$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: r/kLoMVaioLjhRusgBCgbMnKWPi3fj1U8QueocFVzNU= Subject key identifier: CE:EC:DC:64:96:5C:29:F0:4F:10:3F:E8:C3:AC:A4:CD:D1:6C:02:1C Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0FE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FCE Signing time: Wed 14 May 2025 17:37:20 +0000 Manifest this update: Wed 14 May 2025 17:37:19 +0000 Manifest next update: Wed 21 May 2025 17:37:19 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: jmtJJXkopmdechrDy/yZoaHmMbtRrpHXXwmhiceigeo=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4070 (0xfe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: May 14 17:37:19 2025 GMT Not After : May 21 17:37:19 2025 GMT Subject: CN=6824d4d0-52e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:c4:4e:aa:7c:db:6f:75:3e:54:af:d7:67: d6:24:61:ca:34:2b:54:23:0e:58:59:fd:7e:07:01: ef:bd:05:17:ac:ac:68:22:ba:72:1e:c8:af:52:51: a9:8a:49:a8:36:ec:3b:e6:c7:70:bf:95:b8:e6:a4: ab:f2:d4:67:eb:ba:36:0c:ee:16:8f:74:60:a6:09: 15:db:bc:e3:f4:b9:3e:c1:58:ad:a1:b8:bf:73:09: 0a:96:8e:38:45:86:0a:c2:62:0b:47:c4:ea:85:59: dd:81:28:e1:3a:a9:e9:ea:cb:03:7d:ea:41:a8:97: eb:af:b9:ce:a6:d7:9a:83:87:f8:5d:16:61:bf:a3: 41:32:64:9b:f8:13:ae:15:47:46:04:e9:09:a8:2c: 42:8a:94:56:18:07:91:46:3c:00:4f:30:ff:01:5f: db:97:6d:cc:5d:7a:06:b3:25:bd:bf:8b:86:27:d2: 5c:29:00:2a:b1:6d:6b:ef:2d:fd:c6:a6:07:08:d3: 32:9b:54:83:06:8d:2a:47:43:57:13:4a:e9:09:86: 55:96:1f:87:7e:59:f0:12:d6:d0:47:60:77:6b:a6: 1f:ec:e1:68:8c:a7:eb:f6:31:92:88:29:52:1d:eb: f3:ad:cb:d6:ab:00:a3:e5:2c:da:b0:8f:33:ed:8f: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EC:DC:64:96:5C:29:F0:4F:10:3F:E8:C3:AC:A4:CD:D1:6C:02:1C X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:73:da:32:c3:d7:8a:b0:d0:6d:79:de:26:10:a2:d5:e6:ae: 3d:5e:4a:75:7e:05:ec:c8:e9:72:26:c8:11:68:a4:92:4d:ea: ee:db:66:53:e3:38:09:0c:ca:7f:33:4a:8c:2a:44:c1:44:30: f8:0f:a5:73:4f:14:46:cf:e4:52:05:d1:dd:23:53:c9:93:a1: f8:2c:04:69:e7:cb:df:69:c0:9b:85:92:3d:36:95:ac:67:44: c8:ff:ba:8e:2c:25:63:57:5a:e7:64:38:21:8b:20:43:9d:26: f5:f7:ca:2f:1f:06:0f:4a:83:ae:b0:90:ab:a5:d9:f6:df:34: c3:21:e9:72:87:9a:bc:20:e3:c1:0d:a7:a9:99:7a:a8:ae:4b: 03:4e:4b:4c:6c:ad:15:be:c9:f6:82:e2:cf:8a:18:c1:57:56: f8:cf:ee:f8:48:e7:02:7d:bd:53:c3:56:71:46:e4:e3:87:28: fe:0e:5f:f7:d7:ab:3d:af:85:35:36:0f:ba:eb:0e:0a:d5:85: 30:cb:80:2f:bf:fc:59:5a:a8:f9:04:05:2e:e0:90:0c:09:67: ff:d2:87:22:36:a0:67:6a:35:fa:ee:0e:5d:57:61:01:4d:5d: 27:8c:e7:c5:96:bd:fa:81:5a:b5:05:8a:e4:44:5e:fe:92:0a: d8:25:1c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNTE0MTczNzE5WhcNMjUwNTIxMTczNzE5WjAYMRYwFAYD VQQDEw02ODI0ZDRkMC01MmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwePETqp82291PlSv12fWJGHKNCtUIw5YWf1+BwHvvQUXrKxoIrpyHsivUlGp ikmoNuw75sdwv5W45qSr8tRn67o2DO4Wj3RgpgkV27zj9Lk+wVitobi/cwkKlo44 RYYKwmILR8TqhVndgSjhOqnp6ssDfepBqJfrr7nOpteag4f4XRZhv6NBMmSb+BOu FUdGBOkJqCxCipRWGAeRRjwATzD/AV/bl23MXXoGsyW9v4uGJ9JcKQAqsW1r7y39 xqYHCNMym1SDBo0qR0NXE0rpCYZVlh+HflnwEtbQR2B3a6Yf7OFojKfr9jGSiClS HevzrcvWqwCj5SzasI8z7Y8rXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7s3GSW XCnwTxA/6MOspM3RbAIcMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwc9oyw9eKsNBted4mEKLV5q49Xkp1fgXsyOlyJsgRaKSSTeru22ZT 4zgJDMp/M0qMKkTBRDD4D6VzTxRGz+RSBdHdI1PJk6H4LARp58vfacCbhZI9NpWs Z0TI/7qOLCVjV1rnZDghiyBDnSb198ovHwYPSoOusJCrpdn23zTDIelyh5q8IOPB DaepmXqorksDTktMbK0Vvsn2guLPihjBV1b4z+74SOcCfb1Tw1ZxRuTjhyj+Dl/3 16s9r4U1Ng+66w4K1YUwy4Avv/xZWqj5BAUu4JAMCWf/0ociNqBnajX67g5dV2EB TV0njOfFlr36gVq1BYrkRF7+kgrYJRz5 -----END CERTIFICATE-----Generated at Fri May 16 14:31:26 2025 by rpki-client