$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: 1UyPKPK8KN6/1KbhgEshfXAbiutLhqYLQ1olDJ3iQPo= Subject key identifier: 7D:25:23:32:DF:C9:F6:12:73:32:8F:F2:32:D5:C1:6D:D3:F0:85:6D Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 043F Signing time: Tue 13 May 2025 00:06:30 +0000 Manifest this update: Tue 13 May 2025 00:06:30 +0000 Manifest next update: Tue 20 May 2025 00:06:30 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: 5WdRz+hMoxK39InOFErLSpHGeQJaD+LY2ZAPHbk6akc=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: May 13 00:06:30 2025 GMT Not After : May 20 00:06:30 2025 GMT Subject: CN=68228d06-e646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:ed:09:3d:80:dd:f4:26:e4:fe:04:ff:ea: 9c:ad:35:11:d4:f1:3f:de:00:97:8d:51:c3:85:aa: c4:30:6f:aa:2d:72:c9:67:0a:29:a5:68:d9:be:5c: 91:5e:6e:be:5b:72:6d:1c:3f:93:cb:6d:3f:a0:09: 8b:a6:d2:28:7d:47:61:31:f8:11:36:e9:5a:05:71: e3:ad:f8:02:2a:2e:ac:22:fc:42:f9:48:64:30:e9: 81:f9:bd:c1:50:6f:f7:15:3f:3f:1f:56:7c:0b:7f: a8:52:e5:44:04:f0:fb:56:e7:7c:0d:36:43:3c:fd: df:e2:b2:08:17:06:7a:a2:66:74:1f:bd:10:73:08: fd:6d:e3:2b:6e:2a:d3:48:f4:fc:83:6c:45:e0:6b: 0e:79:c7:45:19:02:08:dd:cb:e5:26:11:c6:0e:9c: 7c:8f:fd:4b:9d:23:fb:bf:7e:94:f5:1c:aa:72:d2: c3:27:05:19:d1:d0:ea:cc:4d:52:0a:10:a1:60:49: 3a:7a:96:6c:02:a4:c6:54:f8:5d:7d:9c:9c:f2:7f: fb:67:b2:51:bf:2f:a3:ea:8b:0d:57:d3:38:a8:bc: 6d:fc:00:8e:98:87:99:85:97:18:a2:04:b5:32:25: 3c:1d:60:27:88:59:e6:db:af:7e:04:d7:8d:a9:c1: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:23:32:DF:C9:F6:12:73:32:8F:F2:32:D5:C1:6D:D3:F0:85:6D X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:e6:2f:49:87:ca:bf:73:de:9b:7e:aa:0e:43:ac:0d:75:bc: 29:1f:25:9a:2b:ae:39:44:11:10:93:ae:02:a4:72:96:d6:5c: 98:36:be:44:cc:2e:ae:c1:9a:0c:c1:a5:58:3d:79:e5:a7:cf: 16:18:63:db:62:d6:6a:7b:85:17:59:e9:75:bb:e8:28:e9:c3: 89:15:f9:46:1c:98:31:fa:a0:f2:5c:f4:54:d2:a3:77:7b:30: ab:04:5c:59:6a:df:dc:1d:0f:01:66:73:7c:be:68:76:46:43: 93:b0:ee:16:97:c9:18:0e:7b:18:b8:eb:42:00:16:cd:af:7f: b0:16:98:f6:00:c2:3c:eb:d9:11:4f:44:a1:0d:9a:f4:cf:bf: b2:2d:2b:a6:27:aa:32:31:97:e5:65:76:7c:9c:7e:8c:a0:6d: c4:e9:26:c3:87:c2:88:90:93:5c:e1:57:46:74:f8:a4:de:a4: c7:e6:0a:e2:7c:a0:0d:0d:f4:e3:03:54:f6:c5:8c:c8:9d:d0: ed:d2:b6:eb:72:50:4b:01:09:c2:ab:be:a8:f9:6f:8c:5f:b9: 43:f0:07:14:86:09:f2:a2:2d:ac:26:dd:8f:b7:e3:35:cf:61: a7:1a:28:c1:cb:63:a0:c3:9f:a1:8d:a3:32:67:d7:43:f6:fc: ec:bf:99:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUwNTEzMDAwNjMwWhcNMjUwNTIwMDAwNjMwWjAYMRYwFAYD VQQDEw02ODIyOGQwNi1lNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rLtCT2A3fQm5P4E/+qcrTUR1PE/3gCXjVHDharEMG+qLXLJZwoppWjZvlyR Xm6+W3JtHD+Ty20/oAmLptIofUdhMfgRNulaBXHjrfgCKi6sIvxC+UhkMOmB+b3B UG/3FT8/H1Z8C3+oUuVEBPD7Vud8DTZDPP3f4rIIFwZ6omZ0H70Qcwj9beMrbirT SPT8g2xF4GsOecdFGQII3cvlJhHGDpx8j/1LnSP7v36U9RyqctLDJwUZ0dDqzE1S ChChYEk6epZsAqTGVPhdfZyc8n/7Z7JRvy+j6osNV9M4qLxt/ACOmIeZhZcYogS1 MiU8HWAniFnm269+BNeNqcEPhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0lIzLf yfYSczKP8jLVwW3T8IVtMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC5i9Jh8q/c96bfqoOQ6wNdbwpHyWaK645RBEQk64CpHKW1lyYNr5E zC6uwZoMwaVYPXnlp88WGGPbYtZqe4UXWel1u+go6cOJFflGHJgx+qDyXPRU0qN3 ezCrBFxZat/cHQ8BZnN8vmh2RkOTsO4Wl8kYDnsYuOtCABbNr3+wFpj2AMI869kR T0ShDZr0z7+yLSumJ6oyMZflZXZ8nH6MoG3E6SbDh8KIkJNc4VdGdPik3qTH5gri fKANDfTjA1T2xYzIndDt0rbrclBLAQnCq76o+W+MX7lD8AcUhgnyoi2sJt2Pt+M1 z2GnGijBy2Ogw5+hjaMyZ9dD9vzsv5nG -----END CERTIFICATE-----Generated at Wed May 14 07:18:07 2025 by rpki-client