$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json) Hash identifier: 6BcOOjANAIZCUgfSESzrVN6ARAnbCZiaeIyeYZKZJ+A= Subject key identifier: CA:0E:C3:FF:0F:1E:4E:77:D6:40:E0:A4:73:E0:03:F6:6C:97:63:E8 Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft Manifest number: 21 Signing time: Thu 15 May 2025 07:10:19 +0000 Manifest this update: Thu 15 May 2025 07:10:18 +0000 Manifest next update: Thu 22 May 2025 07:10:18 +0000 Files and hashes: 1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: tLZp8H3pvuv6Z7Lz9E3qq2vO63J8mujAs3xZBRknrQc=) 2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Validity Not Before: May 15 07:10:18 2025 GMT Not After : May 22 07:10:18 2025 GMT Subject: CN=6825935a-e2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:91:82:b5:ef:e1:0a:1b:e8:b5:62:fa:ad: 17:f4:97:b0:a7:5f:0f:0b:b9:04:05:07:61:e2:dd: d5:10:61:e4:5d:bc:5a:a6:33:85:cc:fe:b1:b0:fa: ad:35:5a:e3:aa:9e:40:06:9a:d1:0f:b2:1e:38:9a: 2a:4e:6f:dc:69:05:de:8b:21:1a:96:43:eb:8d:03: e4:48:03:96:8e:f8:47:9d:3a:d9:49:60:28:a9:ac: 1e:4d:98:b1:cb:84:77:21:1b:a8:d7:0d:8e:7c:0c: f8:10:b2:21:b8:94:bf:2e:9f:5a:d6:02:da:d4:c7: 76:5a:9e:2e:d4:4c:1b:3f:10:47:39:09:dc:4c:17: fa:47:0e:41:5c:a6:3c:be:39:c3:a9:6a:ea:ce:70: 23:69:01:bb:4a:e8:98:d3:12:d3:ef:c2:48:31:26: 5b:4d:a1:91:ae:42:2c:6a:dd:ae:84:f2:fa:4c:5c: 76:c0:ee:e5:50:c5:4b:15:fb:7b:20:c0:17:ad:20: c4:10:bf:b1:2f:0f:61:5c:0c:d5:00:1e:97:26:0b: 4a:e2:07:65:4d:8d:fa:81:b1:6f:13:9e:d8:cc:df: 35:ec:03:52:d5:8e:dd:ac:ed:b4:fe:d9:07:74:7f: 73:8a:48:65:a2:e0:94:46:cd:ff:69:97:38:68:e4: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0E:C3:FF:0F:1E:4E:77:D6:40:E0:A4:73:E0:03:F6:6C:97:63:E8 X509v3 Authority Key Identifier: keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:85:e5:78:c6:5a:88:c6:8f:c3:cc:f7:35:0a:f7:64:2f:30: 0c:5d:ab:40:16:a9:d6:f2:d2:b0:7a:91:4f:b5:bd:60:bc:ab: f1:bf:04:97:ad:ef:66:a8:f4:2c:00:64:d6:55:ca:e6:3f:09: 99:10:57:4b:a7:ee:5c:a5:c0:c5:24:0c:5c:5f:c1:b4:24:ea: 5f:fe:e3:8f:68:74:84:8e:fa:15:c2:ed:c1:15:e9:17:f8:01: 1f:c2:6c:31:27:ee:05:f3:d6:dd:a0:3a:dc:39:19:ca:20:fc: 38:e0:ea:91:fc:a2:92:f5:bf:42:22:55:6b:4a:99:d1:dc:54: ac:69:78:e1:24:d2:bf:9f:d0:be:08:8e:1d:16:77:8f:32:6a: 93:97:21:d0:42:d5:10:c8:d9:b8:c6:37:ba:e0:dd:e6:15:60: b2:90:7d:0f:97:49:be:80:91:e1:ef:30:5b:98:7f:55:74:7c: 02:f9:af:2b:0f:f1:e2:06:04:c5:b9:f1:3a:6b:31:c1:aa:93: ed:bc:54:3e:de:23:89:e0:8f:6b:08:5d:23:c1:81:43:ef:83: b0:3c:e3:64:e5:92:e5:c2:bc:4e:57:90:68:0c:2c:3b:5a:4f: 03:19:ba:69:cc:de:64:c0:6d:d1:52:0c:3c:71:a9:0f:d5:72: d8:48:09:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEYxRTExMC8GA1UEBRMoRkVFQjcyQjQ3RTBGQkQ5RUIyNjgzRTI1OUZBNjQzNkJB NTY1MjNENDAeFw0yNTA1MTUwNzEwMThaFw0yNTA1MjIwNzEwMThaMBgxFjAUBgNV BAMTDTY4MjU5MzVhLWUyZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZHZGCte/hChvotWL6rRf0l7CnXw8LuQQFB2Hi3dUQYeRdvFqmM4XM/rGw+q01 WuOqnkAGmtEPsh44mipOb9xpBd6LIRqWQ+uNA+RIA5aO+EedOtlJYCiprB5NmLHL hHchG6jXDY58DPgQsiG4lL8un1rWAtrUx3Zani7UTBs/EEc5CdxMF/pHDkFcpjy+ OcOpaurOcCNpAbtK6JjTEtPvwkgxJltNoZGuQixq3a6E8vpMXHbA7uVQxUsV+3sg wBetIMQQv7EvD2FcDNUAHpcmC0riB2VNjfqBsW8TntjM3zXsA1LVjt2s7bT+2Qd0 f3OKSGWi4JRGzf9plzho5MkrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyg7D/w8e TnfWQOCkc+AD9myXY+gwHwYDVR0jBBgwFoAU/utytH4PvZ6yaD4ln6ZDa6VlI9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RjFFLzQ0QjgxQjIwMDE5 MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2eWFENGxuNlpEYTZWbEk5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3V0eXRINFB2WjZ5YUQ0bG42WkRhNlZsSTlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 RjFFLzQ0QjgxQjIwMDE5MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2 eWFENGxuNlpEYTZWbEk5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFOF5XjGWojGj8PM9zUK92QvMAxdq0AWqdby0rB6kU+1vWC8q/G/BJet 72ao9CwAZNZVyuY/CZkQV0un7lylwMUkDFxfwbQk6l/+449odISO+hXC7cEV6Rf4 AR/CbDEn7gXz1t2gOtw5Gcog/Djg6pH8opL1v0IiVWtKmdHcVKxpeOEk0r+f0L4I jh0Wd48yapOXIdBC1RDI2bjGN7rg3eYVYLKQfQ+XSb6AkeHvMFuYf1V0fAL5rysP 8eIGBMW58TprMcGqk+28VD7eI4ngj2sIXSPBgUPvg7A842TlkuXCvE5XkGgMLDta TwMZumnM3mTAbdFSDDxxqQ/VcthICTw= -----END CERTIFICATE-----Generated at Fri May 16 11:59:05 2025 by rpki-client