$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: lcxTC5806bUls5NMOKaimcjfxSbP9oWipaM+DoLLtGo= Subject key identifier: E5:A6:57:5F:BB:2D:BC:EA:08:C2:94:6D:34:80:D0:B9:96:9E:4C:D6 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: C7 Signing time: Tue 13 May 2025 04:59:24 +0000 Manifest this update: Tue 13 May 2025 04:59:24 +0000 Manifest next update: Tue 20 May 2025 04:59:24 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: KVL/Cs7Zx09AcF9Y+pM8i9LQzM/wWk08ajGhDQX0vVk=) 2: 7E15FE0C27B711EF8867AA49C4F9AE02.roa (hash: xJBS1rE4hyaBoQRSLDqWi8kJZTi9bOV+WLs5Y+jjSRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: May 13 04:59:24 2025 GMT Not After : May 20 04:59:24 2025 GMT Subject: CN=6822d1ac-6f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:f0:19:56:76:03:3c:ce:5c:69:30:d5:72: ef:9a:bb:d3:81:25:72:25:fd:ef:21:92:82:db:5b: 17:9c:4b:7d:98:2d:3c:6b:82:d5:26:88:a4:b5:ff: 63:24:aa:4b:27:9d:c4:08:f1:fe:fe:30:50:ad:28: f3:05:d3:d5:35:b9:96:6c:76:d2:f0:8a:14:3e:d7: ad:ba:4e:16:bf:72:85:bb:bf:be:76:db:3b:e3:8d: d2:bc:74:ef:0f:3a:37:9c:1e:5f:39:10:b8:fb:c1: 0a:64:7a:3e:54:aa:83:c3:73:69:31:4d:aa:f6:91: 61:5e:62:3e:e4:64:f5:cb:7b:4d:ac:7c:d8:38:b0: 2a:23:af:86:3f:c8:08:f5:4c:3d:25:af:3c:21:86: d9:71:9d:18:71:4a:ff:e9:f5:9a:d1:6c:31:9d:72: c8:6f:67:3a:6e:e3:2e:ba:49:d8:a3:65:2d:91:47: 67:bc:75:99:18:e7:4e:fc:e5:4d:b8:4f:95:75:b6: 33:a9:87:ee:ee:95:64:f5:ac:b8:f8:5a:ec:85:f2: c5:03:77:c1:78:42:0c:e8:c1:a0:98:1a:b4:f7:90: 43:0e:4a:1b:2e:6c:f7:da:ff:8e:6d:f9:59:65:eb: 98:70:84:bf:cf:82:5b:47:40:a6:9e:c0:be:cd:1f: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:57:5F:BB:2D:BC:EA:08:C2:94:6D:34:80:D0:B9:96:9E:4C:D6 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:69:66:ad:4e:a0:e4:90:4c:1d:b0:27:8c:5c:90:af:86:e9: 16:65:a4:d0:32:8f:d6:7f:74:8a:b4:f6:02:cf:b2:e9:d0:a2: b3:f8:e4:b1:f5:01:a6:24:95:f6:4c:1e:f2:93:ab:27:36:f6: fc:e0:76:14:0a:df:9f:4d:b6:22:54:f7:ee:0a:97:c5:b5:a6: b1:6b:51:b4:2d:e3:c7:17:3c:83:68:65:fb:26:87:8e:91:28: 0f:b1:4a:e7:07:fc:62:57:d7:a9:76:01:b3:02:5b:b7:77:9f: e0:2b:ba:fa:8d:6b:48:36:1b:69:bd:6e:ef:05:a0:ca:6f:4f: 00:42:c9:16:0e:4f:5a:03:c6:3a:ff:31:a2:8b:b1:fc:6a:cd: a6:b8:11:31:c7:2f:86:6f:0a:4d:c8:13:eb:43:5c:0a:71:c2: 7b:8f:70:15:8a:d5:8d:0b:79:89:03:04:2b:87:54:70:01:90: e9:d5:03:46:a0:28:e2:1d:38:dc:f8:f1:dc:1f:b0:55:94:2a: 79:e5:46:76:b7:15:d4:61:21:05:20:77:4f:ed:ba:67:70:ca: f9:84:2b:b4:38:d9:7f:a7:66:92:05:90:fc:47:ff:e6:55:ca: 7e:85:a5:86:fe:ea:0b:08:84:ac:27:99:19:92:5c:9a:28:f1: d5:2d:b1:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjUwNTEzMDQ1OTI0WhcNMjUwNTIwMDQ1OTI0WjAYMRYwFAYD VQQDEw02ODIyZDFhYy02Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlXwGVZ2AzzOXGkw1XLvmrvTgSVyJf3vIZKC21sXnEt9mC08a4LVJoiktf9j JKpLJ53ECPH+/jBQrSjzBdPVNbmWbHbS8IoUPtetuk4Wv3KFu7++dts7443SvHTv Dzo3nB5fORC4+8EKZHo+VKqDw3NpMU2q9pFhXmI+5GT1y3tNrHzYOLAqI6+GP8gI 9Uw9Ja88IYbZcZ0YcUr/6fWa0WwxnXLIb2c6buMuuknYo2UtkUdnvHWZGOdO/OVN uE+VdbYzqYfu7pVk9ay4+FrshfLFA3fBeEIM6MGgmBq095BDDkobLmz32v+ObflZ ZeuYcIS/z4JbR0CmnsC+zR9pTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWmV1+7 LbzqCMKUbTSA0LmWnkzWMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmaWatTqDkkEwdsCeMXJCvhukWZaTQMo/Wf3SKtPYCz7Lp0KKz+OSx 9QGmJJX2TB7yk6snNvb84HYUCt+fTbYiVPfuCpfFtaaxa1G0LePHFzyDaGX7JoeO kSgPsUrnB/xiV9epdgGzAlu3d5/gK7r6jWtINhtpvW7vBaDKb08AQskWDk9aA8Y6 /zGii7H8as2muBExxy+GbwpNyBPrQ1wKccJ7j3AVitWNC3mJAwQrh1RwAZDp1QNG oCjiHTjc+PHcH7BVlCp55UZ2txXUYSEFIHdP7bpncMr5hCu0ONl/p2aSBZD8R//m Vcp+haWG/uoLCISsJ5kZklyaKPHVLbEx -----END CERTIFICATE-----Generated at Wed May 14 19:45:31 2025 by rpki-client