$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: jxVEOSidU2e4NUTzfkOl/hk53Zz3IXgbD8NVAWaHNjs= Subject key identifier: AE:6E:93:2E:6A:B3:D1:7F:99:CC:0C:8A:F9:BA:5F:C7:CD:B4:59:DC Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 68 Signing time: Sun 11 May 2025 05:44:18 +0000 Manifest this update: Sun 11 May 2025 05:44:18 +0000 Manifest next update: Sun 18 May 2025 05:44:18 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: WcxON52nDdE0RD9AyUhx7lOO0EXd1PLd11bcZc0MLHA=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: 0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: May 11 05:44:18 2025 GMT Not After : May 18 05:44:18 2025 GMT Subject: CN=68203932-384d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:7f:14:d9:83:00:58:55:b5:fa:97:54:6f: 8a:87:56:b6:4e:24:02:d7:a1:7a:31:91:93:64:f8: c6:45:af:6c:1f:9f:1d:ed:18:e4:3c:67:a2:9e:45: dd:06:17:9c:49:43:1e:e8:09:91:68:29:98:6c:ef: e5:72:4c:71:d7:b7:be:27:7d:c5:ad:31:f1:cc:40: d3:8b:e6:f5:5a:46:59:a2:64:d2:68:97:3d:10:74: 93:a3:46:39:fc:f2:94:3d:c2:41:4b:30:e1:1b:74: a1:58:c8:57:97:e7:a0:f2:38:ad:ee:71:43:34:41: 61:72:9f:b4:63:f2:d4:1d:b1:8a:df:eb:2c:b3:90: 56:a6:22:f6:eb:ce:45:14:22:8c:a6:8f:a4:61:3c: ac:62:bd:47:a3:d0:83:bc:f0:d3:96:36:be:89:7f: 36:88:f0:71:bc:c6:35:69:91:02:93:31:8a:74:0d: f6:f7:38:b1:d1:e7:95:d0:66:ad:b4:11:40:11:2e: 31:46:d5:e6:e3:4b:59:a9:ec:46:7c:35:b5:4f:93: 19:c1:44:71:2a:ab:4f:de:bd:73:5b:f8:c8:47:c1: d5:35:59:87:64:7e:b7:3a:9b:70:9d:c4:0a:ce:97: 20:66:77:30:7d:99:8e:df:a3:4e:dc:f5:62:07:52: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6E:93:2E:6A:B3:D1:7F:99:CC:0C:8A:F9:BA:5F:C7:CD:B4:59:DC X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:eb:40:e6:f6:26:19:1b:a4:be:56:3d:e3:2b:5a:e5:9a:78: 96:5f:2a:3d:3a:ea:3d:ab:48:7d:bb:6f:7e:ae:57:89:a1:8d: 7b:94:9f:86:c1:49:7c:ac:07:01:cd:b1:6c:8c:8b:80:07:bb: b5:34:0d:02:c7:cf:e4:ae:f9:23:99:8f:a8:3e:e6:c8:1d:4b: 57:f5:14:b3:47:c3:9e:c6:dd:43:1a:bd:07:1b:5c:ef:0f:48: 2c:51:e0:7c:4e:91:63:1e:13:bf:2d:c7:02:49:12:13:75:13: c8:67:56:76:19:94:75:59:75:e7:4a:9b:9e:35:b6:cc:59:3c: 9f:cf:04:f1:7a:7e:52:42:be:76:bd:79:14:31:4d:84:02:ed: 45:80:23:08:47:eb:49:21:11:eb:94:c1:37:98:c9:34:88:7f: c4:f1:da:f2:82:70:c5:3b:a1:2b:af:e0:df:be:13:89:1c:b4: b7:fd:2f:f4:82:75:02:8e:57:51:ab:74:b7:9f:86:3b:b3:1d: c5:7d:c4:5a:70:bf:b7:36:fa:e8:4d:42:58:7f:c6:a5:8b:41: 19:68:43:49:c5:79:68:8b:9f:2c:7c:24:13:be:d5:b2:18:ae: d1:0b:2e:4c:33:49:f1:0e:c5:74:b8:f1:65:e1:70:0d:05:0d: 7b:ec:40:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoRjQ0NEI4RERBQzFBMkFFQzlDOThEODk4MTYxQzczNDgy QzJFRDQ4ODAeFw0yNTA1MTEwNTQ0MThaFw0yNTA1MTgwNTQ0MThaMBgxFjAUBgNV BAMTDTY4MjAzOTMyLTM4NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyoX8U2YMAWFW1+pdUb4qHVrZOJALXoXoxkZNk+MZFr2wfnx3tGOQ8Z6KeRd0G F5xJQx7oCZFoKZhs7+VyTHHXt74nfcWtMfHMQNOL5vVaRlmiZNJolz0QdJOjRjn8 8pQ9wkFLMOEbdKFYyFeX56DyOK3ucUM0QWFyn7Rj8tQdsYrf6yyzkFamIvbrzkUU Ioymj6RhPKxivUej0IO88NOWNr6JfzaI8HG8xjVpkQKTMYp0Dfb3OLHR55XQZq20 EUARLjFG1ebjS1mp7EZ8NbVPkxnBRHEqq0/evXNb+MhHwdU1WYdkfrc6m3CdxArO lyBmdzB9mY7fo07c9WIHUi37AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrm6TLmqz 0X+ZzAyK+bpfx820WdwwHwYDVR0jBBgwFoAU9ES43awaKuycmNiYFhxzSCwu1Igw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzcwMzFBMUVDOTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOUVTNDNhd2FLdXljbU5pWUZoeHpTQ3d1MUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzcwMzFBMUVDOTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5 Y21OaVlGaHh6U0N3dTFJZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLrQOb2JhkbpL5WPeMrWuWaeJZfKj066j2rSH27b36uV4mhjXuUn4bB SXysBwHNsWyMi4AHu7U0DQLHz+Su+SOZj6g+5sgdS1f1FLNHw57G3UMavQcbXO8P SCxR4HxOkWMeE78txwJJEhN1E8hnVnYZlHVZdedKm541tsxZPJ/PBPF6flJCvna9 eRQxTYQC7UWAIwhH60khEeuUwTeYyTSIf8Tx2vKCcMU7oSuv4N++E4kctLf9L/SC dQKOV1GrdLefhjuzHcV9xFpwv7c2+uhNQlh/xqWLQRloQ0nFeWiLnyx8JBO+1bIY rtELLkwzSfEOxXS48WXhcA0FDXvsQCk= -----END CERTIFICATE-----Generated at Tue May 13 05:47:45 2025 by rpki-client