$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: pW1G0FNGN0H3awrlLFWjs7Aj3jpv0PFJyep77uIzvPg= Subject key identifier: 35:F8:5E:BB:95:FC:F9:F8:36:B1:C7:C7:81:C9:CF:9E:2A:E0:2D:28 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 01D3 Signing time: Thu 15 May 2025 02:15:32 +0000 Manifest this update: Thu 15 May 2025 02:15:32 +0000 Manifest next update: Thu 22 May 2025 02:15:32 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: g1s54bRclfd2JG2PaqL3RQ43ys5T54leXhxqg8Q2XE0=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: KAHZon+NZVrzImj+73HPhmHjCJSfdK1Z3Hco2rg+te8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: May 15 02:15:32 2025 GMT Not After : May 22 02:15:32 2025 GMT Subject: CN=68254e44-8904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:51:4e:08:3a:db:c8:85:95:2e:31:61:3f: 5d:79:d3:90:fb:f5:d1:d3:b9:d3:3c:e9:2d:79:e5: 35:ef:c1:e2:2d:00:7c:9c:1d:fb:14:fe:c9:10:33: fb:d6:58:89:42:99:8b:d9:8d:c8:b8:97:5b:38:db: 3a:df:a9:d6:f1:aa:4c:00:dd:ef:67:7a:2c:16:10: 2b:3a:1d:2b:42:56:b8:14:99:a2:fa:f7:77:7f:c8: 4a:30:d7:31:9e:92:27:e1:61:b2:a3:68:f7:aa:4e: 82:c8:15:ca:65:f8:e7:01:16:92:5c:e1:1c:4f:2e: c4:1d:9a:46:3b:4c:38:d0:25:e5:1b:0f:23:bc:04: 55:9d:4b:6d:a3:2a:89:27:a8:59:2b:62:cc:96:e1: 17:a3:30:a8:dd:94:00:07:ab:77:d9:aa:3c:2b:27: 06:9b:8e:20:cf:9c:4f:8f:b2:6c:56:88:80:2e:06: 04:39:66:e2:e8:5c:8a:71:c2:1f:cf:ad:32:a7:97: c4:83:da:af:96:12:2e:dd:61:d1:fe:86:69:3c:f7: 1c:00:0b:a6:b1:9e:0a:c5:e3:52:0a:a7:47:3c:76: a9:ef:70:15:6a:78:fc:98:fd:9a:47:c0:c8:81:82: fd:6b:55:05:14:95:dc:a0:23:db:00:8b:c9:09:f1: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:5E:BB:95:FC:F9:F8:36:B1:C7:C7:81:C9:CF:9E:2A:E0:2D:28 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:79:cc:82:fe:4a:11:c2:86:9c:a3:0e:97:48:9c:7a:80:e7: 01:1a:56:97:02:ab:f0:3f:1b:18:65:04:35:86:f0:bf:5b:61: a5:bb:8d:51:f0:e1:c4:85:bb:24:fe:b5:7f:0f:a8:50:d1:5f: e3:18:35:75:7c:1b:c1:57:73:88:70:94:89:b9:d7:ee:b4:d1: 53:35:ae:03:23:61:54:f6:cf:ba:20:12:94:36:26:dd:5c:9b: 54:bd:45:a2:32:fb:50:f8:4e:10:9a:5c:b2:c8:27:69:49:43: c4:47:a5:de:69:37:58:c2:f5:81:56:4f:d2:27:91:e2:2f:60: 93:74:fc:74:51:6d:08:ff:27:04:79:2e:ea:11:f2:cc:f0:d5: 54:57:3f:ae:f2:33:0d:26:a1:5a:e1:d3:08:95:b6:c3:74:ae: 75:3a:86:f3:5c:f7:5b:2b:ce:31:ab:eb:1a:45:61:40:00:5c: 13:36:55:dc:b5:fd:ba:6c:27:f0:37:82:61:e0:3c:59:ad:c7: 47:0b:42:c3:f6:2d:c3:67:c9:ac:d1:da:81:5b:c4:7c:3a:4f: 61:bd:63:ca:49:d9:4f:7a:32:0e:b3:18:a6:e5:8b:ad:0c:93: f5:f7:f9:04:e1:28:e7:ca:5b:0b:82:18:40:19:72:28:37:40: 64:24:e9:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUwNTE1MDIxNTMyWhcNMjUwNTIyMDIxNTMyWjAYMRYwFAYD VQQDEw02ODI1NGU0NC04OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V5RTgg628iFlS4xYT9dedOQ+/XR07nTPOkteeU178HiLQB8nB37FP7JEDP7 1liJQpmL2Y3IuJdbONs636nW8apMAN3vZ3osFhArOh0rQla4FJmi+vd3f8hKMNcx npIn4WGyo2j3qk6CyBXKZfjnARaSXOEcTy7EHZpGO0w40CXlGw8jvARVnUttoyqJ J6hZK2LMluEXozCo3ZQAB6t32ao8KycGm44gz5xPj7JsVoiALgYEOWbi6FyKccIf z60yp5fEg9qvlhIu3WHR/oZpPPccAAumsZ4KxeNSCqdHPHap73AVanj8mP2aR8DI gYL9a1UFFJXcoCPbAIvJCfEnuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX4XruV /Pn4NrHHx4HJz54q4C0oMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkecyC/koRwoacow6XSJx6gOcBGlaXAqvwPxsYZQQ1hvC/W2Glu41R 8OHEhbsk/rV/D6hQ0V/jGDV1fBvBV3OIcJSJudfutNFTNa4DI2FU9s+6IBKUNibd XJtUvUWiMvtQ+E4QmlyyyCdpSUPER6XeaTdYwvWBVk/SJ5HiL2CTdPx0UW0I/ycE eS7qEfLM8NVUVz+u8jMNJqFa4dMIlbbDdK51OobzXPdbK84xq+saRWFAAFwTNlXc tf26bCfwN4Jh4DxZrcdHC0LD9i3DZ8ms0dqBW8R8Ok9hvWPKSdlPejIOsxim5Yut DJP19/kE4SjnylsLghhAGXIoN0BkJOlN -----END CERTIFICATE-----Generated at Fri May 16 08:17:15 2025 by rpki-client