$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: qXPSLzhnBMxV75RrGo7UBvLH30q16ZFZ9Z17IWPdnSk= Subject key identifier: 88:6E:3D:1F:15:4B:A0:08:F3:6A:D1:4A:7F:E5:9D:03:F3:48:00:B1 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: 5D Signing time: Fri 09 May 2025 06:06:12 +0000 Manifest this update: Fri 09 May 2025 06:06:12 +0000 Manifest next update: Fri 16 May 2025 06:06:12 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: 2OO6z2MdKiTOk50zSsIqkCSdcaPJsd2cAAyYLkziF/Q=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: May 9 06:06:12 2025 GMT Not After : May 16 06:06:12 2025 GMT Subject: CN=681d9b54-2737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:cf:5b:82:59:4b:d4:88:19:f5:a8:1f:36: 5a:49:bb:4d:7f:8a:d4:5f:d8:46:4d:3c:0a:00:d6: 9b:59:c7:6a:07:84:66:66:ed:6b:47:f1:88:11:08: a6:94:4e:e1:88:bf:1e:e4:b2:fa:9a:5b:d1:4b:bd: c7:20:91:96:e9:d0:0e:a6:93:3d:b7:b2:4d:ea:13: 83:39:4e:95:74:20:e1:b9:2c:e0:5d:41:8f:eb:ad: bf:49:b8:f7:e1:1e:bf:37:17:8b:c7:16:e3:2c:3e: 17:26:09:f7:89:80:95:08:4e:16:ad:f7:9b:17:ec: b7:45:de:78:7e:da:84:15:84:f8:95:51:68:fb:80: 4e:8a:cc:12:7e:2b:4f:56:57:a5:20:f0:27:49:d5: 80:31:28:e6:6a:ca:58:6e:cc:22:4d:c5:c3:28:6b: aa:b4:5d:60:cb:fc:a5:2b:98:a5:12:d8:96:94:08: 82:f2:3a:35:51:67:c9:2c:bd:eb:9c:d7:53:66:24: 8a:d6:a1:f8:75:bd:2f:a5:16:85:41:53:c3:d4:7f: e0:d1:33:2d:4c:68:8c:a6:60:c3:b4:02:9d:4d:be: c2:8d:a4:14:20:09:68:8d:f4:d5:fa:a9:ce:64:bc: ae:d2:e1:be:2f:98:37:c7:62:04:68:5f:70:b1:20: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6E:3D:1F:15:4B:A0:08:F3:6A:D1:4A:7F:E5:9D:03:F3:48:00:B1 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8e:85:46:6d:ff:1d:da:ad:92:95:3c:4c:b2:c5:f1:22:46: 72:68:57:51:c2:22:6a:98:6e:5a:22:a9:91:eb:cd:26:f1:1a: c2:1f:c8:30:e5:bd:05:cd:ed:d6:fd:12:da:69:e8:c2:0e:45: ab:05:00:ce:1a:72:c6:9f:bf:7c:e6:f8:24:26:2b:07:e6:27: 13:b2:d3:52:4f:33:87:80:04:5c:63:cf:a9:41:41:dc:23:65: 00:3e:ea:02:ca:38:fc:70:29:4c:63:cf:71:2a:41:08:8f:9c: 30:24:46:aa:0d:95:1f:a2:a2:26:aa:9c:ab:83:6b:91:91:6a: 7a:6d:f5:70:c8:4f:75:0e:04:e9:d4:0c:35:4d:3a:74:90:b1: 51:63:e0:0a:a5:e9:fe:b7:d4:88:bd:6b:7c:cc:d3:76:c4:a6: 85:93:5b:41:0f:2b:0e:c9:68:8e:72:b7:7a:bf:aa:93:85:29: b5:ae:5e:b2:0e:8f:ef:81:74:e0:d7:a7:96:a9:50:22:a5:74: 6c:1d:a4:a5:9d:6b:d4:d1:90:41:98:b9:f6:f0:bb:60:ba:16: 2e:30:ad:7d:31:c7:21:aa:07:23:78:56:50:98:88:2b:19:22: 7e:a1:8a:af:bb:5c:5a:0d:c9:fc:c1:f0:dd:d9:11:98:b8:7d: 5f:d4:ac:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEQzRTExMC8GA1UEBRMoMDdGMzFCNDc0NzEzQjNBMTUyQzZBNUY4RjQ4REVEMjA5 N0RDMjQxRjAeFw0yNTA1MDkwNjA2MTJaFw0yNTA1MTYwNjA2MTJaMBgxFjAUBgNV BAMTDTY4MWQ5YjU0LTI3MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPU89bgllL1IgZ9agfNlpJu01/itRf2EZNPAoA1ptZx2oHhGZm7WtH8YgRCKaU TuGIvx7ksvqaW9FLvccgkZbp0A6mkz23sk3qE4M5TpV0IOG5LOBdQY/rrb9JuPfh Hr83F4vHFuMsPhcmCfeJgJUIThat95sX7LdF3nh+2oQVhPiVUWj7gE6KzBJ+K09W V6Ug8CdJ1YAxKOZqylhuzCJNxcMoa6q0XWDL/KUrmKUS2JaUCILyOjVRZ8ksveuc 11NmJIrWofh1vS+lFoVBU8PUf+DRMy1MaIymYMO0Ap1NvsKNpBQgCWiN9NX6qc5k vK7S4b4vmDfHYgRoX3CxIKkpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiG49HxVL oAjzatFKf+WdA/NIALEwHwYDVR0jBBgwFoAUB/MbR0cTs6FSxqX49I3tIJfcJB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRDNFL0JERUU5RTI0OUZE NzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQl9NYlIwY1RzNkZTeHFYNDlJM3RJSmZjSkI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RDNFL0JERUU5RTI0OUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZG U3hxWDQ5STN0SUpmY0pCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+OhUZt/x3arZKVPEyyxfEiRnJoV1HCImqYbloiqZHrzSbxGsIfyDDl vQXN7db9Etpp6MIORasFAM4acsafv3zm+CQmKwfmJxOy01JPM4eABFxjz6lBQdwj ZQA+6gLKOPxwKUxjz3EqQQiPnDAkRqoNlR+ioiaqnKuDa5GRanpt9XDIT3UOBOnU DDVNOnSQsVFj4Aql6f631Ii9a3zM03bEpoWTW0EPKw7JaI5yt3q/qpOFKbWuXrIO j++BdODXp5apUCKldGwdpKWda9TRkEGYufbwu2C6Fi4wrX0xxyGqByN4VlCYiCsZ In6hiq+7XFoNyfzB8N3ZEZi4fV/UrO0= -----END CERTIFICATE-----Generated at Sun May 11 01:08:26 2025 by rpki-client