$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: YBkqhat5D+5Zi290uNs4o8DvFuxYEhd9Vsyc3G07no4= Subject key identifier: 3D:27:5E:8B:2F:12:1D:57:8F:CC:68:EF:3A:55:3B:AE:11:BF:4D:49 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2D59 Signing time: Mon 12 May 2025 15:29:42 +0000 Manifest this update: Mon 12 May 2025 15:29:41 +0000 Manifest next update: Mon 19 May 2025 15:29:41 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: r2xKeP1iew0AMAV2ucr+UHc5qnJal646tf4iN6XoFmU=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11636 (0x2d74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: May 12 15:29:41 2025 GMT Not After : May 19 15:29:41 2025 GMT Subject: CN=682213e6-ac3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:da:40:af:8b:fe:93:35:16:87:3d:99:9b: 95:50:27:dd:4d:52:14:42:0f:ba:21:f0:6c:3f:2b: a0:bb:a4:25:bb:00:04:10:b9:de:04:5c:a5:51:67: 09:1f:b9:1b:78:c5:21:4a:8f:8e:c2:07:7d:89:69: 58:c8:96:89:e0:57:a9:e5:9f:bc:ab:c3:48:87:bf: db:a8:08:16:46:8c:1e:ef:87:26:af:25:f8:af:27: a2:5a:59:44:82:2c:21:a3:86:79:35:81:1a:80:81: cf:a3:76:b4:a8:07:6b:9a:8d:be:cd:f5:f3:ad:f6: a7:36:5c:00:1e:e7:6b:0d:fc:f9:86:9b:7f:46:2c: 3d:00:78:7f:2e:5c:af:7b:77:36:cb:8a:cb:0d:5b: 12:fa:6c:29:3f:01:20:1e:30:78:fd:0d:b1:1c:7d: be:d6:74:5a:86:ed:cd:4a:ad:51:3e:d8:cc:42:e5: c7:ed:b8:6d:fa:09:b3:f6:6b:02:57:9f:5a:bb:33: dd:21:03:8e:ef:38:ac:4c:c4:c0:8b:24:90:d4:18: 1a:5a:52:dc:c7:77:9a:e6:d9:bd:5f:ed:de:41:a8: fe:95:67:88:90:91:1c:de:72:de:7d:20:ce:6d:32: 4b:3d:7b:4a:f6:87:69:d7:2f:13:11:f1:7f:d4:5d: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:5E:8B:2F:12:1D:57:8F:CC:68:EF:3A:55:3B:AE:11:BF:4D:49 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6c:1e:9f:42:23:b9:8f:ea:05:d3:24:4a:ca:86:a2:2f:9a: ca:57:3d:42:b7:24:ac:f8:f2:7c:11:2d:4c:d0:fc:10:11:5e: 13:d4:a4:4d:a3:4e:e2:a0:57:dc:07:56:78:f0:43:7c:d9:c7: 88:87:f2:ac:c2:4b:29:91:9e:7d:e4:eb:4c:8e:99:c6:7d:12: 20:43:b4:6d:0c:fb:5e:d3:5c:ec:6d:14:71:a6:91:0d:52:8b: 1a:fb:b9:fa:02:f5:0b:52:c9:74:23:ba:58:4e:f0:14:97:72: 78:f2:33:b1:a7:c5:2d:f9:66:56:ba:70:a5:c2:2d:23:9e:57: 49:fc:a7:12:34:83:ad:22:e7:bd:97:07:1f:3a:ff:c7:28:e6: 2d:7f:a6:f6:2d:c1:67:6e:47:75:5d:d3:bf:75:f1:f2:1d:18: 1c:7f:a2:b6:e0:98:c5:e1:92:61:f4:0d:75:87:40:9d:65:ca: 24:7a:57:9f:4e:a5:bc:df:5c:fe:02:ff:b7:57:15:92:13:3f: c9:da:5a:bf:66:eb:64:2a:9e:5c:d8:36:7e:8e:11:b8:10:c4: 95:c8:81:95:27:b8:26:d5:79:a7:00:98:7b:5f:d1:87:35:55: 6d:c9:b1:07:b8:79:dc:cc:f2:cb:0c:95:a8:59:07:2d:e6:eb: 8f:53:4e:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwNTEyMTUyOTQxWhcNMjUwNTE5MTUyOTQxWjAYMRYwFAYD VQQDEw02ODIyMTNlNi1hYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouDaQK+L/pM1Foc9mZuVUCfdTVIUQg+6IfBsPyugu6QluwAEELneBFylUWcJ H7kbeMUhSo+Owgd9iWlYyJaJ4Fep5Z+8q8NIh7/bqAgWRowe74cmryX4ryeiWllE giwho4Z5NYEagIHPo3a0qAdrmo2+zfXzrfanNlwAHudrDfz5hpt/Riw9AHh/Llyv e3c2y4rLDVsS+mwpPwEgHjB4/Q2xHH2+1nRahu3NSq1RPtjMQuXH7bht+gmz9msC V59auzPdIQOO7zisTMTAiySQ1BgaWlLcx3ea5tm9X+3eQaj+lWeIkJEc3nLefSDO bTJLPXtK9odp1y8TEfF/1F2OEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0nXosv Eh1Xj8xo7zpVO64Rv01JMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5bB6fQiO5j+oF0yRKyoaiL5rKVz1CtySs+PJ8ES1M0PwQEV4T1KRN o07ioFfcB1Z48EN82ceIh/KswkspkZ595OtMjpnGfRIgQ7RtDPte01zsbRRxppEN Uosa+7n6AvULUsl0I7pYTvAUl3J48jOxp8Ut+WZWunClwi0jnldJ/KcSNIOtIue9 lwcfOv/HKOYtf6b2LcFnbkd1XdO/dfHyHRgcf6K24JjF4ZJh9A11h0CdZcokelef TqW831z+Av+3VxWSEz/J2lq/ZutkKp5c2DZ+jhG4EMSVyIGVJ7gm1XmnAJh7X9GH NVVtybEHuHnczPLLDJWoWQct5uuPU04Q -----END CERTIFICATE-----Generated at Wed May 14 04:36:00 2025 by rpki-client