$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: 71kkVgXbv8XMbqKPrQzQMB7As1+5Ctv5k54znj/aJdY= Subject key identifier: F4:DB:74:74:B5:9E:70:59:00:AD:3D:9C:89:0D:ED:4B:23:63:7C:E1 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 0617 Signing time: Thu 08 May 2025 22:39:15 +0000 Manifest this update: Thu 08 May 2025 22:39:15 +0000 Manifest next update: Thu 15 May 2025 22:39:15 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: 66lM0kT/VjHy5Smp6J5q3wmr/jdTJWufLNiQWpusuBc=) 2: D043FFB2EEEA11EF8476F316C4F9AE02.roa (hash: 2LmuP3C8i2g82+GxEzyhXfhPVuIYh5+gy6RWprCcpgs=) 3: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (hash: DVBw64dsT56+0QYycGeLUBxP/l2bdU+aNtZ1EMIv6Js=) 4: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: May 8 22:39:15 2025 GMT Not After : May 15 22:39:15 2025 GMT Subject: CN=681d3293-d984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:11:36:ae:37:83:ef:e2:95:72:cb:4b:6e: 7e:20:68:40:60:4f:db:48:b3:02:9b:b2:bf:3d:b4: e9:2d:7c:55:58:23:da:31:54:91:c3:9e:57:89:67: 64:f2:c3:c2:f7:47:06:ec:7d:69:35:5f:17:30:ad: 4a:db:4b:2f:f7:9f:4b:5f:92:6e:3b:1a:d5:52:7e: 16:4f:6c:96:9c:a2:3a:cb:d6:3c:7c:e6:02:5b:6e: 8c:2b:79:c4:c9:f9:54:e3:b7:4b:b1:9e:a0:bb:0d: f3:00:69:65:1b:e5:bc:b4:b3:a9:26:d2:9b:8f:62: 00:e5:0d:19:58:e8:83:ac:33:46:7c:96:cb:0b:83: cf:d9:c7:4b:9c:46:60:db:a2:62:d8:ef:cb:39:be: 9a:6e:d6:b1:03:21:66:33:21:17:66:53:66:0a:df: 66:e9:f6:5a:d1:45:ab:b3:95:77:86:40:9e:ba:ec: 0b:28:f3:6b:99:3f:ae:6b:73:fd:43:7e:93:82:04: 00:3a:9a:bb:08:81:3d:88:7c:65:a2:10:92:67:0b: 80:f2:3f:e9:c0:fd:d9:72:81:c2:50:e9:8a:1b:16: 8b:58:b6:bb:d5:d7:87:d9:60:64:40:41:04:02:2a: 68:65:82:4e:39:f2:0b:c2:5b:bb:70:6f:9f:d9:03: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:74:74:B5:9E:70:59:00:AD:3D:9C:89:0D:ED:4B:23:63:7C:E1 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:54:7b:44:c0:2e:4d:e2:d6:97:f7:17:b8:79:e7:42:d3:21: af:6e:93:b8:9b:c5:a9:24:8f:b2:e6:51:a1:55:4b:40:0a:36: cb:f4:f1:59:6c:b9:15:ea:a1:a6:07:61:cc:1c:59:b5:0f:99: f7:62:5f:df:bf:f7:1e:fc:da:81:f7:32:bb:48:d6:32:02:2d: 26:db:96:00:3d:84:bf:b1:03:5c:6d:ab:2f:0f:f1:39:4b:63: 4c:e6:e4:e5:02:94:04:0a:6b:04:35:86:9e:0f:0d:65:c7:4c: b3:54:ec:11:61:14:1c:e4:d0:e9:40:ba:29:f5:95:8f:d5:bb: 69:ef:5b:9e:78:6b:39:15:30:c5:a3:f2:55:20:d0:b3:84:c1: 49:8b:91:56:a4:90:87:0a:34:ba:e0:de:9d:1c:88:46:58:66: 10:54:56:61:42:2c:fb:8a:f3:3c:be:25:0c:d3:55:0c:9a:97: 46:fe:87:56:54:6e:93:37:cc:ee:a0:c3:6a:80:7d:25:78:05: e1:7b:3e:ec:2c:7f:ba:8a:df:e2:42:67:cb:85:bc:9e:fe:f4: 27:b9:d0:a1:f1:86:52:89:6f:ad:72:e5:97:c2:48:c3:82:ff: 58:8d:3e:f7:26:36:21:40:f7:b0:33:29:cd:bc:06:6d:a5:1f: fc:23:63:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUwNTA4MjIzOTE1WhcNMjUwNTE1MjIzOTE1WjAYMRYwFAYD VQQDEw02ODFkMzI5My1kOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2noRNq43g+/ilXLLS25+IGhAYE/bSLMCm7K/PbTpLXxVWCPaMVSRw55XiWdk 8sPC90cG7H1pNV8XMK1K20sv959LX5JuOxrVUn4WT2yWnKI6y9Y8fOYCW26MK3nE yflU47dLsZ6guw3zAGllG+W8tLOpJtKbj2IA5Q0ZWOiDrDNGfJbLC4PP2cdLnEZg 26Ji2O/LOb6abtaxAyFmMyEXZlNmCt9m6fZa0UWrs5V3hkCeuuwLKPNrmT+ua3P9 Q36TggQAOpq7CIE9iHxlohCSZwuA8j/pwP3ZcoHCUOmKGxaLWLa71deH2WBkQEEE AipoZYJOOfILwlu7cG+f2QPU2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTbdHS1 nnBZAK09nIkN7UsjY3zhMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVHtEwC5N4taX9xe4eedC0yGvbpO4m8WpJI+y5lGhVUtACjbL9PFZ bLkV6qGmB2HMHFm1D5n3Yl/fv/ce/NqB9zK7SNYyAi0m25YAPYS/sQNcbasvD/E5 S2NM5uTlApQECmsENYaeDw1lx0yzVOwRYRQc5NDpQLop9ZWP1btp71ueeGs5FTDF o/JVINCzhMFJi5FWpJCHCjS64N6dHIhGWGYQVFZhQiz7ivM8viUM01UMmpdG/odW VG6TN8zuoMNqgH0leAXhez7sLH+6it/iQmfLhbye/vQnudCh8YZSiW+tcuWXwkjD gv9YjT73JjYhQPewMynNvAZtpR/8I2NC -----END CERTIFICATE-----Generated at Sat May 10 02:20:40 2025 by rpki-client