$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: iWRJlAPW8NaifE5MS4WcaimASAj8gIs3SReKJ2uUjHc= Subject key identifier: FC:76:3F:20:82:19:E4:4B:E7:7C:52:CA:68:4B:9F:6E:03:D9:20:58 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 08A5 Signing time: Wed 14 May 2025 20:40:53 +0000 Manifest this update: Wed 14 May 2025 20:40:53 +0000 Manifest next update: Wed 21 May 2025 20:40:53 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: A9JaBnFtLQjAFNMYBx1t/czPJUPXdFnmSHExfnybapU=) 2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: Rbebv7a/3bjYuOYYlHIXr662xadEzX5etaY1VAtT19Q=) 3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 2TPeWUxi8y2dJKsuFTVthNuMYrZypRCJy1Y/CFzYdHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: May 14 20:40:53 2025 GMT Not After : May 21 20:40:53 2025 GMT Subject: CN=6824ffd5-1c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:73:33:34:7b:de:ef:91:f3:a8:77:60:9c: 56:63:74:c4:78:43:89:5d:9d:f6:f7:7a:af:b0:30: b3:ca:f5:8e:9f:f9:0a:b9:2b:b8:5e:69:57:23:af: b5:0a:12:2b:d7:2c:66:d3:e7:e3:d6:4a:c5:a4:e6: 1e:3d:8c:ca:1f:1e:60:a8:f7:24:85:de:69:72:4a: 82:df:cb:dd:85:ce:b8:97:e5:2a:33:79:38:cd:df: 6e:5e:a1:7c:8e:68:a6:2f:1d:be:eb:a9:af:28:07: b0:ef:f2:6c:e6:56:d8:2f:a2:f5:c5:d9:09:b7:07: f8:31:29:e8:de:da:59:3d:e1:ff:2d:2f:85:ae:ba: 9c:f5:10:d3:c0:99:4b:2d:04:7d:c9:27:fe:96:eb: d4:a4:2f:cb:9a:6a:97:74:d8:d9:38:6f:09:f9:35: ec:82:e9:8a:53:63:de:e8:e3:81:29:53:5b:76:ee: 7a:25:22:48:74:9b:40:0b:aa:c2:a7:da:1a:8b:a0: 71:c2:87:6e:16:8c:65:f4:fa:28:89:07:00:fb:c2: 0d:3c:53:b7:ca:3a:32:70:9f:83:14:e6:2d:7f:94: 7f:cb:83:7d:de:1c:d3:c8:fe:d0:83:22:aa:af:64: 5b:b9:4b:81:02:f0:59:94:53:fe:d7:8f:75:96:d7: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:76:3F:20:82:19:E4:4B:E7:7C:52:CA:68:4B:9F:6E:03:D9:20:58 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6e:03:4c:07:fc:01:a2:73:56:3d:98:0e:80:08:c9:05:19: 10:c7:1f:36:58:97:93:75:ba:6c:f8:99:70:00:b4:06:98:b1: b0:60:46:52:22:73:ba:d9:a1:3e:96:e9:b9:62:3e:f1:65:45: 4d:ba:77:49:f8:9c:9d:62:c6:cd:d1:b1:9a:f7:60:a0:2f:77: 98:b5:54:e6:66:15:3b:29:4b:01:87:eb:38:a3:96:0f:fc:3b: 6f:7e:14:8a:de:6f:9c:79:fe:54:23:86:54:2c:6a:8b:14:4a: b9:55:e6:45:2d:00:d7:89:50:0e:cf:30:4f:a3:94:02:f7:64: 85:01:0a:8f:f9:0b:30:9c:73:b2:ca:9c:74:97:ec:87:8f:5c: c2:54:0b:75:f3:9a:2e:cb:fc:a1:58:13:4b:1d:96:94:54:ec: 65:90:f3:46:9b:b0:af:bd:fd:37:45:57:fd:e2:26:10:13:50: a8:b2:d7:16:f9:d4:97:c2:74:8a:d5:86:e7:bc:26:4c:d3:69: ac:3e:b4:35:f6:1d:28:75:0f:13:03:30:c8:9c:cb:8c:b9:c5: 80:fa:59:48:4c:e3:fe:0c:81:25:62:e2:df:e0:af:54:86:5e: d8:2b:fd:8f:f1:6b:3b:a7:32:db:4e:8c:9a:8d:22:9c:d3:ad: a8:73:39:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwNTE0MjA0MDUzWhcNMjUwNTIxMjA0MDUzWjAYMRYwFAYD VQQDEw02ODI0ZmZkNS0xYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutRzMzR73u+R86h3YJxWY3TEeEOJXZ3293qvsDCzyvWOn/kKuSu4XmlXI6+1 ChIr1yxm0+fj1krFpOYePYzKHx5gqPckhd5pckqC38vdhc64l+UqM3k4zd9uXqF8 jmimLx2+66mvKAew7/Js5lbYL6L1xdkJtwf4MSno3tpZPeH/LS+Frrqc9RDTwJlL LQR9ySf+luvUpC/LmmqXdNjZOG8J+TXsgumKU2Pe6OOBKVNbdu56JSJIdJtAC6rC p9oai6BxwoduFoxl9PooiQcA+8INPFO3yjoycJ+DFOYtf5R/y4N93hzTyP7QgyKq r2RbuUuBAvBZlFP+1491ltfUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx2PyCC GeRL53xSymhLn24D2SBYMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQbgNMB/wBonNWPZgOgAjJBRkQxx82WJeTdbps+JlwALQGmLGwYEZS InO62aE+lum5Yj7xZUVNundJ+JydYsbN0bGa92CgL3eYtVTmZhU7KUsBh+s4o5YP /DtvfhSK3m+cef5UI4ZULGqLFEq5VeZFLQDXiVAOzzBPo5QC92SFAQqP+QswnHOy ypx0l+yHj1zCVAt185ouy/yhWBNLHZaUVOxlkPNGm7Cvvf03RVf94iYQE1CostcW +dSXwnSK1YbnvCZM02msPrQ19h0odQ8TAzDInMuMucWA+llITOP+DIElYuLf4K9U hl7YK/2P8Ws7pzLbToyajSKc062oczlg -----END CERTIFICATE-----Generated at Fri May 16 08:20:33 2025 by rpki-client