$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: Iz0OfsuM3fZfKbC6w2Wd9BYPmX3R8AYfVlNeigDUyHY= Subject key identifier: DF:80:6D:08:5E:FC:68:DE:D2:EA:A9:7C:51:72:95:B6:0A:FA:0D:D9 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: A3 Signing time: Sat 17 May 2025 05:40:28 +0000 Manifest this update: Sat 17 May 2025 05:40:27 +0000 Manifest next update: Sat 24 May 2025 05:40:27 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: ugYv3NcRgyFIN4XV9R1YBU3QgF4LmDGws5r+SGPMWzk=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: I6wYLUXo9wiy4AQAxb2ubHia3GZFxKPK++eH7JKRPwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: May 17 05:40:27 2025 GMT Not After : May 24 05:40:27 2025 GMT Subject: CN=6828214c-baa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:29:88:30:8b:9c:7e:6f:8a:fd:a5:87:46: ba:bd:58:ec:04:25:f8:ae:e5:e7:68:2c:32:49:a6: 09:b9:61:50:7e:7d:e2:0b:64:2c:42:b6:3f:91:94: 91:c2:92:28:ad:2a:65:6a:8c:e5:1b:2c:b3:78:e1: 09:21:73:d4:a1:98:00:bb:0e:02:99:21:1c:d2:75: c1:a4:a9:94:eb:a2:22:71:9b:6f:68:6e:75:11:d3: 7f:be:18:08:f6:cd:d4:c9:98:9c:94:d3:28:d3:f8: 8f:cc:90:f0:6b:e9:ba:33:d3:63:54:01:f4:7b:de: 1b:7f:9f:e6:be:49:b3:4f:c0:08:67:5c:ae:a8:c9: e9:67:e6:76:40:48:ea:45:fb:d6:59:db:ff:cc:89: 6a:f0:0b:8d:2b:aa:47:b8:56:64:9d:2c:88:d4:0d: dd:c8:b7:5c:f4:22:c7:a2:68:9a:a0:c3:08:60:c3: 69:b5:8f:86:0b:ce:c2:0a:f2:69:35:f6:e5:9c:36: 07:42:78:d9:9b:47:5d:9a:de:44:94:4c:a1:3f:bd: d0:d5:f6:5f:e6:29:07:61:e2:f2:ac:87:58:74:c6: 8e:e1:d6:38:10:a1:d1:c4:ce:f1:d5:85:f8:eb:7b: 70:9d:06:c5:63:7a:c6:71:fc:89:96:88:92:03:87: a3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:80:6D:08:5E:FC:68:DE:D2:EA:A9:7C:51:72:95:B6:0A:FA:0D:D9 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:21:3f:70:80:9b:d2:c6:c9:46:91:72:8b:cd:cc:2c:0a:e9: 2b:cd:64:9c:3d:0c:b0:91:84:cd:f2:b7:a6:e6:d3:ce:25:cf: cf:e5:fc:f3:af:74:21:60:e3:a7:56:93:0e:7c:33:5a:28:ad: 27:48:fd:59:82:37:b4:c2:c5:62:7b:90:47:56:39:6e:fe:1d: 19:da:57:ea:c3:37:72:f2:6c:d4:62:3a:7a:c9:51:6d:73:ac: 5e:97:6a:4a:a7:ee:f6:a3:f4:0b:8c:7c:45:04:7b:4e:3d:66: d8:29:49:7b:93:92:85:e0:9a:75:15:a4:ee:b7:f7:af:45:6a: 4d:1f:85:58:b1:b2:ac:26:75:f8:a0:5f:4f:ce:2f:62:a2:d8: 34:eb:1e:e1:80:1f:9a:d5:be:00:f4:74:6c:11:49:86:31:53: 3f:74:d7:88:3e:93:32:52:b6:ed:87:b7:e9:78:5d:65:0d:c2: da:28:c2:b6:a3:19:41:f6:27:1a:aa:28:d9:d1:80:0e:b4:d0: 43:92:27:d5:d3:d3:94:c3:eb:7a:c6:9a:47:3a:54:87:ea:d4: c7:ee:60:6f:87:1c:e0:c9:89:3d:c4:06:d5:da:21:d4:0b:7b: de:61:2c:79:e9:9e:69:85:f7:50:12:27:fb:b9:1e:8a:2c:b7: 98:56:6d:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUwNTE3MDU0MDI3WhcNMjUwNTI0MDU0MDI3WjAYMRYwFAYD VQQDEw02ODI4MjE0Yy1iYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOUpiDCLnH5viv2lh0a6vVjsBCX4ruXnaCwySaYJuWFQfn3iC2QsQrY/kZSR wpIorSplaozlGyyzeOEJIXPUoZgAuw4CmSEc0nXBpKmU66IicZtvaG51EdN/vhgI 9s3UyZiclNMo0/iPzJDwa+m6M9NjVAH0e94bf5/mvkmzT8AIZ1yuqMnpZ+Z2QEjq RfvWWdv/zIlq8AuNK6pHuFZknSyI1A3dyLdc9CLHomiaoMMIYMNptY+GC87CCvJp NfblnDYHQnjZm0ddmt5ElEyhP73Q1fZf5ikHYeLyrIdYdMaO4dY4EKHRxM7x1YX4 63twnQbFY3rGcfyJloiSA4ejwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+AbQhe /Gje0uqpfFFylbYK+g3ZMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUIT9wgJvSxslGkXKLzcwsCukrzWScPQywkYTN8rem5tPOJc/P5fzz r3QhYOOnVpMOfDNaKK0nSP1Zgje0wsVie5BHVjlu/h0Z2lfqwzdy8mzUYjp6yVFt c6xel2pKp+72o/QLjHxFBHtOPWbYKUl7k5KF4Jp1FaTut/evRWpNH4VYsbKsJnX4 oF9Pzi9iotg06x7hgB+a1b4A9HRsEUmGMVM/dNeIPpMyUrbth7fpeF1lDcLaKMK2 oxlB9icaqijZ0YAOtNBDkifV09OUw+t6xppHOlSH6tTH7mBvhxzgyYk9xAbV2iHU C3veYSx56Z5phfdQEif7uR6KLLeYVm2+ -----END CERTIFICATE-----Generated at Sat May 17 12:50:17 2025 by rpki-client