$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json) Hash identifier: JxRIMuQXN9I2FMM02VNySw50cq7b+j/L9t4lg/gBnG8= Subject key identifier: 15:E7:80:49:45:F1:DD:DC:2D:BD:01:15:C8:C5:92:2E:08:3F:32:64 Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft Manifest number: 016E Signing time: Tue 13 May 2025 03:04:00 +0000 Manifest this update: Tue 13 May 2025 03:04:00 +0000 Manifest next update: Tue 20 May 2025 03:04:00 +0000 Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: 9G7ZXe21YqtKjIc7PGBdMHObrQ/2Oq4qJBvYLBiP7+E=) 2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: 5chjhG+4S2xwB6V67WC6HZP171qygBdUyTwykp33M5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: May 13 03:04:00 2025 GMT Not After : May 20 03:04:00 2025 GMT Subject: CN=6822b6a0-7209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:ad:87:30:5f:ad:5f:a0:79:58:11:0e:d6: 9b:21:77:4c:62:57:1d:b1:c0:b0:f9:fc:07:7e:7e: de:fa:59:ff:5d:e1:10:43:dc:16:63:26:f0:ce:12: 3e:fb:ac:18:b6:6f:25:ab:c4:81:af:0d:4c:c8:8b: ac:3f:89:15:7c:b6:93:38:36:33:4d:f4:ec:76:04: b2:42:c3:31:37:05:7f:5d:dd:f2:4c:1e:01:a9:8e: 68:58:cb:33:bd:ed:ee:56:c6:81:b4:36:da:b2:d0: cf:ba:5f:c8:3c:18:97:37:b2:9c:7c:76:a0:62:03: 7b:da:18:d4:4e:4e:9e:f7:ad:c2:29:8e:5e:59:09: c4:12:72:66:38:b3:40:81:bd:b5:a3:54:21:f2:84: 65:75:5b:eb:05:08:ae:80:42:cd:bc:dd:57:72:12: 37:58:b4:26:b9:57:a2:54:ee:da:0f:96:1f:3e:fb: 10:ba:d7:6d:1b:fb:9c:d0:a2:9d:d0:ec:1f:68:1e: ed:e9:53:81:5a:88:05:bf:93:10:14:74:76:16:db: b5:85:1a:17:5a:30:67:95:ef:b5:35:5b:28:06:77: 4e:5e:0f:42:32:b3:df:c6:0f:c2:0b:dc:4c:5e:53: 4d:9f:cb:a2:6b:18:12:9e:99:98:68:65:aa:75:8c: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E7:80:49:45:F1:DD:DC:2D:BD:01:15:C8:C5:92:2E:08:3F:32:64 X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c0:8d:1c:45:f3:20:de:d1:f9:98:42:33:dd:b1:72:b5:3c: 7f:5c:9d:5c:c5:32:36:25:52:20:82:e1:d9:c0:82:94:c4:2e: a7:ba:13:ce:65:b9:e6:08:e4:7e:ee:36:39:74:dd:7b:21:26: 3c:de:e2:55:8f:16:63:4d:70:21:37:6f:c9:0c:e7:ab:81:ec: 05:2b:2c:80:7a:a5:37:93:60:5a:8b:9e:27:68:c5:3c:77:20: 6a:6a:cc:2d:2a:8b:33:45:c4:6e:5f:b0:af:23:18:03:a7:f7: c3:de:db:56:53:2e:d8:ac:10:72:1b:db:2b:1a:e7:e8:e1:bf: e9:87:f8:ce:bc:b2:ac:09:6c:10:82:8a:96:6c:76:10:39:b2: 34:4b:7d:9c:4f:e2:14:aa:5d:a3:9c:49:9f:9b:63:13:97:85: d5:06:d9:e6:57:91:83:4a:c1:a5:79:8f:3a:9c:68:b3:1d:b0: 06:d8:06:26:f3:1e:48:69:aa:fe:0e:b2:fb:a1:3a:f1:36:f5: 76:53:7f:a0:7f:88:9b:18:f9:ab:a6:b4:84:02:25:c8:37:ae: fa:1d:34:66:13:38:a6:a2:a3:b8:58:02:1e:a4:5e:29:1c:b0: 74:af:97:64:a9:5c:ea:a8:e7:56:5c:22:72:8e:71:b4:26:ca: 15:21:40:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjUwNTEzMDMwNDAwWhcNMjUwNTIwMDMwNDAwWjAYMRYwFAYD VQQDEw02ODIyYjZhMC03MjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoB6thzBfrV+geVgRDtabIXdMYlcdscCw+fwHfn7e+ln/XeEQQ9wWYybwzhI+ +6wYtm8lq8SBrw1MyIusP4kVfLaTODYzTfTsdgSyQsMxNwV/Xd3yTB4BqY5oWMsz ve3uVsaBtDbastDPul/IPBiXN7KcfHagYgN72hjUTk6e963CKY5eWQnEEnJmOLNA gb21o1Qh8oRldVvrBQiugELNvN1XchI3WLQmuVeiVO7aD5YfPvsQutdtG/uc0KKd 0OwfaB7t6VOBWogFv5MQFHR2Ftu1hRoXWjBnle+1NVsoBndOXg9CMrPfxg/CC9xM XlNNn8uiaxgSnpmYaGWqdYyZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXngElF 8d3cLb0BFcjFki4IPzJkMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4 b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHwI0cRfMg3tH5mEIz3bFytTx/XJ1cxTI2JVIgguHZwIKUxC6nuhPO ZbnmCOR+7jY5dN17ISY83uJVjxZjTXAhN2/JDOergewFKyyAeqU3k2Bai54naMU8 dyBqaswtKoszRcRuX7CvIxgDp/fD3ttWUy7YrBByG9srGufo4b/ph/jOvLKsCWwQ goqWbHYQObI0S32cT+IUql2jnEmfm2MTl4XVBtnmV5GDSsGleY86nGizHbAG2AYm 8x5Iaar+DrL7oTrxNvV2U3+gf4ibGPmrprSEAiXIN676HTRmEzimoqO4WAIepF4p HLB0r5dkqVzqqOdWXCJyjnG0JsoVIUAl -----END CERTIFICATE-----Generated at Wed May 14 07:56:22 2025 by rpki-client