$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: yWPdBfPAnkF0y3Uvlao/EaWS72+OguP7IaPYJJ1a30U= Subject key identifier: EA:99:18:60:B0:0C:4C:3B:03:80:3A:9B:EB:DD:3C:63:E2:BA:0F:80 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: DD Signing time: Sat 17 May 2025 05:01:47 +0000 Manifest this update: Sat 17 May 2025 05:01:47 +0000 Manifest next update: Sat 24 May 2025 05:01:47 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: Yd07/pg+IJFTL2gMa51ksDfRsO8g0/XBwK3gtAiyGxs=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: May 17 05:01:47 2025 GMT Not After : May 24 05:01:47 2025 GMT Subject: CN=6828183b-ce0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:38:7d:1d:af:24:f9:26:0e:ab:11:15:5d: a5:21:e4:1c:0a:78:1d:4a:2c:a7:fe:7c:c0:18:fc: e5:b7:1b:e8:db:cf:59:17:3f:5e:9b:ca:b9:45:ee: c7:e1:13:4c:d3:dd:19:0c:29:bf:f2:1d:13:c0:99: 55:0e:c9:90:b9:95:1d:eb:70:68:2f:8e:a1:80:15: 49:64:44:66:98:d2:1d:7a:4b:8d:d2:d2:e7:f7:cc: 3a:f8:45:51:32:6e:b6:c9:05:54:c0:e4:9a:58:f3: d3:c6:6b:8a:58:b1:a1:a6:49:e3:b6:56:ce:49:c6: 5b:53:88:fe:85:93:e3:8f:6d:8e:fa:16:e8:85:b8: 1f:1f:41:5d:eb:1a:be:00:7b:03:54:f5:ed:49:17: 73:89:41:5a:16:b3:89:f8:7a:8b:1a:15:dc:da:fa: ad:5d:da:df:26:a4:8b:14:f2:3b:d6:fc:3b:09:51: 18:e4:6b:16:3e:38:c8:db:29:36:cb:a0:27:a2:c7: d4:30:b2:c4:d4:ac:ee:bb:6e:6c:78:f3:40:93:a6: f1:94:35:5e:a9:06:e7:fd:45:ec:97:e3:84:6f:1b: 0b:2a:68:7a:f5:6a:2a:d8:84:b9:f3:9e:6d:89:70: 0d:34:e1:55:85:78:83:2a:7c:17:f8:8b:d3:39:12: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:99:18:60:B0:0C:4C:3B:03:80:3A:9B:EB:DD:3C:63:E2:BA:0F:80 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:e6:0f:23:d7:b2:2e:c9:d2:0f:f2:dd:90:7d:5d:7e:a8:d1: 62:1b:68:3a:8c:79:b6:ab:73:60:d1:3c:5e:5e:dd:2b:6c:b9: b0:dd:9c:89:62:63:68:50:02:8d:82:88:c2:ea:02:b6:d1:c7: d0:a1:a3:8c:3e:47:0b:b2:85:f7:05:17:56:67:f5:48:b7:87: b0:c3:4d:31:05:2a:cb:e3:dc:bf:c4:b5:d9:f1:eb:a5:49:34: e7:33:a6:38:f8:13:ee:71:4c:65:c0:b9:cf:b2:03:cc:df:36: d0:7d:64:cb:ba:40:30:2d:d8:d8:ab:d8:d6:eb:88:73:02:5b: b7:b6:d8:e7:00:69:08:12:79:92:36:08:f9:54:d9:83:00:d5: c7:ee:40:eb:e6:86:41:cb:8d:3b:19:f0:5a:81:ae:ac:87:c7: 49:5b:c1:bc:ca:8c:a9:f2:d1:a6:10:ef:15:c1:20:3e:66:90: 17:17:d3:61:d2:48:29:52:e5:a0:53:60:d9:9d:da:62:45:89: b1:df:03:a4:7b:1b:27:d0:25:f4:28:d3:be:00:55:19:0d:fa: dd:93:f7:e6:0e:83:1a:8c:24:b8:96:13:a6:5a:34:53:99:fc: 47:d2:dd:3d:42:2f:3a:72:4d:8e:d6:7f:61:25:aa:0d:62:af: c6:4e:e1:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUwNTE3MDUwMTQ3WhcNMjUwNTI0MDUwMTQ3WjAYMRYwFAYD VQQDEw02ODI4MTgzYi1jZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSk4fR2vJPkmDqsRFV2lIeQcCngdSiyn/nzAGPzltxvo289ZFz9em8q5Re7H 4RNM090ZDCm/8h0TwJlVDsmQuZUd63BoL46hgBVJZERmmNIdekuN0tLn98w6+EVR Mm62yQVUwOSaWPPTxmuKWLGhpknjtlbOScZbU4j+hZPjj22O+hbohbgfH0Fd6xq+ AHsDVPXtSRdziUFaFrOJ+HqLGhXc2vqtXdrfJqSLFPI71vw7CVEY5GsWPjjI2yk2 y6AnosfUMLLE1Kzuu25sePNAk6bxlDVeqQbn/UXsl+OEbxsLKmh69Woq2IS5855t iXANNOFVhXiDKnwX+IvTORJQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqZGGCw DEw7A4A6m+vdPGPiug+AMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV5g8j17IuydIP8t2QfV1+qNFiG2g6jHm2q3Ng0TxeXt0rbLmw3ZyJ YmNoUAKNgojC6gK20cfQoaOMPkcLsoX3BRdWZ/VIt4eww00xBSrL49y/xLXZ8eul STTnM6Y4+BPucUxlwLnPsgPM3zbQfWTLukAwLdjYq9jW64hzAlu3ttjnAGkIEnmS Ngj5VNmDANXH7kDr5oZBy407GfBaga6sh8dJW8G8yoyp8tGmEO8VwSA+ZpAXF9Nh 0kgpUuWgU2DZndpiRYmx3wOkexsn0CX0KNO+AFUZDfrdk/fmDoMajCS4lhOmWjRT mfxH0t09Qi86ck2O1n9hJaoNYq/GTuHG -----END CERTIFICATE-----Generated at Sat May 17 22:35:07 2025 by rpki-client