$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json) Hash identifier: OB8HUbHrAaqvtUqdYbnEP/vYOSSpwdUPxzo1+JqvLaY= Subject key identifier: 21:FD:E1:01:06:84:83:B0:FF:B0:C1:54:E8:BA:9D:51:CA:75:F6:01 Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft Manifest number: 0767 Signing time: Wed 14 May 2025 21:38:06 +0000 Manifest this update: Wed 14 May 2025 21:38:06 +0000 Manifest next update: Wed 21 May 2025 21:38:06 +0000 Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: 1FE6gMsQcMxf8VJK5kVirou2Zsrglt/8NYFUkRjX69M=) 2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: NR1SVCvj30A6pQwNp2dHbCZu3umNoMEReinsxF/kIrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Validity Not Before: May 14 21:38:06 2025 GMT Not After : May 21 21:38:06 2025 GMT Subject: CN=68250d3e-5214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:b7:76:f7:54:ad:11:b7:a3:54:cc:07:5a: 93:28:23:b8:ee:37:03:81:37:c0:fa:c8:c0:ee:d7: 3e:de:43:47:d5:f0:b3:66:ac:dd:dc:6c:9b:5e:2c: c4:d3:9f:70:7b:de:60:70:66:f8:0a:85:ce:64:6d: 26:d0:6f:f9:bd:a8:3e:84:4b:36:b5:8b:bf:44:0e: 43:e1:2a:cb:a1:01:c3:28:ad:02:70:77:4d:26:aa: e6:2a:63:33:82:82:59:ed:84:43:7c:b9:59:82:01: 0a:d3:c0:90:a3:f8:87:f6:3c:6e:2b:c3:74:dc:41: 03:9f:dc:56:08:22:87:4f:5b:43:9f:6d:a5:b3:b9: 5b:9d:1f:ae:d8:ad:f0:92:a2:31:b4:4b:30:9e:0e: a9:cd:25:f6:39:65:fa:30:e7:25:4c:93:4d:e4:69: 08:22:40:77:76:37:39:d7:27:52:e8:91:50:6f:4f: 98:a1:8d:79:ce:15:cb:ed:ca:de:e7:50:4c:2c:5e: c1:7d:04:f4:be:55:ab:26:8f:ff:f9:9d:f9:e9:ea: 41:e8:e2:2f:3a:59:1c:f1:fc:bc:8f:1d:e2:4b:cb: 45:56:08:fc:55:19:71:75:b5:33:57:80:eb:54:0b: dd:18:07:c0:ed:3b:71:f5:d4:66:d4:66:d5:5d:66: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:E1:01:06:84:83:B0:FF:B0:C1:54:E8:BA:9D:51:CA:75:F6:01 X509v3 Authority Key Identifier: keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:9b:92:35:c9:90:49:cb:42:ee:35:71:68:40:76:34:65: af:93:ba:35:72:41:f3:0e:56:a2:65:80:14:a6:77:f2:00:dd: dc:41:ad:32:2e:ae:84:df:38:93:e5:ae:be:a8:17:fb:4e:1a: 8f:fa:67:27:08:7b:11:39:25:c6:35:81:06:bd:33:8c:8d:e4: ec:d1:ac:c7:00:a0:de:61:75:28:8a:57:bf:8b:8b:b8:70:d4: 06:92:73:1b:6e:2a:ca:68:d2:b0:21:5a:24:97:1e:9b:ff:d0: 32:3a:c3:6c:3a:f1:f7:e7:e2:f0:cb:e5:61:38:76:b9:7b:6d: 70:db:57:c1:90:58:25:40:cc:6e:71:61:1e:a6:a1:e7:dc:99: 48:7c:89:ac:2f:f7:ed:45:16:6f:15:6e:93:53:d5:51:36:4c: 17:a6:c3:59:e8:32:a5:97:ed:0a:14:e7:0c:8f:5c:a3:7a:fc: ca:b1:0a:03:8e:be:ff:ca:59:bc:f4:47:67:b6:cc:2d:a3:14: a2:01:ce:0e:74:f4:b1:a2:d5:1c:f2:32:1f:69:02:96:78:a0: bd:3e:b1:f8:50:1a:83:6a:67:52:2c:e3:df:96:96:00:a0:27: e3:a6:5c:ba:8f:b2:0c:64:80:16:82:31:a3:7b:42:55:60:c6: 96:57:93:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD QTNGNzlBNkIwHhcNMjUwNTE0MjEzODA2WhcNMjUwNTIxMjEzODA2WjAYMRYwFAYD VQQDEw02ODI1MGQzZS01MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ+3dvdUrRG3o1TMB1qTKCO47jcDgTfA+sjA7tc+3kNH1fCzZqzd3GybXizE 059we95gcGb4CoXOZG0m0G/5vag+hEs2tYu/RA5D4SrLoQHDKK0CcHdNJqrmKmMz goJZ7YRDfLlZggEK08CQo/iH9jxuK8N03EEDn9xWCCKHT1tDn22ls7lbnR+u2K3w kqIxtEswng6pzSX2OWX6MOclTJNN5GkIIkB3djc51ydS6JFQb0+YoY15zhXL7cre 51BMLF7BfQT0vlWrJo//+Z356epB6OIvOlkc8fy8jx3iS8tFVgj8VRlxdbUzV4Dr VAvdGAfA7Ttx9dRm1GbVXWaD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCH94QEG hIOw/7DBVOi6nVHKdfYBMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5 MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4 VzBXTlp1T2NZTW5LUDNtbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgEJuSNcmQSctC7jVxaEB2NGWvk7o1ckHzDlaiZYAUpnfyAN3cQa0y Lq6E3ziT5a6+qBf7ThqP+mcnCHsROSXGNYEGvTOMjeTs0azHAKDeYXUoile/i4u4 cNQGknMbbirKaNKwIVoklx6b/9AyOsNsOvH35+Lwy+VhOHa5e21w21fBkFglQMxu cWEepqHn3JlIfImsL/ftRRZvFW6TU9VRNkwXpsNZ6DKll+0KFOcMj1yjevzKsQoD jr7/ylm89EdntswtoxSiAc4OdPSxotUc8jIfaQKWeKC9PrH4UBqDamdSLOPflpYA oCfjply6j7IMZIAWgjGje0JVYMaWV5N1 -----END CERTIFICATE-----Generated at Fri May 16 11:59:06 2025 by rpki-client