$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json) Hash identifier: DRxeiMvB7mw7Veuv5QSolMwQg5rdk/riLbtf1kS5nqE= Subject key identifier: D3:3C:EE:CC:B4:21:D7:0B:EC:BC:12:15:46:FF:4A:A7:A0:74:0E:62 Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft Manifest number: 089F Signing time: Mon 12 May 2025 20:22:29 +0000 Manifest this update: Mon 12 May 2025 20:22:28 +0000 Manifest next update: Mon 19 May 2025 20:22:28 +0000 Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: bCNW/HMo23mifn6xY0mSbCo23W9QnTBqEy8b7GqIf5s=) 2: CDBA3F66B9BD11EAAE22B109C4F9AE02.roa (hash: YmZW8IrF5Ot7b++uoJjSCiZIZtySz+iokfuITWaJe4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Validity Not Before: May 12 20:22:28 2025 GMT Not After : May 19 20:22:28 2025 GMT Subject: CN=68225884-a414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:91:2c:33:3e:ff:bd:a8:7c:5c:d9:45:23: b9:41:65:dc:e9:74:29:6d:ee:03:dd:e8:29:4d:79: 5b:b5:ab:c9:ff:2f:83:b6:1c:c3:34:e8:0b:75:57: aa:58:8f:15:eb:88:d0:11:04:89:12:dc:3b:7c:07: 75:09:82:bf:71:b1:8c:63:c6:c1:b7:f5:fb:78:97: 00:f5:d3:6f:0e:87:1c:e9:05:04:d9:83:09:d4:54: 29:e4:9b:88:9b:8f:f9:3c:7b:f5:69:e1:79:fe:36: 6a:3b:f5:6f:fc:46:61:49:58:f8:a5:03:1e:4f:e1: 26:93:b2:12:19:86:40:65:1c:c3:f1:8c:71:cb:b7: 04:e1:8d:f8:3e:fd:75:60:c6:b5:66:db:00:ad:68: 47:2f:ae:11:e4:76:e1:55:aa:ad:0a:46:ff:4d:4e: 16:58:15:78:23:f7:fe:d0:7f:34:7d:c3:3f:29:fb: f6:98:70:16:32:6d:b4:d4:1b:1c:74:a0:00:c0:61: f9:49:a9:da:2c:96:a4:cd:4f:d5:9c:d7:94:da:a2: a3:2b:fc:8c:ec:f9:46:7a:96:24:6a:4e:63:67:5a: 95:07:bd:1a:3e:22:64:3d:93:a6:17:4f:53:3c:19: 2e:79:52:d9:2e:3c:c6:f3:d5:c1:da:ea:f9:1e:3b: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3C:EE:CC:B4:21:D7:0B:EC:BC:12:15:46:FF:4A:A7:A0:74:0E:62 X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:44:1c:ce:30:8f:4b:11:fc:16:b8:f7:ae:60:c5:cc:f8:77: da:b8:e6:97:2a:c1:76:e9:35:73:7d:01:8e:a6:5a:e5:40:f3: 95:b3:38:a9:2a:2b:f3:67:4d:8b:8f:3c:6b:c5:d9:3a:e4:3b: 22:e2:ad:b8:7d:87:ac:c8:e0:a9:76:0c:fd:cc:88:72:2b:cb: 9a:66:24:ec:2f:f3:6e:b7:66:7f:96:5a:4a:78:32:74:d0:3a: e0:9f:9f:0c:25:f0:3f:e7:7e:8a:01:21:3c:cd:c5:5b:91:63: 7f:b3:04:30:c7:8c:5c:4f:6b:d4:89:7e:a0:03:72:52:c0:93: 2c:d3:d2:72:2f:fa:df:62:71:34:70:a1:b6:7e:d8:07:87:5f: f3:5e:87:34:fa:d4:5f:80:a0:84:f9:bb:3f:0d:e1:ab:d4:bd: ff:7e:d3:84:26:81:6f:57:ec:64:cf:78:43:1b:47:cf:db:98: 60:3f:c9:ea:d4:38:90:c0:3c:0a:b6:06:aa:94:f0:71:1c:06: a3:73:26:4d:9c:ee:55:3b:df:89:68:0f:46:d3:47:42:a2:e7: ed:cb:38:63:65:5f:54:bf:2d:b2:80:88:19:2c:1b:76:d0:4b: b3:bf:e0:38:59:96:63:86:5f:6f:d6:fd:6a:ce:57:6d:17:e0: 94:4c:e8:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjUwNTEyMjAyMjI4WhcNMjUwNTE5MjAyMjI4WjAYMRYwFAYD VQQDEw02ODIyNTg4NC1hNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTWRLDM+/72ofFzZRSO5QWXc6XQpbe4D3egpTXlbtavJ/y+DthzDNOgLdVeq WI8V64jQEQSJEtw7fAd1CYK/cbGMY8bBt/X7eJcA9dNvDocc6QUE2YMJ1FQp5JuI m4/5PHv1aeF5/jZqO/Vv/EZhSVj4pQMeT+Emk7ISGYZAZRzD8Yxxy7cE4Y34Pv11 YMa1ZtsArWhHL64R5HbhVaqtCkb/TU4WWBV4I/f+0H80fcM/Kfv2mHAWMm201Bsc dKAAwGH5SanaLJakzU/VnNeU2qKjK/yM7PlGepYkak5jZ1qVB70aPiJkPZOmF09T PBkueVLZLjzG89XB2ur5HjvTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM87sy0 IdcL7LwSFUb/SqegdA5iMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0 MUhHYndLM0ZoN1BiaWVlOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDRBzOMI9LEfwWuPeuYMXM+HfauOaXKsF26TVzfQGOplrlQPOVszip KivzZ02Ljzxrxdk65Dsi4q24fYesyOCpdgz9zIhyK8uaZiTsL/Nut2Z/llpKeDJ0 0Drgn58MJfA/536KASE8zcVbkWN/swQwx4xcT2vUiX6gA3JSwJMs09JyL/rfYnE0 cKG2ftgHh1/zXoc0+tRfgKCE+bs/DeGr1L3/ftOEJoFvV+xkz3hDG0fP25hgP8nq 1DiQwDwKtgaqlPBxHAajcyZNnO5VO9+JaA9G00dCouftyzhjZV9Uvy2ygIgZLBt2 0Euzv+A4WZZjhl9v1v1qzldtF+CUTOhO -----END CERTIFICATE-----Generated at Tue May 13 17:54:03 2025 by rpki-client