$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: rHmAZc+9vX8548EYGh84ghMG5VSEHL3/rFEO3c5xiNI= Subject key identifier: E7:D8:32:62:27:82:A8:48:1D:54:DE:F9:A2:B4:0B:67:C7:E4:08:1F Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: F9 Signing time: Fri 09 May 2025 04:13:26 +0000 Manifest this update: Fri 09 May 2025 04:13:25 +0000 Manifest next update: Fri 16 May 2025 04:13:25 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: i5l/3AJOl37TKUijRg82mDy83w/YauVY0BSqknBH138=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: May 9 04:13:25 2025 GMT Not After : May 16 04:13:25 2025 GMT Subject: CN=681d80e5-c20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:f3:ad:11:ae:b4:e4:81:7f:78:d3:ea:50: 3d:df:0a:07:79:eb:1b:c1:bd:45:09:b4:90:c7:5d: 07:c0:44:ea:0e:5a:bf:84:3e:c9:46:a9:4e:b4:e1: d5:b0:40:65:4f:ae:05:72:e9:f1:cd:71:3f:cd:ee: e2:aa:5e:a3:99:76:28:c6:8a:0a:ff:b7:1a:42:86: d6:dc:53:f4:26:0c:e9:9b:83:cc:f3:64:56:73:ba: e9:93:9f:07:ac:c8:ac:ee:32:ef:84:9b:d6:9a:7a: 4d:26:fe:75:7a:30:4e:ce:f0:14:9e:7e:d3:3a:93: fb:45:bf:92:5a:6e:9b:26:e3:42:c0:7f:c4:52:13: 1c:a8:9e:16:e0:4a:32:da:63:4b:93:a3:42:3d:b5: 88:5c:3f:0d:1a:09:77:fb:a1:d6:9d:c5:58:dc:08: c4:69:2b:33:52:fe:a9:fb:da:18:fc:7c:1c:4d:20: c1:2c:27:d5:61:50:9f:0b:aa:04:7b:4f:c9:07:f5: fc:68:40:08:a8:86:47:c3:9a:bc:81:0c:3a:60:da: f3:32:d6:85:57:7b:cf:be:24:8d:bc:fe:a0:76:11: 16:b2:ef:70:4e:38:3a:f7:84:30:fb:92:58:69:f5: 35:1d:c4:e6:f4:e0:f2:42:0a:2c:21:93:17:31:be: 0b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D8:32:62:27:82:A8:48:1D:54:DE:F9:A2:B4:0B:67:C7:E4:08:1F X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7d:7a:78:ac:e1:6a:cd:c7:cf:97:24:a2:53:49:cc:48:57: fb:cd:55:42:25:24:a5:e0:5d:0c:c7:67:09:f7:96:22:89:cf: f1:45:5e:5f:89:67:4e:e6:49:2e:18:35:ad:dc:fe:43:70:0a: 0e:08:24:bb:0d:de:8b:3d:e9:ef:78:24:ea:04:2b:4f:06:10: a0:db:db:a0:f6:24:23:4d:c9:59:6a:52:b2:a3:73:24:85:d1: 8d:c2:75:37:8d:7c:5a:8d:72:b5:1f:0a:98:5e:5a:57:fa:d8: 9a:2b:a1:c9:47:cd:62:83:7d:ae:32:2e:d0:21:4a:d8:33:4d: 84:8a:90:55:41:af:c8:76:11:b2:17:40:a1:25:fc:35:be:59: 06:5b:28:e1:03:6a:7d:87:8a:01:57:48:98:59:5d:22:30:94: 19:d7:51:5d:a7:e9:17:79:88:0a:ac:5c:65:45:3a:52:5b:2b: ad:10:94:24:38:80:6e:6e:87:f1:b5:ab:5e:e0:5d:cc:20:1d: 17:cb:43:e8:d9:19:3d:a2:ee:70:da:bc:31:54:d0:36:67:5b: 27:5e:ad:c9:5d:99:c2:bd:f4:06:06:be:8d:04:f6:40:40:8b: 7a:01:05:44:57:04:8c:b7:1c:94:1b:d9:4a:0a:ff:b5:2b:9d: 2a:72:fe:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUwNTA5MDQxMzI1WhcNMjUwNTE2MDQxMzI1WjAYMRYwFAYD VQQDEw02ODFkODBlNS1jMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wTzrRGutOSBf3jT6lA93woHeesbwb1FCbSQx10HwETqDlq/hD7JRqlOtOHV sEBlT64FcunxzXE/ze7iql6jmXYoxooK/7caQobW3FP0Jgzpm4PM82RWc7rpk58H rMis7jLvhJvWmnpNJv51ejBOzvAUnn7TOpP7Rb+SWm6bJuNCwH/EUhMcqJ4W4Eoy 2mNLk6NCPbWIXD8NGgl3+6HWncVY3AjEaSszUv6p+9oY/HwcTSDBLCfVYVCfC6oE e0/JB/X8aEAIqIZHw5q8gQw6YNrzMtaFV3vPviSNvP6gdhEWsu9wTjg694Qw+5JY afU1HcTm9ODyQgosIZMXMb4L4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfYMmIn gqhIHVTe+aK0C2fH5AgfMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlfXp4rOFqzcfPlySiU0nMSFf7zVVCJSSl4F0Mx2cJ95Yiic/xRV5f iWdO5kkuGDWt3P5DcAoOCCS7Dd6LPenveCTqBCtPBhCg29ug9iQjTclZalKyo3Mk hdGNwnU3jXxajXK1HwqYXlpX+tiaK6HJR81ig32uMi7QIUrYM02EipBVQa/IdhGy F0ChJfw1vlkGWyjhA2p9h4oBV0iYWV0iMJQZ11Fdp+kXeYgKrFxlRTpSWyutEJQk OIBubofxtate4F3MIB0Xy0Po2Rk9ou5w2rwxVNA2Z1snXq3JXZnCvfQGBr6NBPZA QIt6AQVEVwSMtxyUG9lKCv+1K50qcv6K -----END CERTIFICATE-----Generated at Sun May 11 00:36:53 2025 by rpki-client