$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: s5cfisCbU6MTFN3deFlyJxIhS5wQbrFHxo09h2efNGE= Subject key identifier: 77:F4:7F:EB:91:C8:4F:8F:83:36:20:C0:0A:21:5E:90:17:81:76:81 Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 0562 Signing time: Thu 15 May 2025 00:25:58 +0000 Manifest this update: Thu 15 May 2025 00:25:57 +0000 Manifest next update: Thu 22 May 2025 00:25:57 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: 7GpaYGNRV0xEFDRZdh8RvOdCKbQBLgLVEnAtp+n3MGY=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: xKArmrduSBI+gGo62RSF6mCGFoJkOu3mNzVbjwogvU0=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: FOhpYe5DK9I/QvT8DCyDAdniDFXXS6XAPszrK91CJRI=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: 3dgzTKNADS6dTaZ4Dns/R7NlRBp8ohyzR8flEwmQcfM=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: Mehq2UCt1CiOt2/FTfT15J6Iwk1nsNkmhPQP9ob7BYA=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: JirC+a3hnrfRs218btabHTFrtTd+AmDYvGFRmHD+9Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: May 15 00:25:57 2025 GMT Not After : May 22 00:25:57 2025 GMT Subject: CN=68253495-feb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:ed:fd:8c:cb:9b:54:66:0b:4d:e6:7a:3e: 48:d6:df:7b:48:2a:54:f6:67:f5:cc:1a:f2:11:a7: 61:3a:94:95:5c:f6:29:b2:01:d9:6e:c2:8d:b6:13: 64:c8:18:b7:88:f5:54:1d:ca:28:4c:5a:83:15:46: 26:b0:96:ac:ce:bc:80:4c:1c:56:b2:c0:1d:20:c0: f4:0d:cf:86:d9:ec:77:f4:c1:5a:14:89:48:2b:51: 4c:bd:dd:32:9b:1f:a1:b9:b6:d0:f8:29:f2:7d:f6: 2c:f1:2b:2e:ef:5c:9f:6f:b0:ef:3f:4c:72:54:01: 2c:1a:87:10:e7:d3:f7:92:38:e9:01:70:45:4a:72: 93:b9:e6:7c:19:03:2e:c4:12:91:2e:f1:72:4e:91: 77:2d:46:e9:8d:b8:4e:76:a4:f7:0a:2d:39:c6:e6: 6e:32:44:aa:36:3a:46:1a:6f:6b:4f:ab:6f:e2:24: 6d:29:ca:61:b8:f2:4c:db:10:b5:f5:c7:49:20:5e: b3:45:47:cf:e9:3c:79:15:28:9c:a7:09:70:e1:c9: c1:87:90:a4:d0:e0:5e:47:49:3a:51:62:80:90:e2: 2c:c2:49:59:5d:7e:13:96:7b:d8:88:bb:e2:f1:bc: e5:92:19:ee:21:80:46:9a:98:f6:3d:f0:cc:26:fe: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:7F:EB:91:C8:4F:8F:83:36:20:C0:0A:21:5E:90:17:81:76:81 X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a1:2b:e5:ad:93:9f:21:80:da:b6:6a:f2:07:7e:ed:b2:6b: 65:5c:61:4c:9c:d3:8b:d2:bb:85:76:b1:b0:e4:9e:d4:1f:ac: 11:fa:ca:69:af:5b:99:24:fc:8a:68:44:09:45:55:3b:6c:2a: dc:6b:20:5b:a1:e3:17:56:a7:80:a6:90:b8:0e:70:8c:9b:78: ca:66:d8:0a:ac:ee:9f:5d:3b:ad:ef:7f:6f:91:f0:f3:3f:ef: 70:55:0f:51:a4:da:de:de:70:8b:f3:2c:93:7a:b6:dd:c7:a7: 89:f2:d5:64:02:f1:0e:ed:23:fb:9d:c8:18:fe:aa:11:c3:c0: 3d:b9:c3:12:61:0b:c6:dd:6e:64:61:45:51:a4:f0:68:68:75: 34:3e:22:bf:9e:0f:fe:bf:33:ae:8f:90:ec:64:b1:53:ed:32: a4:e7:d0:67:8e:1d:01:05:db:7f:da:67:87:36:07:37:fc:7b: 64:f4:a0:1f:ec:02:4d:23:42:7a:4d:39:e9:55:7a:f5:7a:86: 75:69:5b:3c:23:44:57:d5:b6:03:36:94:87:f0:15:21:b5:8b: e9:3d:16:14:48:42:eb:b7:40:6b:5c:2b:e0:b5:bf:df:74:f1: 19:2b:fd:21:fa:3e:7e:5e:ab:12:a2:55:db:58:f4:51:4b:c5: dc:b4:e9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUwNTE1MDAyNTU3WhcNMjUwNTIyMDAyNTU3WjAYMRYwFAYD VQQDEw02ODI1MzQ5NS1mZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vrt/YzLm1RmC03mej5I1t97SCpU9mf1zBryEadhOpSVXPYpsgHZbsKNthNk yBi3iPVUHcooTFqDFUYmsJaszryATBxWssAdIMD0Dc+G2ex39MFaFIlIK1FMvd0y mx+hubbQ+CnyffYs8Ssu71yfb7DvP0xyVAEsGocQ59P3kjjpAXBFSnKTueZ8GQMu xBKRLvFyTpF3LUbpjbhOdqT3Ci05xuZuMkSqNjpGGm9rT6tv4iRtKcphuPJM2xC1 9cdJIF6zRUfP6Tx5FSicpwlw4cnBh5Ck0OBeR0k6UWKAkOIswklZXX4TlnvYiLvi 8bzlkhnuIYBGmpj2PfDMJv4VLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf0f+uR yE+PgzYgwAohXpAXgXaBMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAToSvlrZOfIYDatmryB37tsmtlXGFMnNOL0ruFdrGw5J7UH6wR+spp r1uZJPyKaEQJRVU7bCrcayBboeMXVqeAppC4DnCMm3jKZtgKrO6fXTut739vkfDz P+9wVQ9RpNre3nCL8yyTerbdx6eJ8tVkAvEO7SP7ncgY/qoRw8A9ucMSYQvG3W5k YUVRpPBoaHU0PiK/ng/+vzOuj5DsZLFT7TKk59Bnjh0BBdt/2meHNgc3/Htk9KAf 7AJNI0J6TTnpVXr1eoZ1aVs8I0RX1bYDNpSH8BUhtYvpPRYUSELrt0BrXCvgtb/f dPEZK/0h+j5+XqsSolXbWPRRS8XctOn3 -----END CERTIFICATE-----Generated at Fri May 16 18:22:26 2025 by rpki-client