$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: VqSKFpiiBThx5YGEg3MxKZwlEwHihl8+UqLHDiPWmmk= Subject key identifier: 0A:45:39:FD:C2:85:BE:D3:1A:98:4D:D0:6B:D4:A3:2F:D1:A4:B4:FD Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 034E Signing time: Sat 17 May 2025 01:19:54 +0000 Manifest this update: Sat 17 May 2025 01:19:54 +0000 Manifest next update: Sat 24 May 2025 01:19:54 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: P0BYb9ymRPJqP//BwnncLkNsustEdOwWDGR0jiWxu2k=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: t/mrsTqHIqg71ppASZaUtd0JNR/owZ1uQpvsiAbtFVA=) 3: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: gQDQQRMLSj9QQTvCXEs/CWWGTDVP07YUAOIJOQNCiro=) 4: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: d3gLGGrLZBKlh1oeBhh6ERMmVy7ZPGIKYX8M6gYUlBo=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: JuNByZogw7Q3Wr5AqPKRTQsxkAmTBvInp+ozIJH6zCk=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: RleZY/hYq9zhrkVLuNa22Q1WPIbwX43FRRfcBUVtX90=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: 8P8JPeyYUjVRMwYnIcITkZ43qO2oumphcT4Qe6jYV/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 17 01:19:54 2025 GMT Not After : May 24 01:19:54 2025 GMT Subject: CN=6827e43a-4f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:15:f6:e2:68:1e:8f:57:f2:21:f9:11:53: 01:1d:f0:9b:82:2b:8e:7e:d2:c7:65:04:12:76:98: d4:b8:69:45:7e:56:9a:25:4c:7c:64:a1:f1:4a:ba: e6:20:36:8d:34:11:45:a5:5d:be:28:78:56:9e:f1: 63:8d:1d:d5:3b:04:d9:69:cb:8c:03:29:2c:f9:83: 97:df:0a:45:99:7d:41:5c:5d:4d:ac:44:85:1b:20: bf:a4:51:6c:b3:08:e0:f7:82:4c:f2:23:a5:64:61: 99:90:c1:49:b8:10:41:d0:a5:32:dc:e1:83:1e:ce: 3f:a7:e0:3d:a4:02:fb:d7:70:58:d4:92:81:6d:64: ef:a4:7a:c8:a9:b9:96:c5:04:c1:e0:51:06:a1:f3: ba:0c:bf:75:71:e0:9d:cb:01:2e:94:ec:ee:61:d4: 55:06:54:7b:a6:3a:5d:ce:6f:ee:54:f5:44:cc:79: 90:c6:c5:b1:aa:78:a8:fc:0e:ca:80:c2:b5:b3:ba: b8:32:24:5c:a4:00:17:d5:66:76:da:68:97:27:af: 75:80:20:d9:50:81:00:f3:3e:2f:38:4c:4d:34:5b: b8:ab:a5:b6:ad:fe:3a:4c:4e:10:da:a4:f1:b6:f9: 29:c1:e5:22:3b:0b:a0:42:e2:76:f1:72:b7:a5:43: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:39:FD:C2:85:BE:D3:1A:98:4D:D0:6B:D4:A3:2F:D1:A4:B4:FD X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:24:e5:68:77:88:63:7e:8c:5d:76:f7:04:aa:61:ab:6b:28: 71:9b:31:16:f5:95:4f:88:f8:da:f4:25:55:be:0e:4f:9a:9b: e7:c2:c2:63:26:5f:17:57:14:f5:8c:7c:f8:25:da:b7:11:6f: 8e:ef:76:81:df:29:08:8a:37:41:c8:66:90:f1:9f:55:e9:7b: 30:17:5c:1e:47:6b:0f:0a:c9:17:f7:0d:72:b7:8c:93:dd:1e: 64:07:56:7d:0d:22:85:af:49:7d:91:9b:94:22:98:49:4c:65: a3:e4:1c:0f:4c:be:51:b6:04:fd:92:25:67:d3:d9:9e:4b:49: b1:8e:2a:c4:27:c4:85:f7:d1:a9:26:85:92:f6:75:a6:90:e4: 70:2e:99:6a:9a:63:f4:f4:67:66:e1:95:d3:96:84:b1:3a:d2: b1:7a:b1:72:f7:52:89:56:c7:9b:3e:1a:a8:23:d5:78:57:a0: a4:2f:81:97:02:0e:88:7f:ad:c1:41:b6:50:8f:d4:56:23:81: ef:ed:8e:66:ab:e4:60:b2:b9:c8:34:80:f0:4f:4d:a6:f4:03: d5:63:49:70:cf:2d:d3:7e:e6:fa:f0:d3:ab:f3:90:d1:0e:33: 06:e8:99:17:9d:19:40:49:a4:dc:55:d1:03:14:c6:f5:62:2a: bf:69:f6:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNTE3MDExOTU0WhcNMjUwNTI0MDExOTU0WjAYMRYwFAYD VQQDEw02ODI3ZTQzYS00ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OkV9uJoHo9X8iH5EVMBHfCbgiuOftLHZQQSdpjUuGlFflaaJUx8ZKHxSrrm IDaNNBFFpV2+KHhWnvFjjR3VOwTZacuMAyks+YOX3wpFmX1BXF1NrESFGyC/pFFs swjg94JM8iOlZGGZkMFJuBBB0KUy3OGDHs4/p+A9pAL713BY1JKBbWTvpHrIqbmW xQTB4FEGofO6DL91ceCdywEulOzuYdRVBlR7pjpdzm/uVPVEzHmQxsWxqnio/A7K gMK1s7q4MiRcpAAX1WZ22miXJ691gCDZUIEA8z4vOExNNFu4q6W2rf46TE4Q2qTx tvkpweUiOwugQuJ28XK3pUPoPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApFOf3C hb7TGphN0GvUoy/RpLT9MB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeJOVod4hjfoxddvcEqmGrayhxmzEW9ZVPiPja9CVVvg5PmpvnwsJj Jl8XVxT1jHz4Jdq3EW+O73aB3ykIijdByGaQ8Z9V6XswF1weR2sPCskX9w1yt4yT 3R5kB1Z9DSKFr0l9kZuUIphJTGWj5BwPTL5RtgT9kiVn09meS0mxjirEJ8SF99Gp JoWS9nWmkORwLplqmmP09Gdm4ZXTloSxOtKxerFy91KJVsebPhqoI9V4V6CkL4GX Ag6If63BQbZQj9RWI4Hv7Y5mq+RgsrnINIDwT02m9APVY0lwzy3Tfub68NOr85DR DjMG6JkXnRlASaTcVdEDFMb1Yiq/afZ0 -----END CERTIFICATE-----Generated at Sat May 17 15:22:27 2025 by rpki-client