD2H+ON/VEoo443xkQPzVrL3YEvey XUAtdB4L5KONSI9bYt9iWxyU9472uKaHolzgf5hyiApWFohstg7ACs16o99UU9kc jPFF2CGx29OHaZKnALu6R2G+0pQhh1bdPHXUwJVJ6ZFUwXPV9mEelLVfGoWKVJMv V+obUbAFPbd3ildV/PIR5ABejI4Pfocf0je62ZC+QqAa1YYbGaNbSOPym8lj9Qvi rFyXOjziNuC4MQVUJy4LkTw7V1qyr62HsndeZ8e75RANtUjViYjvwrdhHNQUQzd8 jJ8Tk8MtL9cONvN6xfQMn+VuBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhCo0Lt bOdHsiQrLSooA1PYuLhKMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNOewhqKZR/fTq6U84QgEUZ29KL0dOoIeBRILjgxXuIeA3P881vl4W IvfzcKHTd/+i9/qbFPR0wFYYGG7wbFxCs7ex0LJmse21SC2owBaRMJsGlGYrr0Wi MgrSE8c5UNM2HLKx9aOObB96/hwQLVkFawqhq1WQdvIGcAf4qxb3Dd//5hXsIymn gQo2DwTzMuuhEe7Ev/wSazQ12es3hGsvI5zpHn3xgNgbLPu7ZNZqPc7QNGhWGZAt tPV7lwGlcBdIdKVEgxuXL/1etC50iZuDhuPDcjDEvgpcHm+RjXSBn+UPDXVJb6Yx lwjI23UaCOiFRBSCgiSgEL0eTPoExwIg -----END CERTIFICATE-----Generated at Sat May 10 20:06:24 2025 by rpki-client