$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json) Hash identifier: WfCJogxj//c5YrCV8a76C3EnkimObWxUM0QHTy0zfaE= Subject key identifier: 4F:3B:44:05:D3:73:AC:4C:5C:EB:01:26:A3:A3:EF:44:58:04:5D:6D Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft Manifest number: F8 Signing time: Sat 17 May 2025 03:51:50 +0000 Manifest this update: Sat 17 May 2025 03:51:50 +0000 Manifest next update: Sat 24 May 2025 03:51:50 +0000 Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: mwZ1WHAcDLI4ActeYaNDv0TZvEgZ42CHkh9cp7I8sNY=) 2: 79A50468BCA911EE8F42E684C4F9AE02.roa (hash: WCxfAGIVMH/a++ZJ4jx3iPBs/9NLSjs9q4Xkq6Czo34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB Validity Not Before: May 17 03:51:50 2025 GMT Not After : May 24 03:51:50 2025 GMT Subject: CN=682807d6-be89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:07:29:d4:04:19:2f:df:c1:ea:7b:f0:4b: 3a:b8:21:b7:10:96:8b:cd:73:ee:f2:38:e9:a2:d3: 6e:73:fe:09:c3:7f:65:01:7b:0b:a2:39:04:e2:3c: 35:3d:e9:5f:f3:e9:5f:5a:aa:5a:13:f4:78:93:ce: 93:76:a1:5d:ab:da:e1:24:94:82:b9:bb:fc:b8:a9: 01:51:ab:b8:5d:55:ed:b8:4d:34:20:58:75:5c:26: 19:f2:b2:1c:b8:6e:a3:67:dd:76:f7:0d:6e:57:a3: e7:ca:00:66:1a:ba:f9:a1:e1:8b:b5:50:23:78:df: 31:fb:ca:88:a0:77:ed:a6:09:52:5a:a7:15:76:6e: f3:ae:3f:87:cc:4d:71:80:a3:f2:c7:89:2d:ea:b6: 97:84:cc:67:de:e3:92:70:5f:47:bf:6e:ce:d9:b5: 7f:a0:f0:44:2a:f8:0e:b1:97:68:93:c3:2e:60:73: 40:fd:ff:df:5b:78:ff:58:38:41:0e:3c:a5:6f:c7: bb:20:91:48:29:bd:44:51:f3:55:88:86:f1:34:ef: f5:31:29:d6:e5:5a:4c:5f:a1:97:3a:50:a5:3d:cd: 9b:8b:82:71:4f:0a:7c:dd:6f:db:12:21:a0:8f:a5: bc:e0:b0:d4:53:fe:d6:b1:97:65:aa:e0:9a:b4:e4: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:44:05:D3:73:AC:4C:5C:EB:01:26:A3:A3:EF:44:58:04:5D:6D X509v3 Authority Key Identifier: keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:84:ee:da:5e:5c:23:c2:33:91:2c:a7:83:3e:2b:8b:fc:53: bb:f8:78:51:ad:ad:4c:fa:2a:ca:97:80:1b:9f:c9:91:a8:b1: 4c:c0:82:45:d6:16:bb:a8:99:90:26:dc:33:72:fd:b1:d7:51: 37:73:6f:3e:53:e3:59:90:f5:d9:83:aa:c8:f8:0b:9d:c7:c9: 70:bd:b8:ef:1a:e1:41:74:0b:42:5c:c9:a7:59:df:e7:3b:af: de:ac:dd:3f:24:59:16:f8:f3:86:90:60:f9:16:3c:3b:40:43: d4:a8:bd:68:1d:5e:ba:39:37:df:cb:b1:68:2b:89:7e:86:2b: ea:a8:cb:36:fe:ec:93:ce:64:cf:52:0e:7e:31:6b:1a:e2:39: 6e:5b:82:f0:39:bc:58:a9:09:0e:b8:fa:31:e7:c6:8d:0c:93: c6:bd:21:99:b2:91:1f:39:92:b1:d1:0d:b9:82:16:38:36:98: 58:6f:70:09:0c:0e:94:0e:41:0b:64:51:1f:19:fe:a1:6e:9b: d5:f5:8a:c4:10:a9:a3:8c:a0:94:bb:34:32:c0:45:38:a3:e8: 06:1f:2f:50:dc:04:0d:69:50:75:4b:53:59:69:df:aa:b2:44: 4a:5c:68:e7:5f:62:b3:ca:3a:ec:89:b7:a2:64:a7:93:17:d8: 6a:01:4c:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEY0N0E0MkNBOTI5RDgzN0UxNzkzMkJDQTA3RDY1Rjgy MkM5NjQ0Q0IwHhcNMjUwNTE3MDM1MTUwWhcNMjUwNTI0MDM1MTUwWjAYMRYwFAYD VQQDEw02ODI4MDdkNi1iZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmoHKdQEGS/fwep78Es6uCG3EJaLzXPu8jjpotNuc/4Jw39lAXsLojkE4jw1 Pelf8+lfWqpaE/R4k86TdqFdq9rhJJSCubv8uKkBUau4XVXtuE00IFh1XCYZ8rIc uG6jZ9129w1uV6PnygBmGrr5oeGLtVAjeN8x+8qIoHftpglSWqcVdm7zrj+HzE1x gKPyx4kt6raXhMxn3uOScF9Hv27O2bV/oPBEKvgOsZdok8MuYHNA/f/fW3j/WDhB Djylb8e7IJFIKb1EUfNViIbxNO/1MSnW5VpMX6GXOlClPc2bi4JxTwp83W/bEiGg j6W84LDUU/7WsZdlquCatOQNKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE87RAXT c6xMXOsBJqOj70RYBF1tMB8GA1UdIwQYMBaAFPR6QsqSnYN+F5MrygfWX4IslkTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy83MTE0ODQzRUJD MzgxMUVFQTUxNTMxM0JDNEY5QUUwMi85SHBDeXBLZGczNFhreXZLQjlaZmdpeVdS TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlIcEN5cEtkZzM0WGt5dktCOVpmZ2l5V1JNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy83MTE0ODQzRUJDMzgxMUVFQTUxNTMxM0JDNEY5QUUwMi85SHBDeXBLZGcz NFhreXZLQjlaZmdpeVdSTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/hO7aXlwjwjORLKeDPiuL/FO7+HhRra1M+irKl4Abn8mRqLFMwIJF 1ha7qJmQJtwzcv2x11E3c28+U+NZkPXZg6rI+Audx8lwvbjvGuFBdAtCXMmnWd/n O6/erN0/JFkW+POGkGD5Fjw7QEPUqL1oHV66OTffy7FoK4l+hivqqMs2/uyTzmTP Ug5+MWsa4jluW4LwObxYqQkOuPox58aNDJPGvSGZspEfOZKx0Q25ghY4NphYb3AJ DA6UDkELZFEfGf6hbpvV9YrEEKmjjKCUuzQywEU4o+gGHy9Q3AQNaVB1S1NZad+q skRKXGjnX2KzyjrsibeiZKeTF9hqAUyg -----END CERTIFICATE-----Generated at Sun May 18 04:52:06 2025 by rpki-client