$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: ZOHOIncPIht72ntZiiiXsETr84xe+zaRu4/nM374XYA= Subject key identifier: B4:56:AF:82:BB:05:68:95:DE:5F:C6:81:4B:2C:1A:1D:BB:60:5E:80 Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0BFC Signing time: Fri 16 May 2025 18:56:44 +0000 Manifest this update: Fri 16 May 2025 18:56:43 +0000 Manifest next update: Fri 23 May 2025 18:56:43 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: H+F8XjnC6B8g4viNpDkh9kAIqKv75AO2jHcBX6CKaL4=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: OeGbR9lPmFx9F+KOx3DCweLM+ujmkz1n3pufF3R5HIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: May 16 18:56:43 2025 GMT Not After : May 23 18:56:43 2025 GMT Subject: CN=68278a6b-a04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:c0:c0:77:f4:4d:81:4a:56:99:56:89:5d: 26:f6:e1:a2:86:40:1e:f7:04:04:f4:5b:f7:2f:31: ac:e1:7e:04:ff:55:ce:22:69:48:12:9a:2d:e6:d9: 73:24:ac:68:70:18:94:2c:c9:4a:5d:0d:e1:7a:e2: 25:23:b2:ab:98:ed:2b:b3:ad:b6:a1:86:5c:6d:29: 70:e1:e1:d9:e7:6c:c5:60:c2:05:f1:86:60:d4:26: 93:e1:ca:8e:b8:cd:a6:8f:8b:de:9c:ca:39:ba:6a: c6:6f:2c:49:b4:4e:8f:4d:b5:ed:00:34:ba:03:0a: 07:f1:9a:ab:f1:8c:56:6b:66:6a:76:81:75:7f:cf: 41:0a:6a:ee:be:21:f6:b9:38:97:c4:28:5e:4e:64: 79:03:91:57:17:77:48:c9:5f:44:85:fb:5b:ed:88: fc:92:a3:3b:47:1f:7f:9c:5c:9d:65:aa:71:3b:b9: 3c:da:aa:e5:af:1d:44:9b:08:b9:80:90:1f:58:51: 6b:51:bf:e5:e2:f5:56:87:ce:29:19:bd:f8:81:a0: 3b:0f:bf:d0:53:bb:49:fb:9e:d8:6d:28:65:ff:2c: 73:fd:6d:60:4d:e6:af:c7:e1:c3:32:92:9a:57:76: c4:9d:02:82:4e:59:9f:ef:ce:fc:44:20:59:f8:7a: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:56:AF:82:BB:05:68:95:DE:5F:C6:81:4B:2C:1A:1D:BB:60:5E:80 X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ed:4d:4a:bf:37:98:fb:b6:71:58:54:e0:dd:22:d6:79:09: 40:b1:15:d2:b4:66:bf:5b:21:31:e4:d2:31:dc:47:ac:37:11: a7:7f:6e:81:30:10:b5:15:ee:56:0f:46:d2:af:11:f8:19:94: 69:3a:d4:aa:87:b6:6d:77:21:6e:7d:f7:09:3c:f0:7b:5a:8f: 39:74:6d:cd:56:b9:d7:f4:88:86:08:08:1a:27:d2:eb:6a:d8: b3:6c:6e:ef:f5:c8:da:67:df:3e:36:9f:37:65:0b:ed:f8:3e: 76:05:d5:b4:d5:b0:d4:4d:24:c7:0e:32:18:a2:de:66:a4:a2: c1:d5:ca:14:fa:88:ea:80:00:4b:b3:d3:ea:5e:b2:0f:92:9a: a3:30:94:81:69:79:b6:98:88:24:1f:81:ac:a7:c9:39:ff:d0: 00:ea:02:7a:e3:b6:ff:03:1b:04:e4:51:3e:c3:3c:8c:97:ec: a8:5c:37:16:13:89:a9:47:52:57:88:df:b6:60:a1:46:c0:b3: ba:db:07:2f:55:e1:e8:e2:45:f9:53:4e:e8:88:37:ed:1d:21: 32:81:7f:6b:cb:c0:ac:f8:b8:2c:cd:b7:39:e4:32:9c:84:4b: 62:d6:0b:2c:29:6e:21:a7:10:56:ab:91:7c:cc:c8:d9:ba:ee: 45:a5:06:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjUwNTE2MTg1NjQzWhcNMjUwNTIzMTg1NjQzWjAYMRYwFAYD VQQDEw02ODI3OGE2Yi1hMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvDAwHf0TYFKVplWiV0m9uGihkAe9wQE9Fv3LzGs4X4E/1XOImlIEpot5tlz JKxocBiULMlKXQ3heuIlI7KrmO0rs622oYZcbSlw4eHZ52zFYMIF8YZg1CaT4cqO uM2mj4venMo5umrGbyxJtE6PTbXtADS6AwoH8Zqr8YxWa2ZqdoF1f89BCmruviH2 uTiXxCheTmR5A5FXF3dIyV9Ehftb7Yj8kqM7Rx9/nFydZapxO7k82qrlrx1Emwi5 gJAfWFFrUb/l4vVWh84pGb34gaA7D7/QU7tJ+57YbShl/yxz/W1gTeavx+HDMpKa V3bEnQKCTlmf7878RCBZ+HqehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRWr4K7 BWiV3l/GgUssGh27YF6AMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/7U1KvzeY+7ZxWFTg3SLWeQlAsRXStGa/WyEx5NIx3EesNxGnf26B MBC1Fe5WD0bSrxH4GZRpOtSqh7ZtdyFuffcJPPB7Wo85dG3NVrnX9IiGCAgaJ9Lr atizbG7v9cjaZ98+Np83ZQvt+D52BdW01bDUTSTHDjIYot5mpKLB1coU+ojqgABL s9PqXrIPkpqjMJSBaXm2mIgkH4Gsp8k5/9AA6gJ647b/AxsE5FE+wzyMl+yoXDcW E4mpR1JXiN+2YKFGwLO62wcvVeHo4kX5U07oiDftHSEygX9ry8Cs+Lgszbc55DKc hEti1gssKW4hpxBWq5F8zMjZuu5FpQYP -----END CERTIFICATE-----Generated at Sat May 17 07:36:34 2025 by rpki-client