$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: JMI/ei3QEETG1rKGIwrF8ZFkJkBHWXX0b7z0GItmYQY= Subject key identifier: F7:87:08:A9:B1:69:98:36:40:0D:AA:14:EF:EB:4A:7D:B5:2E:BB:62 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B46 Signing time: Fri 16 May 2025 19:21:52 +0000 Manifest this update: Fri 16 May 2025 19:21:52 +0000 Manifest next update: Fri 23 May 2025 19:21:52 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: awEX6+F34mRtEAI3VHRCTO4calyUbMA1gLn51J/Fx50=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: May 16 19:21:52 2025 GMT Not After : May 23 19:21:52 2025 GMT Subject: CN=68279050-ea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:9b:ac:c7:e9:a9:4d:ce:ad:cf:37:6c:ed: b5:62:2f:f4:79:5f:fe:35:72:f8:9c:58:f5:e5:e2: e0:e3:6a:25:81:ea:c9:42:52:9b:ac:6b:11:16:c5: 8e:7a:50:2b:9b:9c:72:a8:c4:2b:eb:c1:bb:2e:3b: cc:01:38:5d:db:be:8a:17:84:5d:91:d8:d6:a0:6e: c9:7a:43:d2:dd:1a:48:81:98:16:83:bc:f1:6f:b4: 1c:2b:2d:1e:09:09:bc:45:3b:18:58:7b:50:c7:ba: e3:da:9b:0e:be:2f:d6:35:e1:22:8b:73:7d:0e:07: 56:47:99:f3:ef:af:53:49:75:92:7b:78:fc:a5:7d: f6:92:56:ac:5d:c3:c0:24:22:c1:11:3b:e0:96:c4: 02:17:c4:34:72:e1:55:fd:04:75:f5:6b:32:9f:c8: aa:a9:df:66:3e:36:14:e3:4a:52:5e:db:ca:3a:a4: 11:6b:04:b6:76:9e:ea:b5:6c:83:5e:5c:52:31:6d: f8:7f:f4:f9:bc:7c:a7:7b:88:e0:53:80:c3:58:34: 50:bd:f2:fa:30:15:a0:c9:a3:a2:78:b8:94:b4:f7: 51:22:8d:80:04:65:72:bc:ac:6e:ee:c9:1b:78:a4: 93:ba:c5:10:30:bc:76:5d:78:e6:bf:51:47:af:6a: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:08:A9:B1:69:98:36:40:0D:AA:14:EF:EB:4A:7D:B5:2E:BB:62 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:45:ed:8e:3e:20:26:fb:95:40:96:1e:3a:08:19:2c:07:04: 23:5f:d6:10:0f:06:05:fd:9d:1c:fc:ba:10:5a:8e:fb:1a:ed: 4e:9f:b9:1d:71:e8:c4:11:11:35:cf:4c:64:b8:2d:fd:30:48: 30:5f:31:4d:42:2f:96:8d:34:3b:76:a5:fd:bb:67:e3:89:dc: 6d:f0:7a:f0:fd:79:aa:52:ad:14:0a:61:3d:78:65:a1:2b:ad: 63:54:bb:6d:bb:20:02:0a:31:7e:a6:1c:77:91:96:8e:6f:9b: 20:65:54:cc:14:35:f0:b3:c6:5d:1e:52:93:e5:84:81:5a:00: ca:e7:bd:12:93:04:7e:82:a9:d2:2a:6c:97:8c:ef:15:f9:7f: 0d:bd:05:4b:db:1f:13:06:fa:f2:55:a5:1a:9c:6a:b0:55:a2: 02:c2:5b:92:08:85:ff:29:4f:87:fb:ed:31:e0:da:97:71:87: e2:bb:20:f4:79:c2:2d:2f:0e:c3:56:aa:30:a9:5a:5d:56:eb: 9e:84:bd:39:91:46:3c:2d:d7:3a:95:df:f4:2a:36:9f:0b:01: bb:cf:13:c2:f7:08:14:97:04:1c:c6:d0:1e:e8:ea:fb:15:6a: 5a:cd:8d:1f:0a:e9:6d:2b:a7:04:83:47:2a:91:50:6a:0e:e9: 80:d9:3f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwNTE2MTkyMTUyWhcNMjUwNTIzMTkyMTUyWjAYMRYwFAYD VQQDEw02ODI3OTA1MC1lYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIKbrMfpqU3Orc83bO21Yi/0eV/+NXL4nFj15eLg42olgerJQlKbrGsRFsWO elArm5xyqMQr68G7LjvMAThd276KF4RdkdjWoG7JekPS3RpIgZgWg7zxb7QcKy0e CQm8RTsYWHtQx7rj2psOvi/WNeEii3N9DgdWR5nz769TSXWSe3j8pX32klasXcPA JCLBETvglsQCF8Q0cuFV/QR19Wsyn8iqqd9mPjYU40pSXtvKOqQRawS2dp7qtWyD XlxSMW34f/T5vHyne4jgU4DDWDRQvfL6MBWgyaOieLiUtPdRIo2ABGVyvKxu7skb eKSTusUQMLx2XXjmv1FHr2oL2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeHCKmx aZg2QA2qFO/rSn21LrtiMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpRe2OPiAm+5VAlh46CBksBwQjX9YQDwYF/Z0c/LoQWo77Gu1On7kd cejEERE1z0xkuC39MEgwXzFNQi+WjTQ7dqX9u2fjidxt8Hrw/XmqUq0UCmE9eGWh K61jVLttuyACCjF+phx3kZaOb5sgZVTMFDXws8ZdHlKT5YSBWgDK570SkwR+gqnS KmyXjO8V+X8NvQVL2x8TBvryVaUanGqwVaICwluSCIX/KU+H++0x4NqXcYfiuyD0 ecItLw7DVqowqVpdVuuehL05kUY8Ldc6ld/0KjafCwG7zxPC9wgUlwQcxtAe6Or7 FWpazY0fCultK6cEg0cqkVBqDumA2T+O -----END CERTIFICATE-----Generated at Sat May 17 15:51:15 2025 by rpki-client