$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: /lqlqFaNqFoMST01xFZZYWj0QWNaokWyOBtLbq3+vEw= Subject key identifier: 4D:02:2A:4D:1A:83:9D:FB:CC:92:F3:5D:CE:18:B8:2F:2E:C6:69:C1 Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: E3 Signing time: Tue 13 May 2025 04:38:28 +0000 Manifest this update: Tue 13 May 2025 04:38:27 +0000 Manifest next update: Tue 20 May 2025 04:38:27 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: d7dfOBvrwphitnFrkrgduVkxADBErM35QIt6FDSVR3Q=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: May 13 04:38:27 2025 GMT Not After : May 20 04:38:27 2025 GMT Subject: CN=6822ccc3-f346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:7d:ae:ee:57:3d:82:3e:fe:ff:8c:ca:59: 41:2e:90:83:44:5c:24:a1:a9:44:24:bc:39:a8:06: 40:ce:40:49:9c:97:aa:6a:74:46:9f:0b:97:a7:b0: b5:b4:76:36:d5:0e:00:ef:be:58:fb:a1:24:e0:da: d2:16:ce:04:31:3f:ac:90:33:31:3a:5f:8a:02:91: 7e:88:2e:79:e9:19:23:52:91:87:4b:da:dd:6e:d0: 25:e5:f0:60:81:3d:80:c5:1a:60:8c:2d:b2:37:9b: e2:76:2d:be:29:2a:7f:8d:39:99:da:89:87:6a:09: 64:5f:bf:87:39:15:e8:e1:69:61:73:3c:6b:1e:43: 6c:85:1c:87:b3:e2:04:76:56:c1:41:6a:51:af:04: 58:2c:ac:e5:05:44:13:b6:de:56:9e:a3:4c:52:3d: fb:e5:4a:fb:7d:83:83:10:f1:c7:36:28:48:8f:14: 37:7b:16:84:54:d7:76:1b:7a:d6:49:05:a1:f9:ca: 7f:f5:3b:80:58:7d:45:77:73:79:1b:8c:e9:60:b8: ad:0e:2c:11:0d:29:f9:db:5d:63:54:af:63:a5:10: d3:bd:6a:90:fe:01:6f:57:17:77:66:7a:12:13:fd: 6b:85:8d:62:1b:13:ef:1f:da:74:56:58:e8:b4:da: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:2A:4D:1A:83:9D:FB:CC:92:F3:5D:CE:18:B8:2F:2E:C6:69:C1 X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b1:36:1f:3d:a5:89:86:c4:d4:4e:38:26:90:5e:d0:d5:aa: d1:32:19:f7:9f:af:df:0a:0b:5f:7f:a7:5f:82:cb:47:a6:8b: 80:52:22:0f:24:1b:9c:47:13:fd:99:5f:cc:fd:d7:97:ab:db: 3b:ea:36:28:9d:ef:77:ac:07:cf:8e:97:61:48:97:7e:a1:0b: 02:ba:1b:5c:25:d9:22:d0:4f:2c:96:68:e6:91:1a:0c:fd:f7: d2:41:a3:1b:9f:72:60:f7:85:87:d3:81:cf:81:51:22:3a:84: 82:cc:d1:5f:24:ca:67:89:d5:3a:d5:fd:68:c9:2d:bb:7a:a9: 8d:f9:9e:c2:7e:57:f4:75:53:4e:6c:78:f7:66:a9:72:d6:1e: 9e:6f:0a:db:d6:a3:e3:73:0c:35:9e:b3:13:9c:a4:20:aa:74: c5:eb:a9:cb:f3:36:8b:be:78:ce:ed:5f:e0:07:11:29:e6:c7: 27:08:67:ca:b0:63:c0:53:a6:86:64:5c:cb:d5:40:01:92:4a: 98:07:95:e6:c1:4e:8f:13:e8:97:e0:69:de:cb:44:e9:ba:e0: af:9b:67:f7:5a:60:c9:c6:bc:7a:b4:6c:55:b4:80:78:45:24: 46:ff:cb:64:b1:00:27:51:72:47:46:14:0b:9a:4c:bb:90:a4: 89:37:45:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjUwNTEzMDQzODI3WhcNMjUwNTIwMDQzODI3WjAYMRYwFAYD VQQDEw02ODIyY2NjMy1mMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ox9ru5XPYI+/v+MyllBLpCDRFwkoalEJLw5qAZAzkBJnJeqanRGnwuXp7C1 tHY21Q4A775Y+6Ek4NrSFs4EMT+skDMxOl+KApF+iC556RkjUpGHS9rdbtAl5fBg gT2AxRpgjC2yN5vidi2+KSp/jTmZ2omHaglkX7+HORXo4WlhczxrHkNshRyHs+IE dlbBQWpRrwRYLKzlBUQTtt5WnqNMUj375Ur7fYODEPHHNihIjxQ3exaEVNd2G3rW SQWh+cp/9TuAWH1Fd3N5G4zpYLitDiwRDSn5211jVK9jpRDTvWqQ/gFvVxd3ZnoS E/1rhY1iGxPvH9p0VljotNrRewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0CKk0a g537zJLzXc4YuC8uxmnBMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXsTYfPaWJhsTUTjgmkF7Q1arRMhn3n6/fCgtff6dfgstHpouAUiIP JBucRxP9mV/M/deXq9s76jYone93rAfPjpdhSJd+oQsCuhtcJdki0E8slmjmkRoM /ffSQaMbn3Jg94WH04HPgVEiOoSCzNFfJMpnidU61f1oyS27eqmN+Z7Cflf0dVNO bHj3Zqly1h6ebwrb1qPjcww1nrMTnKQgqnTF66nL8zaLvnjO7V/gBxEp5scnCGfK sGPAU6aGZFzL1UABkkqYB5XmwU6PE+iX4Gney0TpuuCvm2f3WmDJxrx6tGxVtIB4 RSRG/8tksQAnUXJHRhQLmky7kKSJN0Vr -----END CERTIFICATE-----Generated at Wed May 14 01:21:17 2025 by rpki-client