$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json) Hash identifier: Ep1uPddz4Sj4Z1pDxltYgqrakFk0dYBd5+S86uQVSMQ= Subject key identifier: 3B:DB:D9:BC:16:B7:92:C0:1D:FD:CE:D6:E2:C6:27:5F:CE:63:4C:9A Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft Manifest number: 35 Signing time: Sat 17 May 2025 07:12:23 +0000 Manifest this update: Sat 17 May 2025 07:12:23 +0000 Manifest next update: Sat 24 May 2025 07:12:22 +0000 Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: jyVv6pqt5kbiA/WkhscvCZ9ebB8TH6hGw1zkVIOG6NY=) 2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=) 3: 0173D2DC217311F0BAF2AA30C4F9AE02.roa (hash: nryCYlJbHFwsxOAc1QWOqjcmSxXnzL35lsWmd38XYPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Validity Not Before: May 17 07:12:23 2025 GMT Not After : May 24 07:12:22 2025 GMT Subject: CN=682836d7-0684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:93:98:9e:8d:03:9f:81:9d:21:4b:37:d3: 31:88:40:15:95:b1:2c:81:0c:c8:e0:22:63:e9:fe: a8:e7:b9:9c:1c:9d:00:be:4e:fd:9d:fd:4d:00:e9: 83:42:03:96:f1:83:71:b1:b9:e8:e2:70:37:2f:7b: bd:11:ba:1e:e0:c3:ad:73:0a:53:e3:65:24:e5:91: 41:a0:19:79:ce:de:73:4d:06:85:16:4e:26:bf:9d: ec:92:2d:82:2e:91:98:7a:89:0b:3f:ec:44:97:a9: fa:84:96:bb:c6:d2:c6:e3:8d:c7:14:57:ad:93:77: 0a:2e:7d:30:78:2a:cc:c8:bd:35:eb:bd:9f:e9:12: 7b:88:81:a8:0a:b2:6f:90:c8:cf:95:ff:95:0a:7a: e2:9a:51:2b:7e:89:7e:83:73:01:44:88:a7:81:56: b4:f4:99:47:34:62:59:b2:f6:81:dc:4f:e4:75:74: 72:82:ff:48:29:a9:03:6e:f6:e0:da:26:8d:ea:be: 1a:ec:cd:59:9c:4a:a0:27:55:61:fa:c3:52:59:8a: 20:c8:d2:1e:d3:ef:e4:ca:6d:b4:55:07:09:a8:25: c8:0b:c7:d7:b2:94:ff:c3:03:f7:c6:1d:f4:8c:2c: c0:de:ee:c5:7e:21:a6:4d:c7:c1:eb:1b:82:47:08: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DB:D9:BC:16:B7:92:C0:1D:FD:CE:D6:E2:C6:27:5F:CE:63:4C:9A X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:36:35:45:8c:8b:3b:7c:3a:fd:63:d3:47:6a:4c:dc:da:d7: 55:87:7f:47:a7:d0:4b:1d:8f:f5:f7:4d:74:87:47:d9:f7:11: fb:dc:2d:88:ba:30:49:93:08:45:19:55:93:8a:4a:3b:de:3e: 8f:a7:44:78:5f:bc:64:f6:74:d0:c8:42:17:f4:6f:22:42:f5: 00:78:04:f4:97:ef:dd:a3:7a:9d:f2:0b:91:b0:b3:3e:22:21: ed:9a:94:a7:76:5f:a6:67:25:a5:67:64:9c:ef:ee:b2:f2:5c: 90:93:b4:b5:1a:48:8c:aa:94:75:ca:ac:b8:ce:0a:1d:c1:3a: 2d:29:2c:28:84:9a:95:33:aa:27:d0:a0:e5:b9:37:4a:38:cc: ef:5e:af:eb:62:ca:bc:44:a3:48:93:a0:77:76:a1:46:87:91: 1c:bb:9f:25:09:3d:0e:91:65:d8:a5:f9:8e:a3:d2:11:9e:fe: f2:af:3b:a0:09:73:00:84:eb:1d:a8:ea:e6:39:13:be:3c:7a: 46:11:fe:80:42:dc:21:d5:52:65:99:67:34:e9:22:b9:eb:9b: 36:e3:93:72:3c:10:6f:39:f5:a7:cd:c4:56:78:b0:4e:14:3d: df:6e:16:25:60:4c:f4:e4:05:21:41:36:bc:a7:98:8f:73:c7: ab:20:d9:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTA1MTcwNzEyMjNaFw0yNTA1MjQwNzEyMjJaMBgxFjAUBgNV BAMTDTY4MjgzNmQ3LTA2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ8pOYno0Dn4GdIUs30zGIQBWVsSyBDMjgImPp/qjnuZwcnQC+Tv2d/U0A6YNC A5bxg3GxuejicDcve70Ruh7gw61zClPjZSTlkUGgGXnO3nNNBoUWTia/neySLYIu kZh6iQs/7ESXqfqElrvG0sbjjccUV62TdwoufTB4KszIvTXrvZ/pEnuIgagKsm+Q yM+V/5UKeuKaUSt+iX6DcwFEiKeBVrT0mUc0Ylmy9oHcT+R1dHKC/0gpqQNu9uDa Jo3qvhrszVmcSqAnVWH6w1JZiiDI0h7T7+TKbbRVBwmoJcgLx9eylP/DA/fGHfSM LMDe7sV+IaZNx8HrG4JHCP0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO9vZvBa3 ksAd/c7W4sYnX85jTJowHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw OTE3L0E1QUY4RTY4RjU2MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0 dk5LWjliMXVFSUpyWmxzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKY2NUWMizt8Ov1j00dqTNza11WHf0en0Esdj/X3TXSHR9n3EfvcLYi6 MEmTCEUZVZOKSjvePo+nRHhfvGT2dNDIQhf0byJC9QB4BPSX792jep3yC5Gwsz4i Ie2alKd2X6ZnJaVnZJzv7rLyXJCTtLUaSIyqlHXKrLjOCh3BOi0pLCiEmpUzqifQ oOW5N0o4zO9er+tiyrxEo0iToHd2oUaHkRy7nyUJPQ6RZdil+Y6j0hGe/vKvO6AJ cwCE6x2o6uY5E748ekYR/oBC3CHVUmWZZzTpIrnrmzbjk3I8EG859afNxFZ4sE4U Pd9uFiVgTPTkBSFBNrynmI9zx6sg2es= -----END CERTIFICATE-----Generated at Sat May 17 14:27:10 2025 by rpki-client