$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: LP+/AVVRX9mcV/dc0kXRej2zOnWD4NbTr4VjivzAOrE= Subject key identifier: 1F:7C:09:D7:AB:AB:7E:2C:8F:2A:61:6E:01:79:C5:14:B8:DF:9A:63 Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 196F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 1952 Signing time: Mon 12 May 2025 16:21:15 +0000 Manifest this update: Mon 12 May 2025 16:21:15 +0000 Manifest next update: Mon 19 May 2025 16:21:15 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: 4OLP4LemDWIheTjJAcQJX18DP+R/cmLYdFk4wWLRE04=) 2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: T2O0r+wuciWw//d0/KrKWMrTn116KGwZgOoRv2gqL2o=) 3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: 4lXZLQbvCWkzoUTRrsi9YqylEuiqjTlRtIjx8J3fHJA=) 4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: u6zpvxkYkfd9Sgr+7nOb3bbbb/5Wjva0COGy2cz/Rk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6511 (0x196f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: May 12 16:21:15 2025 GMT Not After : May 19 16:21:15 2025 GMT Subject: CN=68221ffb-4a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:d1:da:27:56:ea:53:dd:08:fc:ba:72:8a: 6d:38:8b:c9:94:a4:97:c2:02:d1:1d:42:c6:cf:fd: 0e:a6:92:b6:a2:d8:7e:6c:f7:04:55:e3:49:b4:ce: 7b:6b:a3:f5:ef:84:7e:99:5f:6c:6b:5d:82:3a:0a: bc:f4:3d:5b:2b:47:59:90:63:e1:37:ca:e5:40:f9: 6a:fb:ef:c2:93:4c:9b:c7:ad:5a:47:1c:3c:2f:71: 95:f4:70:20:17:e9:b2:a9:ba:87:49:3c:c3:48:f9: 23:58:57:b3:7a:99:8e:96:95:2c:c7:f7:c1:33:9f: 4b:3c:be:88:af:33:09:13:29:97:eb:b5:76:67:67: 02:c9:80:a7:76:41:5d:41:eb:d0:66:a9:00:9b:7c: c7:eb:05:7d:b8:4b:e0:41:68:1c:0e:d4:de:a7:53: 32:22:d6:e4:58:a3:b8:77:2e:50:cc:a2:67:f9:32: 04:82:79:0c:f7:b3:35:90:5f:be:0f:da:7a:15:9c: 94:a3:ba:13:ef:46:77:8c:d7:e9:37:ce:79:37:30: 81:36:8a:ae:75:da:44:fc:dc:72:ec:6b:08:f8:c6: 7b:71:c4:f2:d1:de:44:96:33:a4:13:56:90:fe:d9: 05:20:24:fa:13:f0:23:bc:cb:fb:1e:c2:c8:2d:72: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7C:09:D7:AB:AB:7E:2C:8F:2A:61:6E:01:79:C5:14:B8:DF:9A:63 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0d:be:68:b2:6c:73:33:d6:6c:be:17:0d:f9:10:b2:05:cd: 24:d2:85:ee:ba:47:08:52:2e:f1:33:19:37:49:d3:f8:24:4b: b5:d7:47:52:03:25:3d:65:20:05:8f:c6:e6:1d:8f:2b:c8:cc: 7f:5c:78:a2:a9:82:09:70:82:cc:bc:27:fa:c6:a0:55:bd:11: fd:c5:c7:b0:d1:67:80:5e:81:0a:ab:a9:a0:75:2e:ad:44:4b: f7:da:98:35:c5:eb:ab:82:97:65:7b:12:0e:80:fe:44:de:48: f9:c5:40:34:36:47:21:91:01:14:5e:aa:39:20:24:a7:ba:cd: 60:a9:34:8a:aa:9f:99:0d:7f:8b:6c:e0:dc:6e:ff:3c:b2:b2: 30:9b:73:ef:26:bd:9e:13:45:96:d4:d5:3a:c7:ff:78:f9:4c: 57:ab:61:0e:11:04:eb:d1:6f:d2:cd:58:bc:ee:d5:30:71:b4: 11:a3:d7:5b:41:43:4a:5b:f7:10:d4:f8:f7:3e:26:6d:67:b8: bd:fd:41:f6:31:3f:29:37:ec:c2:39:05:dd:3c:39:bf:8d:ac: c9:84:17:fc:c4:bb:0f:9b:d4:73:9d:38:a1:e7:46:f5:28:6b: 02:d5:09:39:5f:0b:82:e4:23:cd:70:59:a6:22:e7:00:6e:f7: e1:fe:65:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjUwNTEyMTYyMTE1WhcNMjUwNTE5MTYyMTE1WjAYMRYwFAYD VQQDEw02ODIyMWZmYi00YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0DR2idW6lPdCPy6coptOIvJlKSXwgLRHULGz/0OppK2oth+bPcEVeNJtM57 a6P174R+mV9sa12COgq89D1bK0dZkGPhN8rlQPlq++/Ck0ybx61aRxw8L3GV9HAg F+myqbqHSTzDSPkjWFezepmOlpUsx/fBM59LPL6IrzMJEymX67V2Z2cCyYCndkFd QevQZqkAm3zH6wV9uEvgQWgcDtTep1MyItbkWKO4dy5QzKJn+TIEgnkM97M1kF++ D9p6FZyUo7oT70Z3jNfpN855NzCBNoquddpE/Nxy7GsI+MZ7ccTy0d5EljOkE1aQ /tkFICT6E/AjvMv7HsLILXKNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB98Cder q34sjyphbgF5xRS435pjMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtDb5osmxzM9ZsvhcN+RCyBc0k0oXuukcIUi7xMxk3SdP4JEu110dS AyU9ZSAFj8bmHY8ryMx/XHiiqYIJcILMvCf6xqBVvRH9xcew0WeAXoEKq6mgdS6t REv32pg1xeurgpdlexIOgP5E3kj5xUA0NkchkQEUXqo5ICSnus1gqTSKqp+ZDX+L bODcbv88srIwm3PvJr2eE0WW1NU6x/94+UxXq2EOEQTr0W/SzVi87tUwcbQRo9db QUNKW/cQ1Pj3PiZtZ7i9/UH2MT8pN+zCOQXdPDm/jazJhBf8xLsPm9RznTih50b1 KGsC1Qk5XwuC5CPNcFmmIucAbvfh/mXH -----END CERTIFICATE-----Generated at Tue May 13 18:47:07 2025 by rpki-client