$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json) Hash identifier: edURXSkVPDguP6RSF38XM1BCfVVKL/WkbIvG3afoNCA= Subject key identifier: A7:6E:A3:62:B9:B3:EC:12:D8:B4:8D:6A:75:EB:87:FF:F8:0D:44:9C Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Certificate serial: 0EB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft Manifest number: 0EA4 Signing time: Wed 14 May 2025 17:48:42 +0000 Manifest this update: Wed 14 May 2025 17:48:42 +0000 Manifest next update: Wed 21 May 2025 17:48:42 +0000 Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: NS7FLQ8uoeOwhz4yQzYevv/TEMhbX73ombtyymII/1g=) 2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3761 (0xeb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9 Validity Not Before: May 14 17:48:42 2025 GMT Not After : May 21 17:48:42 2025 GMT Subject: CN=6824d77a-dd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:5b:5e:7b:1f:9d:27:2a:96:b9:5b:3e:1d: e7:60:87:58:c1:dc:b1:74:fa:08:68:e9:95:08:45: 08:4e:f7:68:e3:f0:23:7d:c5:c6:23:b2:2f:12:de: f4:bd:4e:4b:20:0c:ea:a6:95:b9:03:34:b5:c7:47: bf:dc:60:86:8f:6d:78:fd:a1:a2:b8:44:16:4d:f6: cc:e9:0b:26:42:fe:e7:1a:a9:0f:93:a8:42:c7:27: d3:a3:99:b4:ee:54:8e:d1:25:cc:47:df:e1:11:25: d3:06:67:f9:b8:a5:e4:42:78:20:9f:7b:b2:e1:60: d3:bf:f3:e6:6d:57:f0:da:bf:85:91:ae:cb:44:fc: 80:64:3c:fe:1f:21:4c:7d:ba:e6:f1:ce:3d:9b:47: 02:88:3f:4f:f4:b6:dd:81:37:e1:f9:08:12:fb:ef: 0a:ac:c5:2b:60:2d:9a:43:70:68:50:ec:97:0e:7f: bd:5c:a2:85:a9:77:5a:0b:7c:80:ff:00:67:7d:9e: b4:f3:57:4a:e4:87:41:bd:b8:c2:78:d5:ae:b0:b9: 11:5d:14:17:37:41:a0:d0:22:93:d5:ed:8e:37:98: 64:4d:5b:61:f4:52:6d:73:1b:65:78:93:c1:94:56: 96:39:ad:09:ea:cc:fe:84:6d:07:d3:a6:6a:7a:d3: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6E:A3:62:B9:B3:EC:12:D8:B4:8D:6A:75:EB:87:FF:F8:0D:44:9C X509v3 Authority Key Identifier: keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:af:98:06:21:1e:35:a4:8d:e5:bc:e4:19:2a:6d:cf:92:27: 70:d2:c1:7b:e1:75:96:96:6f:a2:00:3f:b3:34:95:55:e6:0c: 3c:6c:10:f3:d1:1e:9d:8d:0f:2a:4e:64:43:d4:09:d8:d7:ee: 91:0d:28:3c:0e:8f:2b:10:14:66:18:e0:db:b4:1f:d8:76:4b: 28:f1:c1:1d:8b:c2:a4:27:f2:2c:a3:e7:09:46:df:4e:be:a3: 1d:96:e4:35:f9:aa:c1:ca:6e:4c:35:85:a1:ca:b9:d0:40:f1: c4:37:e5:e1:bd:bb:65:0f:d3:79:ed:57:d6:7e:51:4d:10:da: 95:cd:e4:90:35:c4:1e:79:a3:47:9c:c0:9b:41:61:c4:21:2d: 48:b9:12:e6:c9:d7:35:39:38:79:ee:94:95:27:51:83:fa:c3: 9f:23:db:8e:e0:14:99:38:e3:1b:3f:f6:71:e7:8a:27:b3:39: 50:37:2d:b7:3c:e3:f7:f2:af:1d:39:2f:4f:c5:8e:c2:d9:ac: b3:33:0a:18:03:46:7f:33:8b:33:42:de:b3:1e:62:4c:fa:af: b1:b8:bd:34:59:3e:c4:13:53:a0:b4:67:21:cb:1a:28:e8:a0: a9:ef:61:20:b9:68:4d:54:21:50:f6:21:15:1c:db:15:95:c7: 7c:4e:43:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYzMUMxMTAvBgNVBAUTKEY3MkU3RDVFMUJCNDU0MkFCN0ZGNzc3MzY1ODgzQzE2 MDEwMzRERTkwHhcNMjUwNTE0MTc0ODQyWhcNMjUwNTIxMTc0ODQyWjAYMRYwFAYD VQQDEw02ODI0ZDc3YS1kZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxVbXnsfnScqlrlbPh3nYIdYwdyxdPoIaOmVCEUITvdo4/AjfcXGI7IvEt70 vU5LIAzqppW5AzS1x0e/3GCGj214/aGiuEQWTfbM6QsmQv7nGqkPk6hCxyfTo5m0 7lSO0SXMR9/hESXTBmf5uKXkQnggn3uy4WDTv/PmbVfw2r+Fka7LRPyAZDz+HyFM fbrm8c49m0cCiD9P9LbdgTfh+QgS++8KrMUrYC2aQ3BoUOyXDn+9XKKFqXdaC3yA /wBnfZ6081dK5IdBvbjCeNWusLkRXRQXN0Gg0CKT1e2ON5hkTVth9FJtcxtleJPB lFaWOa0J6sz+hG0H06ZqetOElwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKduo2K5 s+wS2LSNanXrh//4DUScMB8GA1UdIwQYMBaAFPcufV4btFQqt/93c2WIPBYBA03p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjMxQy9BOUMzMTcwNDhD MjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZDcTNfM2R6WllnOEZnRURU ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5NTlYaHUwVkNxM18zZHpaWWc4RmdFRFRlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjMxQy9BOUMzMTcwNDhDMjMxMUU5OUY4NDVENzJDNEY5QUUwMi85eTU5WGh1MFZD cTNfM2R6WllnOEZnRURUZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvr5gGIR41pI3lvOQZKm3Pkidw0sF74XWWlm+iAD+zNJVV5gw8bBDz 0R6djQ8qTmRD1AnY1+6RDSg8Do8rEBRmGODbtB/Ydkso8cEdi8KkJ/Iso+cJRt9O vqMdluQ1+arBym5MNYWhyrnQQPHEN+XhvbtlD9N57VfWflFNENqVzeSQNcQeeaNH nMCbQWHEIS1IuRLmydc1OTh57pSVJ1GD+sOfI9uO4BSZOOMbP/Zx54onszlQNy23 POP38q8dOS9PxY7C2ayzMwoYA0Z/M4szQt6zHmJM+q+xuL00WT7EE1OgtGchyxoo 6KCp72EguWhNVCFQ9iEVHNsVlcd8TkNF -----END CERTIFICATE-----Generated at Fri May 16 19:21:17 2025 by rpki-client