$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: R6GfRmXLt/UwqwoYnIZG0fuwWCWQXeB9ortf96py4cs= Subject key identifier: 71:62:FB:D5:5F:05:06:68:1F:29:51:EC:57:BA:C9:74:C1:3C:0C:6F Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 084B Signing time: Mon 12 May 2025 20:33:08 +0000 Manifest this update: Mon 12 May 2025 20:33:07 +0000 Manifest next update: Mon 19 May 2025 20:33:07 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: 5bfH44kIqLU97ZsBWVQSL13w7bJJLMx5ImZIzdk7UFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: May 12 20:33:07 2025 GMT Not After : May 19 20:33:07 2025 GMT Subject: CN=68225b04-cf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:33:b2:af:8c:57:63:0c:4d:3b:77:07:65: e8:9c:60:cb:2c:35:a8:d4:94:c6:71:56:b3:a1:74: 19:06:af:0a:57:37:77:9b:db:e5:4c:b8:42:22:af: f3:5c:b9:56:a1:07:38:da:b9:5a:dd:db:32:51:a8: 36:d6:41:74:ab:0c:ae:e5:5b:72:8a:e4:5b:25:11: 98:17:94:d2:67:d3:e0:9a:38:1f:b4:d1:19:3e:eb: b4:11:e4:41:06:66:66:15:9f:a6:27:8f:fd:15:94: 56:54:45:75:50:2a:17:d3:e2:e9:9a:25:42:f8:75: bb:2b:eb:04:93:c2:ab:e4:ba:ea:04:11:02:50:2d: 44:ce:86:cd:94:b6:39:20:41:6f:7a:5d:28:a3:87: 18:ac:12:58:79:8b:51:9d:17:13:0b:1f:d0:c7:8f: eb:2d:c5:06:5d:39:ea:06:4f:17:68:59:9c:b9:be: 20:62:e9:36:91:a4:8b:07:69:d0:92:07:68:e0:15: 1b:02:18:92:8b:6c:46:5c:24:46:c6:3d:82:91:9a: ea:9d:1e:95:4b:ba:d6:84:21:1d:44:27:df:07:d6: 3e:b2:c6:b4:ea:a4:f9:a4:80:f0:bc:bf:74:59:5a: eb:28:64:ec:68:ac:c3:21:6b:34:72:e2:52:0c:f4: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:62:FB:D5:5F:05:06:68:1F:29:51:EC:57:BA:C9:74:C1:3C:0C:6F X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:71:5b:88:6a:4a:be:ad:fc:ef:00:31:64:20:02:cc:03:16: 12:da:35:9f:06:b5:10:25:b1:e4:48:b5:ff:59:06:f6:96:3b: 92:ab:85:61:77:bc:73:32:24:f8:f5:a4:2e:ff:a5:fd:ca:9e: ee:99:1f:63:a7:f4:e2:13:05:66:d0:53:80:d6:ed:59:4a:bd: 30:19:66:be:bd:70:7b:65:8b:81:a8:fe:41:74:35:b6:db:39: b6:51:83:ab:d0:d2:07:35:7b:cb:9e:ba:60:bb:87:63:88:3c: 7b:bf:3b:b5:74:cf:ab:89:11:d8:39:4d:b4:bf:8c:e2:04:5b: 84:2f:12:4e:be:3f:ce:71:d5:ca:53:07:d3:79:46:c7:ce:96: 82:2c:45:8a:f5:b3:1a:2f:33:d3:ba:91:1c:70:ba:1b:bf:bd: d2:17:2d:69:fa:cc:57:e1:a0:99:3b:bc:24:a0:c7:19:53:78: 79:a0:8e:c6:00:1a:4b:7c:4a:d4:ae:60:46:5a:1a:90:06:55: ff:e9:ad:5a:09:9d:13:e9:cd:0b:8b:db:75:cc:ff:52:17:62: bc:3c:a9:17:47:44:28:e6:03:fc:c2:f7:98:7b:75:36:b1:07: 7b:c1:1d:f3:60:60:b8:01:ae:84:2b:8f:7e:00:15:d8:6b:6f: ee:63:24:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjUwNTEyMjAzMzA3WhcNMjUwNTE5MjAzMzA3WjAYMRYwFAYD VQQDEw02ODIyNWIwNC1jZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vIzsq+MV2MMTTt3B2XonGDLLDWo1JTGcVazoXQZBq8KVzd3m9vlTLhCIq/z XLlWoQc42rla3dsyUag21kF0qwyu5VtyiuRbJRGYF5TSZ9PgmjgftNEZPuu0EeRB BmZmFZ+mJ4/9FZRWVEV1UCoX0+LpmiVC+HW7K+sEk8Kr5LrqBBECUC1EzobNlLY5 IEFvel0oo4cYrBJYeYtRnRcTCx/Qx4/rLcUGXTnqBk8XaFmcub4gYuk2kaSLB2nQ kgdo4BUbAhiSi2xGXCRGxj2CkZrqnR6VS7rWhCEdRCffB9Y+ssa06qT5pIDwvL90 WVrrKGTsaKzDIWs0cuJSDPTcswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFi+9Vf BQZoHylR7Fe6yXTBPAxvMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwcVuIakq+rfzvADFkIALMAxYS2jWfBrUQJbHkSLX/WQb2ljuSq4Vh d7xzMiT49aQu/6X9yp7umR9jp/TiEwVm0FOA1u1ZSr0wGWa+vXB7ZYuBqP5BdDW2 2zm2UYOr0NIHNXvLnrpgu4djiDx7vzu1dM+riRHYOU20v4ziBFuELxJOvj/OcdXK UwfTeUbHzpaCLEWK9bMaLzPTupEccLobv73SFy1p+sxX4aCZO7wkoMcZU3h5oI7G ABpLfErUrmBGWhqQBlX/6a1aCZ0T6c0Li9t1zP9SF2K8PKkXR0Qo5gP8wveYe3U2 sQd7wR3zYGC4Aa6EK49+ABXYa2/uYySR -----END CERTIFICATE-----Generated at Tue May 13 18:31:28 2025 by rpki-client