$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json) Hash identifier: Y7TJldMx6Ss6gaokvVdzJ6Ef3IyRhAAOsJr3KsNJEDw= Subject key identifier: E7:41:C5:90:E0:08:82:65:4C:D4:77:27:A5:27:A8:74:DA:25:5F:DE Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft Manifest number: 017E Signing time: Sun 11 May 2025 02:47:19 +0000 Manifest this update: Sun 11 May 2025 02:47:19 +0000 Manifest next update: Sun 18 May 2025 02:47:19 +0000 Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: coJLt9L4g3RDXkf78yYCVf7fu7tev5CUsAwqguUPUv8=) 2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: 9+qlA4Q9NblMxHBbHQc6/IzU15TwV+ogIZA74gQ+vIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Validity Not Before: May 11 02:47:19 2025 GMT Not After : May 18 02:47:19 2025 GMT Subject: CN=68200fb7-9f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:26:56:37:c4:4e:64:66:2c:2f:36:36:a4: eb:14:8b:33:7c:34:bf:e2:78:d0:46:c7:2d:98:ca: 1b:d3:e5:06:95:55:c7:ec:05:f1:3c:e2:f9:a8:49: 4c:46:fe:f9:60:75:74:4d:67:93:e6:16:d6:07:71: 6d:9c:7b:fa:1b:94:07:36:07:26:2c:fc:dd:41:0e: e5:cd:b6:8e:9f:c0:5f:59:ad:75:5c:d0:3b:97:a3: 5f:80:51:66:e1:3e:2a:8c:36:f9:c6:0b:85:0e:94: fe:35:9d:47:1e:ab:85:5b:8b:8c:8f:0a:ad:51:f3: eb:c6:63:e2:e3:71:cd:56:f8:81:ce:20:aa:9a:ca: cf:ee:c6:5d:8f:89:3c:0c:85:8a:88:b9:88:b8:cc: 7d:3d:56:89:f8:23:30:f0:73:63:ec:89:e2:aa:1f: 6c:be:88:c2:9f:ed:9c:ed:11:f9:0d:3b:78:8a:e1: 39:9c:d3:dd:46:fb:83:af:f2:97:67:89:39:15:81: 8a:e6:a4:b5:da:ba:47:49:4c:67:35:37:e7:22:ae: 9f:1c:92:c0:3f:8a:fe:11:54:9a:37:8c:9c:af:6a: 2f:b6:ee:7a:e3:75:0f:72:d3:04:11:fa:8c:d8:7a: 33:bc:04:1f:57:30:c8:1d:ea:55:65:3c:43:47:21: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:41:C5:90:E0:08:82:65:4C:D4:77:27:A5:27:A8:74:DA:25:5F:DE X509v3 Authority Key Identifier: keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:da:40:38:17:3c:c6:12:2c:b1:d2:af:11:29:19:a1:8e:46: db:93:03:90:c5:0a:97:c9:5e:a0:9a:2b:02:20:74:9a:51:76: 72:07:40:33:90:30:ef:9b:ed:c2:a4:7e:1e:da:ee:d2:60:24: 0e:51:5e:e7:17:90:09:f9:1b:60:1b:84:98:32:f4:c3:20:6b: 2e:19:e7:5e:b3:a8:7f:12:be:29:16:6b:df:21:8a:7f:e5:b0: 92:36:5d:4e:fc:ee:03:e3:44:a2:ec:11:14:57:d4:92:b5:7d: 5b:bd:e8:63:09:6d:e5:6b:20:73:ee:5f:61:48:38:da:01:f8: 39:f8:5c:70:2a:98:20:11:70:b5:8a:50:4b:21:8e:97:99:87: 05:e1:ed:2c:32:73:6a:9d:5d:73:79:7d:49:e8:b9:30:2e:27: 68:62:4d:f1:88:23:3d:09:50:46:91:27:0d:5c:fb:aa:23:95: b4:d9:de:f7:c9:d7:1e:4a:b4:6b:42:f9:31:3d:cb:72:ce:4c: 2d:68:cc:12:6c:c3:c3:d8:3a:cb:b2:04:13:11:d8:98:84:e1: 35:f0:fd:aa:d5:bc:9c:cc:74:f9:42:f9:dd:f2:e5:1c:ce:50: 68:8b:85:95:1c:8d:1c:41:84:37:84:64:6c:da:1b:f9:d5:a1: 9b:8e:f8:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF NkNDQkEyMkYwHhcNMjUwNTExMDI0NzE5WhcNMjUwNTE4MDI0NzE5WjAYMRYwFAYD VQQDEw02ODIwMGZiNy05ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlImVjfETmRmLC82NqTrFIszfDS/4njQRsctmMob0+UGlVXH7AXxPOL5qElM Rv75YHV0TWeT5hbWB3FtnHv6G5QHNgcmLPzdQQ7lzbaOn8BfWa11XNA7l6NfgFFm 4T4qjDb5xguFDpT+NZ1HHquFW4uMjwqtUfPrxmPi43HNVviBziCqmsrP7sZdj4k8 DIWKiLmIuMx9PVaJ+CMw8HNj7Iniqh9svojCn+2c7RH5DTt4iuE5nNPdRvuDr/KX Z4k5FYGK5qS12rpHSUxnNTfnIq6fHJLAP4r+EVSaN4ycr2ovtu5643UPctMEEfqM 2HozvAQfVzDIHepVZTxDRyH22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdBxZDg CIJlTNR3J6UnqHTaJV/eMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0 MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUI0Qy8yOTc5OTE1MjA0MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJy VkhwOENKc2QzLTdtekxvaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDn2kA4FzzGEiyx0q8RKRmhjkbbkwOQxQqXyV6gmisCIHSaUXZyB0Az kDDvm+3CpH4e2u7SYCQOUV7nF5AJ+RtgG4SYMvTDIGsuGedes6h/Er4pFmvfIYp/ 5bCSNl1O/O4D40Si7BEUV9SStX1bvehjCW3layBz7l9hSDjaAfg5+FxwKpggEXC1 ilBLIY6XmYcF4e0sMnNqnV1zeX1J6LkwLidoYk3xiCM9CVBGkScNXPuqI5W02d73 ydceSrRrQvkxPctyzkwtaMwSbMPD2DrLsgQTEdiYhOE18P2q1byczHT5Qvnd8uUc zlBoi4WVHI0cQYQ3hGRs2hv51aGbjvik -----END CERTIFICATE-----Generated at Mon May 12 16:35:57 2025 by rpki-client