$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: E4daGRXQoFXet6maFTMSaHnxmX1WWFU7ekhsnadQ1NQ= Subject key identifier: 89:77:3B:2D:D9:DC:F1:9A:6A:11:1F:3B:3F:D2:0E:CC:CD:40:7E:57 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02C8 Signing time: Tue 13 May 2025 01:11:28 +0000 Manifest this update: Tue 13 May 2025 01:11:28 +0000 Manifest next update: Tue 20 May 2025 01:11:28 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: VD1S6IuzCe7/H0k55tI17R2ZL+tG2K9JddDFMFrn1HQ=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: DBuDl77P/pL9wYiNriRl+mRJ7TJ0bOfQxLP7wzjEQtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: May 13 01:11:28 2025 GMT Not After : May 20 01:11:28 2025 GMT Subject: CN=68229c40-858b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:9d:22:a9:e5:48:e9:2d:76:47:51:03:95: 97:90:ff:17:43:b0:d2:12:45:74:2f:97:87:7d:cf: 37:59:eb:18:e9:d0:26:57:33:7b:f4:0b:a7:e3:d0: a1:4e:64:ee:c8:88:14:a9:ce:66:f1:2b:f7:24:d8: 53:b8:0e:f0:ed:f5:00:6f:e0:1d:0d:f0:4e:b4:3d: f1:62:fb:e4:05:12:e0:5b:fb:37:2c:78:84:f8:71: 67:65:90:1c:43:b3:be:19:6a:8f:41:ec:c5:45:96: e5:ab:51:7b:0f:72:d5:a0:49:21:88:83:a4:a6:4d: 5b:1b:e1:c6:ad:72:ad:89:29:8c:24:d9:4b:bb:96: 7c:30:02:0b:53:30:ae:15:23:ae:23:32:5e:f9:64: 9e:bf:c9:bb:bc:4e:04:07:bf:3f:00:7e:34:e6:49: a8:9a:d6:34:17:ff:5f:8c:f1:60:14:5d:e5:3a:12: 86:8a:36:2c:fa:22:a5:a9:6f:ab:9a:d3:a5:6b:fa: 19:f3:06:97:fa:14:a1:c9:dd:d0:95:31:68:a2:2c: 3b:70:d6:32:1f:60:5e:63:a1:91:84:00:6f:6b:cd: 54:1d:ba:00:8e:ec:7d:7e:d6:77:56:9b:74:1a:4e: d4:9f:bc:2e:eb:0c:1a:0f:0a:b8:96:f8:a1:25:ed: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:3B:2D:D9:DC:F1:9A:6A:11:1F:3B:3F:D2:0E:CC:CD:40:7E:57 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:0a:5e:12:0c:7d:73:50:f0:7a:23:6c:89:04:18:2a:de: dd:e0:09:a6:50:89:ff:4c:8a:2d:de:cf:fc:55:04:a0:72:b7: c1:65:1e:22:9e:29:fb:36:bb:44:e3:76:63:6c:15:3a:58:ef: b2:1d:5b:54:52:ea:a8:29:a7:7e:89:91:f3:04:67:b2:3f:d9: dd:92:40:26:bb:7b:c3:e6:67:da:64:26:06:2e:7a:3a:dc:b8: a4:61:3f:7d:25:f8:c3:38:c4:f5:84:0e:07:ca:e9:04:d4:19: 49:73:34:50:04:82:1d:6b:d3:4b:cc:77:83:06:25:df:17:0e: ba:94:48:e6:d2:12:35:de:ea:4e:48:75:99:a3:dd:49:7e:d5: de:83:68:93:fa:38:82:d4:08:15:d0:02:d4:ec:33:46:fe:50: b8:8a:7e:9b:70:6e:30:ca:59:c3:27:b8:7e:31:cf:e1:b1:d7: 5b:26:36:fc:9f:79:a0:fe:12:00:17:26:8b:96:6f:62:98:a6: 0b:ba:01:85:05:1d:ae:08:8f:f2:47:f7:c3:59:1f:d0:da:2f: b4:3f:84:77:f0:0c:91:c5:90:fd:d8:f5:8a:f1:12:ca:fc:ff: fa:68:f5:d4:d0:79:54:46:36:93:aa:70:12:9c:db:dc:b1:c2: 64:f8:c3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNTEzMDExMTI4WhcNMjUwNTIwMDExMTI4WjAYMRYwFAYD VQQDEw02ODIyOWM0MC04NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAormdIqnlSOktdkdRA5WXkP8XQ7DSEkV0L5eHfc83WesY6dAmVzN79Aun49Ch TmTuyIgUqc5m8Sv3JNhTuA7w7fUAb+AdDfBOtD3xYvvkBRLgW/s3LHiE+HFnZZAc Q7O+GWqPQezFRZblq1F7D3LVoEkhiIOkpk1bG+HGrXKtiSmMJNlLu5Z8MAILUzCu FSOuIzJe+WSev8m7vE4EB78/AH405kmomtY0F/9fjPFgFF3lOhKGijYs+iKlqW+r mtOla/oZ8waX+hShyd3QlTFooiw7cNYyH2BeY6GRhABva81UHboAjux9ftZ3Vpt0 Gk7Un7wu6wwaDwq4lvihJe2PrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl3Oy3Z 3PGaahEfOz/SDszNQH5XMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+dApeEgx9c1DweiNsiQQYKt7d4AmmUIn/TIot3s/8VQSgcrfBZR4i nin7NrtE43ZjbBU6WO+yHVtUUuqoKad+iZHzBGeyP9ndkkAmu3vD5mfaZCYGLno6 3LikYT99JfjDOMT1hA4HyukE1BlJczRQBIIda9NLzHeDBiXfFw66lEjm0hI13upO SHWZo91JftXeg2iT+jiC1AgV0ALU7DNG/lC4in6bcG4wylnDJ7h+Mc/hsddbJjb8 n3mg/hIAFyaLlm9imKYLugGFBR2uCI/yR/fDWR/Q2i+0P4R38AyRxZD92PWK8RLK /P/6aPXU0HlURjaTqnASnNvcscJk+MOg -----END CERTIFICATE-----Generated at Wed May 14 17:17:42 2025 by rpki-client