$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: o62Mrrm6MxArcuC8S6ALEswbOw+1OT8ZOkREhGnZ41Y= Subject key identifier: 69:7A:FC:AF:3C:F4:F0:27:D4:F2:CB:55:C0:C1:33:4D:8B:2B:1E:5D Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1BCD Signing time: Fri 16 May 2025 16:26:48 +0000 Manifest this update: Fri 16 May 2025 16:26:48 +0000 Manifest next update: Fri 23 May 2025 16:26:48 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: uxUWpwEtxVUyezvb7M+ZYWCgOqK47YgLRiaz8v1U6r8=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7129 (0x1bd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: May 16 16:26:48 2025 GMT Not After : May 23 16:26:48 2025 GMT Subject: CN=68276748-a42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:07:18:7a:a8:da:78:55:fb:3e:23:07:9f: c4:3a:df:8b:08:f0:54:a3:e6:72:79:17:9e:d8:d6: da:a1:a9:ea:f2:71:0f:71:ad:3b:58:ce:d3:46:14: 9f:c4:31:d3:db:7d:37:c2:a5:e7:57:a7:7b:62:7d: 60:16:d1:6c:6a:fb:dc:ce:64:60:50:f6:b1:c3:df: ea:55:ea:e8:c3:3c:42:5b:13:56:9d:3b:85:10:39: fd:9f:17:7d:b9:77:ae:af:d6:b6:a0:bc:f9:53:d4: 77:cb:19:b7:1e:00:de:41:46:2b:b8:fa:1a:0a:3a: 14:1b:04:20:4a:b1:18:3f:90:7f:85:88:49:4b:7a: c2:0c:94:e0:9c:12:15:64:74:c1:49:dd:74:a0:fb: 3c:80:cc:c7:c9:38:e7:c0:4c:bb:a5:d1:cd:e5:cb: 93:f9:38:c2:da:9f:87:de:ee:ab:41:30:df:a0:32: c6:69:fb:af:1f:b1:79:b5:31:38:75:f2:af:be:64: 7f:1c:2d:34:aa:83:f5:ca:42:bf:1d:4f:37:18:22: 33:d9:3c:e7:2e:ac:82:cb:44:c2:76:e1:3e:d8:3e: 52:8b:74:30:83:67:cc:4f:79:ce:17:fc:55:a9:b5: 08:bc:45:92:f0:b6:7a:e3:ed:28:27:49:7c:8f:5f: 18:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7A:FC:AF:3C:F4:F0:27:D4:F2:CB:55:C0:C1:33:4D:8B:2B:1E:5D X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a8:cc:09:be:d0:04:7b:92:c9:67:55:f4:44:3a:8c:c8:ec: 6f:30:f3:a2:b5:92:03:9a:a6:29:aa:c9:fc:50:1b:45:22:82: 2a:79:d0:cd:3b:3e:9b:87:26:eb:04:51:12:7f:09:ee:33:50: 76:dd:e5:81:19:31:3d:cb:7c:f8:fa:42:55:1d:67:65:80:4d: 45:50:6f:6e:c7:75:36:6b:84:d0:65:49:8b:01:bb:31:e1:fc: 8b:aa:83:12:43:f1:1f:c3:41:24:97:24:c5:4d:ab:60:cd:4e: 24:27:94:72:1b:4f:bb:3f:69:60:bd:dd:9b:b2:b4:94:ef:d5: f4:8c:a6:6e:df:82:32:6d:7b:02:77:f9:94:92:21:a9:d4:b6: 15:1b:3e:60:25:12:df:cf:a1:34:6a:35:b4:ea:ed:18:6f:97: 90:2f:c9:e5:94:c9:0c:96:7f:35:4c:b6:7d:08:e1:8a:80:1a: e0:ed:0d:fa:54:f9:5a:0b:38:03:21:71:26:5f:2d:53:35:4a: c6:78:76:7f:88:9a:77:4f:a3:c0:53:ab:de:22:05:9c:ed:55: 9c:25:01:c5:e5:2c:bf:5f:74:7a:9d:25:1f:f1:f7:5a:17:e5: a1:8d:5d:b5:51:81:10:5d:18:0c:8d:94:2a:de:8b:4c:93:b0: 63:f1:bb:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjUwNTE2MTYyNjQ4WhcNMjUwNTIzMTYyNjQ4WjAYMRYwFAYD VQQDEw02ODI3Njc0OC1hNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfEHGHqo2nhV+z4jB5/EOt+LCPBUo+ZyeRee2Nbaoanq8nEPca07WM7TRhSf xDHT2303wqXnV6d7Yn1gFtFsavvczmRgUPaxw9/qVerowzxCWxNWnTuFEDn9nxd9 uXeur9a2oLz5U9R3yxm3HgDeQUYruPoaCjoUGwQgSrEYP5B/hYhJS3rCDJTgnBIV ZHTBSd10oPs8gMzHyTjnwEy7pdHN5cuT+TjC2p+H3u6rQTDfoDLGafuvH7F5tTE4 dfKvvmR/HC00qoP1ykK/HU83GCIz2TznLqyCy0TCduE+2D5Si3Qwg2fMT3nOF/xV qbUIvEWS8LZ64+0oJ0l8j18YYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl6/K88 9PAn1PLLVcDBM02LKx5dMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdqMwJvtAEe5LJZ1X0RDqMyOxvMPOitZIDmqYpqsn8UBtFIoIqedDN Oz6bhybrBFESfwnuM1B23eWBGTE9y3z4+kJVHWdlgE1FUG9ux3U2a4TQZUmLAbsx 4fyLqoMSQ/Efw0EklyTFTatgzU4kJ5RyG0+7P2lgvd2bsrSU79X0jKZu34IybXsC d/mUkiGp1LYVGz5gJRLfz6E0ajW06u0Yb5eQL8nllMkMln81TLZ9COGKgBrg7Q36 VPlaCzgDIXEmXy1TNUrGeHZ/iJp3T6PAU6veIgWc7VWcJQHF5Sy/X3R6nSUf8fda F+WhjV21UYEQXRgMjZQq3otMk7Bj8bvx -----END CERTIFICATE-----Generated at Fri May 16 22:35:35 2025 by rpki-client