$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: kVKVHrNRTUb86s/HyNDQOgTTB0P6rcyi5K44/mH/CZs= Subject key identifier: 17:F9:B5:F1:F8:CD:F1:5A:54:92:7F:78:70:99:ED:0C:02:29:AF:31 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 0835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0823 Signing time: Mon 12 May 2025 20:38:07 +0000 Manifest this update: Mon 12 May 2025 20:38:07 +0000 Manifest next update: Mon 19 May 2025 20:38:07 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: zQ35/fV5ywgLZVNHXunHc+8kyMTCSsHBbnMpfdsXyvQ=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: May 12 20:38:07 2025 GMT Not After : May 19 20:38:07 2025 GMT Subject: CN=68225c2f-d25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:cb:d5:39:f7:cb:66:25:d0:df:19:2a:ce: 48:0f:06:fc:cb:bb:95:d6:2f:35:f0:14:c7:33:b0: 01:29:73:05:e6:a1:fe:fd:ba:30:3f:38:8f:3b:cd: 19:62:9f:d6:ba:71:83:b3:5f:79:42:c4:4f:31:b8: 2c:a1:8e:3b:0b:51:59:60:f0:f0:ec:d0:cd:a5:0c: ef:48:07:9d:4e:c2:75:9d:8b:ed:f8:2e:3c:22:64: 1f:02:52:cd:fd:04:15:08:91:fc:e6:d2:55:d3:b9: 0e:28:78:1d:2e:fb:90:c8:2a:81:83:f0:4c:46:b1: fa:6e:fd:f4:e2:75:f5:14:7b:1d:96:75:44:35:87: bb:18:ee:fb:83:b2:05:65:2d:95:09:e0:d9:d8:7e: d8:1e:5e:ce:81:b9:31:4e:dc:81:5c:dc:ae:52:88: da:fc:de:bb:6b:1b:59:6c:ef:93:67:83:1d:43:7a: 48:b4:53:3e:14:f7:21:f9:7c:bf:5e:f9:5c:14:26: 46:a0:65:86:3c:b7:11:94:1d:5d:4f:f5:da:1c:65: ce:69:b4:df:fa:16:82:90:0c:e3:c5:b0:a6:ae:24: 54:d1:92:7c:cc:32:a8:b0:d2:7c:de:a0:bb:81:2d: c7:39:dc:61:58:5f:63:2a:3e:3d:fc:7e:46:49:c5: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F9:B5:F1:F8:CD:F1:5A:54:92:7F:78:70:99:ED:0C:02:29:AF:31 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7d:d1:9d:7b:ab:7a:11:b9:e4:21:34:6c:a8:e2:be:27:e3: 50:ab:c9:0d:1f:1f:d9:be:ac:df:63:91:b4:68:0e:33:de:59: 48:72:57:ff:d9:42:ff:c1:d3:b3:5c:6a:fb:52:f4:30:d9:08: e3:03:04:92:8c:62:d0:09:76:8c:73:21:62:9f:d6:06:df:1d: 3a:ab:45:04:e4:bc:0d:23:5a:91:0e:01:22:29:90:c4:be:e0: 91:e0:c8:ec:59:b2:ad:21:3b:57:41:63:1c:a5:12:c4:90:19: 2a:32:76:e3:c2:61:c8:6d:8a:0b:2c:11:bb:89:ac:a4:dc:85: 7f:bc:d3:dc:38:24:01:e1:81:b2:7f:ee:35:c4:64:d6:05:ac: 81:6a:f2:2c:6a:ca:1b:5a:1d:a2:ab:f7:d9:13:06:2e:e8:ad: c9:03:b6:0d:98:63:08:3e:61:d7:3f:8b:52:9f:31:86:ca:77: e5:c7:71:78:cc:93:9a:33:2d:20:90:ff:23:32:96:83:dd:3f: 4a:9e:0f:fe:f9:e1:39:14:57:43:34:84:05:eb:47:01:60:6d: 27:e1:52:3c:49:44:1d:3c:96:e0:ce:96:3c:35:3a:49:08:b8: e0:d1:cd:2a:05:85:53:8d:fe:8d:c4:46:b0:81:d8:54:47:48: a3:51:8d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwNTEyMjAzODA3WhcNMjUwNTE5MjAzODA3WjAYMRYwFAYD VQQDEw02ODIyNWMyZi1kMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJLL1Tn3y2Yl0N8ZKs5IDwb8y7uV1i818BTHM7ABKXMF5qH+/bowPziPO80Z Yp/WunGDs195QsRPMbgsoY47C1FZYPDw7NDNpQzvSAedTsJ1nYvt+C48ImQfAlLN /QQVCJH85tJV07kOKHgdLvuQyCqBg/BMRrH6bv304nX1FHsdlnVENYe7GO77g7IF ZS2VCeDZ2H7YHl7OgbkxTtyBXNyuUoja/N67axtZbO+TZ4MdQ3pItFM+FPch+Xy/ XvlcFCZGoGWGPLcRlB1dT/XaHGXOabTf+haCkAzjxbCmriRU0ZJ8zDKosNJ83qC7 gS3HOdxhWF9jKj49/H5GScUJ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf5tfH4 zfFaVJJ/eHCZ7QwCKa8xMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0fdGde6t6EbnkITRsqOK+J+NQq8kNHx/ZvqzfY5G0aA4z3llIclf/ 2UL/wdOzXGr7UvQw2QjjAwSSjGLQCXaMcyFin9YG3x06q0UE5LwNI1qRDgEiKZDE vuCR4MjsWbKtITtXQWMcpRLEkBkqMnbjwmHIbYoLLBG7iayk3IV/vNPcOCQB4YGy f+41xGTWBayBavIsasobWh2iq/fZEwYu6K3JA7YNmGMIPmHXP4tSnzGGynflx3F4 zJOaMy0gkP8jMpaD3T9Kng/++eE5FFdDNIQF60cBYG0n4VI8SUQdPJbgzpY8NTpJ CLjg0c0qBYVTjf6NxEawgdhUR0ijUY0e -----END CERTIFICATE-----Generated at Wed May 14 15:17:33 2025 by rpki-client