$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: 4v/k/UheHXLV64eiJDMWEE7ddCmjgQTcw/2z8EZbrBk= Subject key identifier: 1F:11:29:75:D7:AF:2D:02:A3:7F:A3:C7:96:1D:55:1D:F8:44:B2:A4 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 17D1 Signing time: Sat 10 May 2025 16:28:30 +0000 Manifest this update: Sat 10 May 2025 16:28:30 +0000 Manifest next update: Sat 17 May 2025 16:28:30 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: VwTLqkDoyvN5Bbw4u0r9XgCzfSUcEfQ1HMbVtpzrums=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6104 (0x17d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: May 10 16:28:30 2025 GMT Not After : May 17 16:28:30 2025 GMT Subject: CN=681f7eae-7f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:7e:08:75:b8:e6:06:6f:4a:93:a8:a8:82: cd:e6:97:7c:3b:af:4a:5f:01:da:7f:e3:07:bb:b7: e2:35:2e:e1:7d:88:8c:34:a2:f0:8f:b8:94:72:42: 06:1c:9d:7d:8e:db:f3:21:e2:74:28:0e:f6:33:e7: 77:05:52:a1:db:a4:a0:6d:c4:fa:53:ee:66:85:fb: f1:dd:8c:42:16:ba:16:c3:0b:01:eb:2e:e6:91:12: c6:b8:75:f9:be:b3:0c:79:d5:09:7b:4c:3a:01:18: 55:23:6e:e2:e6:75:d5:41:bf:2e:c5:16:be:9b:b7: 9d:7b:6a:61:6f:37:a2:c2:bc:96:ac:f5:e4:3f:d9: 7d:a9:36:f8:4e:23:f1:cf:55:d5:5a:70:e1:bc:bf: 2e:df:e7:93:3a:c9:5d:23:43:6b:06:ee:a7:83:d6: d4:be:e2:ae:fd:06:c9:ae:90:20:e4:67:8b:0f:e8: 86:65:58:9d:8d:47:8f:b3:ad:8a:24:5b:1d:9d:0a: 87:3e:ec:f1:04:c0:0c:df:34:9d:10:7e:11:56:0e: af:ba:f7:c6:85:44:c5:1f:d6:ec:94:4d:69:20:ed: 09:11:71:f6:29:6c:ae:da:c0:40:95:69:3b:2c:f8: c1:d9:42:68:c7:1b:f7:f0:18:0b:77:35:af:29:05: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:29:75:D7:AF:2D:02:A3:7F:A3:C7:96:1D:55:1D:F8:44:B2:A4 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:54:b2:ab:90:bc:4b:10:3a:d5:f5:51:65:82:de:d6:1e:f7: f8:98:e0:58:f5:1b:25:73:7c:d1:15:1b:fb:85:c4:7c:83:1f: 0c:99:1e:fe:ee:97:1e:a5:2a:bb:3d:4a:eb:90:6c:d3:79:7f: b8:53:df:ae:c0:84:b7:1b:94:0a:45:7a:1e:b8:de:a5:97:53: f5:82:39:d8:41:e1:21:c4:f7:2f:c2:11:6b:c0:1b:58:9d:62: 69:97:6d:0f:c2:f6:b5:de:53:55:59:8e:68:c2:84:f1:50:fa: d9:85:e6:32:1b:64:75:08:82:99:17:2e:c0:c3:d5:61:bf:0e: e6:1b:79:cd:bd:ad:cc:c5:d4:19:73:0e:1d:d3:ac:90:07:a4: 6c:75:d2:9e:ae:b8:7d:25:ec:1a:31:f3:ce:38:eb:b2:b2:bb: 05:65:cd:70:d1:d7:33:94:ad:49:e1:fa:4f:ea:df:d1:03:64: e6:fc:97:fa:e1:1a:db:78:06:d7:15:5d:0a:17:b7:96:87:5b: c8:c1:fc:70:20:e4:d5:e3:12:26:97:aa:66:54:d7:20:a2:3d: f4:fd:4e:1d:36:6f:8e:56:c4:61:f5:ca:57:af:a0:25:1d:9d: 7b:fe:2e:c2:90:bc:10:00:4d:b0:8f:18:8b:22:31:09:a9:67: d0:7b:8a:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNTEwMTYyODMwWhcNMjUwNTE3MTYyODMwWjAYMRYwFAYD VQQDEw02ODFmN2VhZS03Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSl+CHW45gZvSpOoqILN5pd8O69KXwHaf+MHu7fiNS7hfYiMNKLwj7iUckIG HJ19jtvzIeJ0KA72M+d3BVKh26SgbcT6U+5mhfvx3YxCFroWwwsB6y7mkRLGuHX5 vrMMedUJe0w6ARhVI27i5nXVQb8uxRa+m7ede2phbzeiwryWrPXkP9l9qTb4TiPx z1XVWnDhvL8u3+eTOsldI0NrBu6ng9bUvuKu/QbJrpAg5GeLD+iGZVidjUePs62K JFsdnQqHPuzxBMAM3zSdEH4RVg6vuvfGhUTFH9bslE1pIO0JEXH2KWyu2sBAlWk7 LPjB2UJoxxv38BgLdzWvKQWUIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8RKXXX ry0Co3+jx5YdVR34RLKkMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNVLKrkLxLEDrV9VFlgt7WHvf4mOBY9Rslc3zRFRv7hcR8gx8MmR7+ 7pcepSq7PUrrkGzTeX+4U9+uwIS3G5QKRXoeuN6ll1P1gjnYQeEhxPcvwhFrwBtY nWJpl20Pwva13lNVWY5owoTxUPrZheYyG2R1CIKZFy7Aw9Vhvw7mG3nNva3MxdQZ cw4d06yQB6RsddKerrh9JewaMfPOOOuysrsFZc1w0dczlK1J4fpP6t/RA2Tm/Jf6 4RrbeAbXFV0KF7eWh1vIwfxwIOTV4xIml6pmVNcgoj30/U4dNm+OVsRh9cpXr6Al HZ17/i7CkLwQAE2wjxiLIjEJqWfQe4re -----END CERTIFICATE-----Generated at Sun May 11 19:58:31 2025 by rpki-client