$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: 7oSaspSJD+pQve2YB2kCvYh0fzUQjnlKPxqkGDA8dEs= Subject key identifier: F0:D5:E5:C9:BC:06:EB:0C:B3:F2:2E:37:A5:84:9B:95:D3:A5:E4:09 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 34FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 34B1 Signing time: Mon 12 May 2025 14:32:16 +0000 Manifest this update: Mon 12 May 2025 14:32:15 +0000 Manifest next update: Mon 19 May 2025 14:32:15 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: K/nnMXaksq+xva4TpFoEi4CiknBm3uxoBoPA6foxVnY=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: UAdWkh5fwATHMmIyVhd7P9Q5bEUDKKzkNfodKXfZ52I=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: NQGk9VrpAXTZXq5SUwR5lBrzM7K1d06qPjVq8qLZu/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13566 (0x34fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: May 12 14:32:15 2025 GMT Not After : May 19 14:32:15 2025 GMT Subject: CN=6822066f-d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:95:46:2d:e4:27:a8:6b:22:b1:5b:71:82: 20:5a:97:75:61:f0:e0:04:e3:95:63:75:a0:37:6e: 06:c8:b9:1f:b5:29:f0:cd:d6:bd:94:40:82:cb:1b: 2d:ad:7a:9e:c9:86:1c:a0:67:ca:b9:73:af:73:a4: 21:e1:36:dd:82:b4:9e:51:73:8f:5b:dd:49:65:77: b6:bd:55:99:4a:8a:d4:a2:b3:b2:92:ce:66:03:f9: 4b:b8:7a:d0:fe:30:00:a3:88:f3:47:1b:d5:6d:ac: 1d:c6:92:48:67:c0:e8:b8:9e:95:06:59:6e:28:e3: 6a:88:02:22:ce:46:ab:6b:94:09:7c:e7:59:08:cb: d0:f1:4e:c4:36:31:a4:d9:f7:10:51:d8:94:a7:34: 25:b6:f6:f4:1f:61:07:eb:2b:a1:7e:b3:bf:32:43: d0:ee:36:22:24:1f:5c:7d:db:37:61:32:70:8d:8f: b6:bf:34:53:ed:d3:33:98:7b:2f:95:28:20:d3:4e: f0:c9:09:5c:a9:c5:0c:8c:27:98:d5:dd:1b:bf:35: f0:82:c2:60:4b:34:53:b9:3b:90:1a:a6:89:28:05: 8b:c6:d3:97:27:0f:a2:05:24:73:fd:00:00:e5:cd: 94:78:5e:32:c2:14:dd:da:65:20:e1:94:3c:1c:fb: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D5:E5:C9:BC:06:EB:0C:B3:F2:2E:37:A5:84:9B:95:D3:A5:E4:09 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b2:80:ed:eb:39:9b:25:82:40:bc:3e:44:7f:2f:1a:1f:81: c7:bc:ef:7b:31:49:45:e7:92:7b:e5:06:47:a2:aa:17:d1:a9: 2a:59:0f:4e:a6:ef:4c:68:36:88:34:53:b6:20:da:f8:27:3d: 21:46:64:47:49:94:5b:c1:46:2c:ff:bc:1d:66:c4:d9:22:8c: 65:41:fe:9d:41:79:c7:83:66:7d:25:14:e5:50:85:33:c4:09: 59:c9:96:56:cd:4a:27:25:32:9a:dc:ad:0c:a4:d7:26:dc:71: ba:92:bb:5b:e9:a8:e1:8a:da:32:9b:f9:3b:79:a5:a8:ad:38: fe:4b:ed:9e:fb:ac:96:5a:72:6d:a7:17:4a:8d:ed:7c:dd:94: e5:13:94:37:3f:d8:ac:96:66:65:22:fd:f6:ed:b3:de:4d:5c: 88:fb:4a:56:ea:50:16:58:ed:b5:37:7a:fe:25:0d:ab:1a:f1: fd:4a:80:e7:9a:d6:93:1d:cd:67:5a:57:98:6f:92:d2:6c:a0: a9:30:61:ce:74:57:60:f4:f1:0d:5b:f5:56:02:df:65:ae:b0: 8e:da:e9:66:7c:80:41:b4:e9:9a:f8:4d:72:88:1f:ef:a0:55: 9c:a1:5b:32:72:0e:f3:3f:9e:78:06:6e:ed:c7:51:70:da:a9: b5:16:f2:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjUwNTEyMTQzMjE1WhcNMjUwNTE5MTQzMjE1WjAYMRYwFAYD VQQDEw02ODIyMDY2Zi1kMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEKVRi3kJ6hrIrFbcYIgWpd1YfDgBOOVY3WgN24GyLkftSnwzda9lECCyxst rXqeyYYcoGfKuXOvc6Qh4TbdgrSeUXOPW91JZXe2vVWZSorUorOyks5mA/lLuHrQ /jAAo4jzRxvVbawdxpJIZ8DouJ6VBlluKONqiAIizkara5QJfOdZCMvQ8U7ENjGk 2fcQUdiUpzQltvb0H2EH6yuhfrO/MkPQ7jYiJB9cfds3YTJwjY+2vzRT7dMzmHsv lSgg007wyQlcqcUMjCeY1d0bvzXwgsJgSzRTuTuQGqaJKAWLxtOXJw+iBSRz/QAA 5c2UeF4ywhTd2mUg4ZQ8HPuhGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDV5cm8 BusMs/IuN6WEm5XTpeQJMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnsoDt6zmbJYJAvD5Efy8aH4HHvO97MUlF55J75QZHoqoX0akqWQ9O pu9MaDaINFO2INr4Jz0hRmRHSZRbwUYs/7wdZsTZIoxlQf6dQXnHg2Z9JRTlUIUz xAlZyZZWzUonJTKa3K0MpNcm3HG6krtb6ajhitoym/k7eaWorTj+S+2e+6yWWnJt pxdKje183ZTlE5Q3P9islmZlIv327bPeTVyI+0pW6lAWWO21N3r+JQ2rGvH9SoDn mtaTHc1nWleYb5LSbKCpMGHOdFdg9PENW/VWAt9lrrCO2ulmfIBBtOma+E1yiB/v oFWcoVsycg7zP554Bm7tx1Fw2qm1FvJZ -----END CERTIFICATE-----Generated at Tue May 13 08:39:34 2025 by rpki-client