$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft File: i9g61zjcTFeYTcLssh1ekBm7yMo.mft (raw, json) Hash identifier: YKx2xq1Mh375PrZkwCZjDd3U20N5aoTNuzR4mBrQ4io= Subject key identifier: B9:FF:7D:AC:A0:EE:6B:73:62:08:4B:91:56:C9:6D:92:AA:29:41:EE Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA Certificate issuer: /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Certificate serial: 0AF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft Manifest number: 0AE9 Signing time: Mon 12 May 2025 19:15:24 +0000 Manifest this update: Mon 12 May 2025 19:15:23 +0000 Manifest next update: Mon 19 May 2025 19:15:23 +0000 Files and hashes: 1: i9g61zjcTFeYTcLssh1ekBm7yMo.crl (hash: v8T/cocCEf2w/OK8ZzyQE78KNWf9K9/ceGYz+D2aL6I=) 2: E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa (hash: DzUiLJ+hiXjzOllRaK2tXrYHSzvpJBBPSRK/2a4e0yY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2804 (0xaf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CC94, serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Validity Not Before: May 12 19:15:23 2025 GMT Not After : May 19 19:15:23 2025 GMT Subject: CN=682248cc-c09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:84:fc:7f:4a:01:9e:8c:18:44:f8:d2:1c: 2f:8e:e8:ff:58:87:7c:af:d2:d9:85:64:d6:e9:c6: ef:e5:d3:09:d0:98:21:a4:40:bb:b2:87:81:18:37: ad:19:11:e1:f4:1e:91:d3:0b:47:20:f7:a7:65:4d: 33:4b:79:e9:56:b8:f8:90:11:49:ad:a0:f2:74:22: d7:f2:16:e5:a5:33:38:5e:13:ec:61:f6:b7:b8:68: a8:cf:a1:d2:33:19:02:63:d2:5f:dc:42:4a:d4:01: a8:c5:03:e6:b5:d3:be:72:21:fd:86:45:64:d1:02: 59:f8:ad:f0:9a:34:6e:28:f9:24:e1:12:93:21:91: 26:2c:3e:86:0c:1c:7a:4e:d8:9e:ff:df:af:71:bf: 54:52:b1:8c:34:51:f9:96:e6:5a:c1:bb:13:b5:2d: dc:fd:d4:52:73:38:68:1d:6f:31:8b:03:a1:b9:ca: 33:c4:08:28:8d:37:06:fa:3e:84:11:10:1a:1c:3c: d6:08:59:9c:64:da:57:d7:c8:44:26:dd:33:12:65: 37:36:6d:43:6f:ec:a7:a2:ed:12:a9:dd:36:24:c3: 69:1a:96:84:a3:28:72:b1:ca:32:93:36:d1:62:91: 50:07:da:98:db:d9:84:69:23:bb:46:75:50:69:0a: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FF:7D:AC:A0:EE:6B:73:62:08:4B:91:56:C9:6D:92:AA:29:41:EE X509v3 Authority Key Identifier: keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:42:0b:1f:f8:ff:87:da:2d:4d:f2:83:29:43:b3:9f:f5:11: 28:db:43:42:0b:f3:36:65:bf:b7:46:95:71:b9:5c:34:65:78: c2:38:81:f7:ff:0b:82:e9:97:1e:e6:d1:b1:33:6b:84:cc:b1: e2:b8:24:df:da:c0:9f:7c:f2:8e:f0:39:ae:aa:f0:d3:a7:69: 60:c4:69:92:13:e3:55:9e:d0:fd:2a:a3:b8:d6:b6:0b:07:db: b7:d5:de:92:55:14:26:18:69:e5:c8:8e:44:67:6c:67:12:84: 67:d6:7b:17:9c:1a:13:2a:77:03:31:c9:69:76:28:16:f6:70: 75:8a:c7:5a:e4:34:69:f4:87:88:13:e9:da:b2:98:b6:5f:e9: 44:0d:05:79:85:67:06:62:15:ce:dd:d9:d8:6e:0f:e5:38:c9: 06:9a:01:87:94:ab:cc:a6:4d:b1:30:1e:a4:d7:8a:d1:95:61: 89:20:6a:0a:8b:5b:df:cd:fa:4a:f2:6d:b0:a8:ff:ac:4b:80: 7c:f5:27:3b:83:d3:82:07:90:66:2e:60:79:61:a1:3c:7c:65: 6f:13:4b:22:8f:ef:c1:9b:f7:ae:34:0e:7f:93:fb:5d:a1:c1: 9c:75:38:6b:eb:3f:6a:3e:00:37:2c:2a:1f:7c:70:f8:be:6c: ee:a0:d6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NDOTQxMTAvBgNVBAUTKDhCRDgzQUQ3MzhEQzRDNTc5ODREQzJFQ0IyMUQ1RTkw MTlCQkM4Q0EwHhcNMjUwNTEyMTkxNTIzWhcNMjUwNTE5MTkxNTIzWjAYMRYwFAYD VQQDEw02ODIyNDhjYy1jMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S2E/H9KAZ6MGET40hwvjuj/WId8r9LZhWTW6cbv5dMJ0JghpEC7soeBGDet GRHh9B6R0wtHIPenZU0zS3npVrj4kBFJraDydCLX8hblpTM4XhPsYfa3uGioz6HS MxkCY9Jf3EJK1AGoxQPmtdO+ciH9hkVk0QJZ+K3wmjRuKPkk4RKTIZEmLD6GDBx6 Ttie/9+vcb9UUrGMNFH5luZawbsTtS3c/dRSczhoHW8xiwOhucozxAgojTcG+j6E ERAaHDzWCFmcZNpX18hEJt0zEmU3Nm1Db+ynou0Sqd02JMNpGpaEoyhyscoykzbR YpFQB9qY29mEaSO7RnVQaQoWQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn/fayg 7mtzYghLkVbJbZKqKUHuMB8GA1UdIwQYMBaAFIvYOtc43ExXmE3C7LIdXpAZu8jK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0M5NC82NkRFQkU2NDQ3 RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RGZVlUY0xzc2gxZWtCbTd5 TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5ZzYxempjVEZlWVRjTHNzaDFla0JtN3lNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0M5NC82NkRFQkU2NDQ3RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RG ZVlUY0xzc2gxZWtCbTd5TW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Qgsf+P+H2i1N8oMpQ7Of9REo20NCC/M2Zb+3RpVxuVw0ZXjCOIH3 /wuC6Zce5tGxM2uEzLHiuCTf2sCffPKO8DmuqvDTp2lgxGmSE+NVntD9KqO41rYL B9u31d6SVRQmGGnlyI5EZ2xnEoRn1nsXnBoTKncDMclpdigW9nB1isda5DRp9IeI E+naspi2X+lEDQV5hWcGYhXO3dnYbg/lOMkGmgGHlKvMpk2xMB6k14rRlWGJIGoK i1vfzfpK8m2wqP+sS4B89Sc7g9OCB5BmLmB5YaE8fGVvE0sij+/Bm/euNA5/k/td ocGcdThr6z9qPgA3LCoffHD4vmzuoNYx -----END CERTIFICATE-----Generated at Mon May 12 22:43:21 2025 by rpki-client