$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: 3+laqANqBImb9jOu2SXvtSglOCelyxnSxXJbTM7CdDY= Subject key identifier: B7:BA:7D:FA:86:84:50:68:FC:E9:E0:12:16:E7:1D:03:78:5C:F5:E5 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 09AB Signing time: Tue 13 May 2025 22:38:13 +0000 Manifest this update: Tue 13 May 2025 22:38:12 +0000 Manifest next update: Tue 20 May 2025 22:38:12 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: vwe0wvc0uYBSplULOXfvXxENYLXhbx4nE21UJlZWons=) 2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=) 3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=) 4: 4DF0EB00249711F0A959EB42C4F9AE02.roa (hash: qCFOL7CAxCdjmW/kv56vA6sNkM6rvQEti+d+yDN2pHs=) 5: 4312EE98256611F0B262730DC4F9AE02.roa (hash: I/r5JdS6Btg710Fzfs6rdHodNPpP7cRU0SI6KvvajtQ=) 6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=) 7: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=) 8: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 22:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2628 (0xa44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: May 13 22:38:12 2025 GMT Not After : May 20 22:38:12 2025 GMT Subject: CN=6823c9d4-a716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:17:e9:0a:55:c4:32:95:a6:69:ce:d8:ac: b4:f4:3e:bd:56:6c:1f:b7:8b:bc:be:db:01:f9:77: d6:37:d7:62:d1:7a:bb:dc:65:96:2b:dd:a8:3a:3d: bb:a6:d5:87:54:2f:92:fb:8c:46:ae:45:34:36:d2: 31:9e:17:5f:63:71:1e:10:17:51:7e:7d:32:7c:99: 8f:90:bb:93:b1:b8:4f:3b:18:c2:5d:c3:d4:4d:50: 83:98:e9:04:eb:87:b6:f2:86:33:32:96:58:87:f3: bd:6b:f4:21:a3:df:85:01:5c:dc:fc:ff:81:84:8a: f5:56:ca:fe:7a:85:f3:d9:c3:18:c5:9f:72:33:9f: 39:9c:5e:28:6b:33:e8:dd:17:45:2f:ed:58:56:8f: e5:c9:2d:46:fc:0f:17:28:b2:24:88:15:93:77:af: 9f:11:ea:fc:b9:1a:61:ec:d6:94:d6:40:cd:79:ac: 32:5a:a3:7f:20:12:eb:cd:04:1c:3c:c9:f0:e5:c0: cf:53:35:54:9f:c1:9d:7c:c1:bb:68:64:17:ac:a4: 5b:89:ca:d5:fa:9d:a6:73:de:81:38:ec:9f:7c:d5: f3:92:22:0c:ad:d7:e8:c7:7e:4d:43:d8:e1:41:1b: 12:3b:57:bc:f4:9a:1f:00:a1:e9:ce:93:74:90:61: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:7D:FA:86:84:50:68:FC:E9:E0:12:16:E7:1D:03:78:5C:F5:E5 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ec:3f:be:2c:7b:a9:21:37:f5:90:bc:ef:2f:cb:ef:88:de: ca:9d:f0:fe:80:79:d3:9f:ff:f7:98:07:71:ad:ec:ba:40:76: 5c:5e:95:25:d7:ca:9a:45:e6:57:a8:a0:49:89:05:06:db:05: b1:86:cc:08:d3:08:6a:16:24:67:12:dd:4d:7e:34:82:49:6e: af:a4:29:7f:1d:12:2f:81:5d:cf:39:1e:c3:33:ba:e3:e5:a8: 11:13:0f:bc:11:e8:80:6e:59:4e:a6:de:d0:af:da:e1:a6:28: ad:df:89:76:8f:93:3a:de:d9:10:5d:63:31:a0:f3:11:04:aa: 60:6a:31:53:ca:10:50:81:70:61:0d:2d:77:14:70:eb:16:0e: b3:83:a9:1e:c2:7b:b9:61:69:ff:6e:2b:8f:de:54:16:8b:47: 09:64:d8:71:af:89:80:87:44:55:83:11:fa:5f:9a:66:9c:69: 5d:5a:28:a4:53:1c:91:62:23:70:58:e4:ff:dc:56:2e:be:c3: 7b:72:e8:f5:01:e9:b6:44:2d:9a:73:2a:48:2a:d1:44:26:8a: 9c:9f:0c:26:c0:8f:cf:00:82:7a:b2:74:0f:1a:fa:63:02:23: 79:50:00:c9:31:55:d5:45:4b:ee:2c:fd:79:63:d4:f4:a2:6c: 18:b6:95:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNTEzMjIzODEyWhcNMjUwNTIwMjIzODEyWjAYMRYwFAYD VQQDEw02ODIzYzlkNC1hNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWkX6QpVxDKVpmnO2Ky09D69Vmwft4u8vtsB+XfWN9di0Xq73GWWK92oOj27 ptWHVC+S+4xGrkU0NtIxnhdfY3EeEBdRfn0yfJmPkLuTsbhPOxjCXcPUTVCDmOkE 64e28oYzMpZYh/O9a/Qho9+FAVzc/P+BhIr1Vsr+eoXz2cMYxZ9yM585nF4oazPo 3RdFL+1YVo/lyS1G/A8XKLIkiBWTd6+fEer8uRph7NaU1kDNeawyWqN/IBLrzQQc PMnw5cDPUzVUn8GdfMG7aGQXrKRbicrV+p2mc96BOOyffNXzkiIMrdfox35NQ9jh QRsSO1e89JofAKHpzpN0kGGiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe6ffqG hFBo/OngEhbnHQN4XPXlMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl7D++LHupITf1kLzvL8vviN7KnfD+gHnTn//3mAdxrey6QHZcXpUl 18qaReZXqKBJiQUG2wWxhswI0whqFiRnEt1NfjSCSW6vpCl/HRIvgV3POR7DM7rj 5agREw+8EeiAbllOpt7Qr9rhpiit34l2j5M63tkQXWMxoPMRBKpgajFTyhBQgXBh DS13FHDrFg6zg6kewnu5YWn/biuP3lQWi0cJZNhxr4mAh0RVgxH6X5pmnGldWiik UxyRYiNwWOT/3FYuvsN7cuj1Aem2RC2acypIKtFEJoqcnwwmwI/PAIJ6snQPGvpj AiN5UADJMVXVRUvuLP15Y9T0omwYtpVE -----END CERTIFICATE-----Generated at Wed May 14 05:02:41 2025 by rpki-client