$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: nqzWn/gcje7963ajYnL8V9/zXS7Td8OHhJM1lqPquKE= Subject key identifier: DF:31:AD:00:24:78:44:6E:CC:F1:5E:B8:F1:98:6F:DD:F8:1D:E9:E3 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 057C Signing time: Sat 10 May 2025 22:56:59 +0000 Manifest this update: Sat 10 May 2025 22:56:58 +0000 Manifest next update: Sat 17 May 2025 22:56:58 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 0gmD/L4y/u6nhZlRB95AWFVjUPUgzdlQpOY9A08ce1c=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: May 10 22:56:58 2025 GMT Not After : May 17 22:56:58 2025 GMT Subject: CN=681fd9ba-63cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:7c:b6:66:1c:39:71:75:88:7e:70:37:ec: b3:65:bd:8b:1c:60:77:85:cb:96:d0:4c:70:0f:a1: f1:54:da:f5:c1:b3:ed:53:bb:6d:c9:48:3f:04:09: 3e:4d:60:a7:24:4f:21:cb:b5:a1:b7:31:87:0d:6c: 59:b0:14:9b:15:26:47:fb:5e:25:6d:61:eb:4d:1b: b2:32:27:cb:b2:59:9e:44:6d:b2:c2:fc:1f:e8:bb: 73:0c:a7:36:79:fa:87:f6:f0:9e:fc:a1:af:7d:8f: 18:29:de:d4:e3:6d:96:f4:4f:5e:fa:95:5e:e9:2b: bf:ff:3c:6b:7d:8f:d5:31:40:62:4e:51:d9:e3:43: 96:3a:41:ae:49:c5:1b:a0:3b:70:e5:8d:cd:23:a3: b5:44:09:1f:c0:84:2d:60:15:38:f4:e7:3c:4f:71: 97:fd:ca:b4:27:5d:22:81:1c:63:52:1d:6b:bc:db: a4:d3:12:3f:fd:35:07:14:5e:85:93:69:92:9a:93: 42:96:94:a4:1c:81:56:c7:c8:d5:9e:9c:5c:dc:df: 9c:e3:95:06:dd:8c:21:89:86:4e:02:8c:01:45:6c: 6e:59:9c:69:9e:b6:d8:02:24:c4:fe:00:8a:4e:49: 03:83:3f:fe:8b:31:6c:e4:01:b9:1d:4f:d3:d0:bb: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:31:AD:00:24:78:44:6E:CC:F1:5E:B8:F1:98:6F:DD:F8:1D:E9:E3 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6d:ae:2f:71:93:53:7a:99:01:87:9e:d1:c2:a4:2b:f9:43: 5e:97:66:e3:7e:b0:1f:1b:7a:c4:a3:7e:ac:7f:91:b4:8b:41: 34:f1:65:57:88:ba:80:dc:fa:ca:94:00:b3:b5:9c:61:db:70: 80:0e:5f:44:e6:7f:40:6c:ec:2f:47:2e:ba:f4:00:fe:dc:2f: b2:f6:0e:00:b6:19:a5:c9:e8:e3:bf:82:cf:bf:fc:c2:76:66: bc:54:98:7e:09:d8:5c:a4:c2:d8:da:77:b6:6e:64:21:c7:3e: 5d:28:49:34:42:fa:03:70:a3:0f:77:05:cc:e5:36:09:d7:6b: e1:93:1a:b7:c8:eb:20:43:40:6e:62:75:4b:17:55:3a:d6:0f: f2:b4:df:51:9a:4f:97:36:4f:a2:1d:07:bc:eb:64:c5:46:31: 1f:1b:6b:0a:4e:25:aa:18:1f:69:e7:3a:5c:64:05:f9:44:35: 4c:2a:9b:8c:fa:da:77:57:c2:20:31:91:00:32:f8:91:82:b0: 6e:a5:2d:eb:07:93:90:3b:a2:a1:ef:18:54:80:6c:74:b6:28: ff:c4:57:4d:d5:bb:38:70:63:8e:8f:30:a1:d6:cb:91:61:fd: 6d:6c:ef:24:1e:5d:45:a3:e1:0b:bf:22:e4:4b:f9:32:63:06: 6c:55:e9:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUwNTEwMjI1NjU4WhcNMjUwNTE3MjI1NjU4WjAYMRYwFAYD VQQDEw02ODFmZDliYS02M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraJ8tmYcOXF1iH5wN+yzZb2LHGB3hcuW0ExwD6HxVNr1wbPtU7ttyUg/BAk+ TWCnJE8hy7WhtzGHDWxZsBSbFSZH+14lbWHrTRuyMifLslmeRG2ywvwf6LtzDKc2 efqH9vCe/KGvfY8YKd7U422W9E9e+pVe6Su//zxrfY/VMUBiTlHZ40OWOkGuScUb oDtw5Y3NI6O1RAkfwIQtYBU49Oc8T3GX/cq0J10igRxjUh1rvNuk0xI//TUHFF6F k2mSmpNClpSkHIFWx8jVnpxc3N+c45UG3YwhiYZOAowBRWxuWZxpnrbYAiTE/gCK TkkDgz/+izFs5AG5HU/T0LviewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8xrQAk eERuzPFeuPGYb934HenjMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ba4vcZNTepkBh57RwqQr+UNel2bjfrAfG3rEo36sf5G0i0E08WVX iLqA3PrKlACztZxh23CADl9E5n9AbOwvRy669AD+3C+y9g4Athmlyejjv4LPv/zC dma8VJh+CdhcpMLY2ne2bmQhxz5dKEk0QvoDcKMPdwXM5TYJ12vhkxq3yOsgQ0Bu YnVLF1U61g/ytN9Rmk+XNk+iHQe862TFRjEfG2sKTiWqGB9p5zpcZAX5RDVMKpuM +tp3V8IgMZEAMviRgrBupS3rB5OQO6Kh7xhUgGx0tij/xFdN1bs4cGOOjzCh1suR Yf1tbO8kHl1Fo+ELvyLkS/kyYwZsVen9 -----END CERTIFICATE-----Generated at Sun May 11 03:42:21 2025 by rpki-client