$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json) Hash identifier: HS8CFrxWoDHZ18q+6OiEbAWliCNTG2oVb2dNUNZdfQE= Subject key identifier: C5:39:B4:BA:96:04:20:87:FA:70:94:65:CF:75:B1:34:E4:11:EA:9E Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft Manifest number: 9F Signing time: Sat 17 May 2025 05:44:36 +0000 Manifest this update: Sat 17 May 2025 05:44:36 +0000 Manifest next update: Sat 24 May 2025 05:44:36 +0000 Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: 86PR1H+UX7gno6vT3eKk6fiDbB/tKhj/ygxlyc+cRY4=) 2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: i8BI9IvwuikO1+xMVefOXZH2ufnANITPzuMSdPax+Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Validity Not Before: May 17 05:44:36 2025 GMT Not After : May 24 05:44:36 2025 GMT Subject: CN=68282244-340f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:2f:ac:fd:23:06:fc:ea:0a:b3:7a:c9:d3: f4:de:67:e2:74:d6:bb:aa:1d:a7:4d:67:93:3a:cb: f8:f2:c1:dc:43:75:e4:34:ea:5d:02:5a:f2:6e:49: eb:1e:05:58:3f:79:fa:b5:1b:52:e5:df:7a:75:f6: c6:6c:66:90:84:e3:a8:c1:b0:45:97:83:a9:f2:a8: 35:f9:c9:5d:38:e3:35:16:f3:57:0d:18:ff:a9:cf: 75:28:88:83:f3:5e:71:a1:95:8a:d3:be:f9:b1:4e: 7e:f8:7e:14:35:b6:ee:c1:90:d2:c3:8a:31:23:d9: 00:c7:c8:41:6a:40:84:01:2b:49:0e:6c:8d:67:d1: 3b:58:7f:68:3b:45:76:1a:e1:8d:d3:55:da:b5:64: 86:f1:35:80:fe:8d:8f:fa:4c:61:a2:b0:66:76:0c: 92:31:3f:3b:60:9c:3c:44:d2:2f:e8:bc:68:25:bc: 70:34:96:21:56:0c:73:36:54:8f:e9:fa:ae:a3:cc: 04:d1:05:98:ba:81:b4:a4:d2:94:59:81:c6:d4:9e: 6f:9d:19:db:b8:7c:24:a4:44:32:ba:a9:a4:9c:c8: 03:77:97:71:44:51:09:1b:04:d4:c5:f1:28:92:09: da:ae:ae:ae:d2:af:dc:7f:86:1b:7f:01:af:d5:a7: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:39:B4:BA:96:04:20:87:FA:70:94:65:CF:75:B1:34:E4:11:EA:9E X509v3 Authority Key Identifier: keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ec:93:b2:4b:98:ee:c0:95:9c:c4:89:01:70:50:86:b9:5a: e2:20:52:d4:50:99:71:73:9d:84:a9:e7:cc:2c:90:65:34:d2: b3:aa:a6:50:31:26:6b:62:6c:b8:5a:22:77:2c:cf:db:2f:8b: f3:d4:f6:42:2e:11:dc:3e:b9:d3:e4:4b:2c:5e:7a:59:c8:5c: 22:58:97:07:5e:e4:30:a0:d0:89:eb:d1:d3:62:59:0f:0f:df: 9a:0a:7a:fa:3e:2a:8c:d0:5d:b2:87:67:69:3b:4e:29:48:ea: 5a:5d:91:d8:14:ef:39:e5:94:c4:48:7d:c0:70:fd:ce:25:36: 11:68:5c:14:ed:63:ee:ab:b3:da:d1:da:8e:83:80:7a:8a:97: df:95:7d:de:e3:b5:af:6d:0c:7e:2a:c3:7d:89:62:22:0a:53: e8:a8:48:75:39:9f:c4:34:8b:a5:0a:2e:db:57:96:53:57:4f: 3f:d8:7c:f3:db:6b:47:b8:d1:99:2c:88:6a:e9:63:00:31:0a: 80:5d:90:3a:ab:21:f6:ff:77:cc:b8:55:7f:36:2b:5f:b4:45: 9d:35:8b:a7:32:f3:28:c2:0e:e3:c6:11:69:1b:e7:bd:e0:7a: d3:b9:c8:74:f6:8f:35:61:49:74:70:19:dc:a7:99:e5:47:2f: 86:fc:30:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDk2NTRBMkYwODQ1OTdBMkI5MUFDMDAyQTc2MDdFMTND MTVEMDk0OTEwHhcNMjUwNTE3MDU0NDM2WhcNMjUwNTI0MDU0NDM2WjAYMRYwFAYD VQQDEw02ODI4MjI0NC0zNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8MvrP0jBvzqCrN6ydP03mfidNa7qh2nTWeTOsv48sHcQ3XkNOpdAlrybknr HgVYP3n6tRtS5d96dfbGbGaQhOOowbBFl4Op8qg1+cldOOM1FvNXDRj/qc91KIiD 815xoZWK0775sU5++H4UNbbuwZDSw4oxI9kAx8hBakCEAStJDmyNZ9E7WH9oO0V2 GuGN01XatWSG8TWA/o2P+kxhorBmdgySMT87YJw8RNIv6LxoJbxwNJYhVgxzNlSP 6fquo8wE0QWYuoG0pNKUWYHG1J5vnRnbuHwkpEQyuqmknMgDd5dxRFEJGwTUxfEo kgnarq6u0q/cf4YbfwGv1acF8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU5tLqW BCCH+nCUZc91sTTkEeqeMB8GA1UdIwQYMBaAFJZUovCEWXorkawAKnYH4TwV0JSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy84MEJGMUE2MjNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVpdVJyQUFxZGdmaFBCWFFs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsU2k4SVJaZWl1UnJBQXFkZ2ZoUEJYUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy84MEJGMUE2MjNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVp dVJyQUFxZGdmaFBCWFFsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX7JOyS5juwJWcxIkBcFCGuVriIFLUUJlxc52EqefMLJBlNNKzqqZQ MSZrYmy4WiJ3LM/bL4vz1PZCLhHcPrnT5EssXnpZyFwiWJcHXuQwoNCJ69HTYlkP D9+aCnr6PiqM0F2yh2dpO04pSOpaXZHYFO855ZTESH3AcP3OJTYRaFwU7WPuq7Pa 0dqOg4B6ipfflX3e47WvbQx+KsN9iWIiClPoqEh1OZ/ENIulCi7bV5ZTV08/2Hzz 22tHuNGZLIhq6WMAMQqAXZA6qyH2/3fMuFV/NitftEWdNYunMvMowg7jxhFpG+e9 4HrTuch09o81YUl0cBncp5nlRy+G/DDb -----END CERTIFICATE-----Generated at Sun May 18 15:58:35 2025 by rpki-client