$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: X1s/yioPIWP8YMpRea55XRe/CUZJqEHYnrwzaRJjVa0= Subject key identifier: 86:73:C3:E4:21:78:01:1A:C9:25:35:94:22:80:A9:D7:86:F4:59:29 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 234E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 2334 Signing time: Wed 14 May 2025 15:55:26 +0000 Manifest this update: Wed 14 May 2025 15:55:25 +0000 Manifest next update: Wed 21 May 2025 15:55:25 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: j5an6XER8Ow89s/lA+OMaQ1DUa42aVGF/v9LzYohKtE=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9038 (0x234e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: May 14 15:55:25 2025 GMT Not After : May 21 15:55:25 2025 GMT Subject: CN=6824bcee-7df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:e8:5e:bb:d7:2d:1c:18:1c:42:e0:4f:7a: 1e:12:d0:6d:08:cc:68:d6:be:a9:c9:4a:ae:5b:61: 0b:50:75:4f:d7:8d:1a:c1:6d:25:85:94:0a:d0:06: ca:7a:6f:c8:1c:0e:a4:17:ed:0a:af:13:4a:ac:94: ea:72:37:6b:f4:b5:54:bb:5a:1f:00:dd:77:bf:45: 1c:77:af:0c:a8:5f:5c:4a:9b:b7:ad:ee:50:5c:84: 21:f4:d6:eb:d8:25:64:31:ad:49:ef:ad:bb:4a:42: bf:10:63:c7:a7:5e:ca:14:7b:ca:eb:81:70:57:9d: 32:51:a9:50:d0:15:2e:67:9e:0f:e4:77:79:fd:13: de:d8:0f:9f:d1:2a:d4:c9:fe:44:92:e0:d1:6f:6f: 81:0c:95:47:d2:c4:4d:43:1f:f9:76:a9:07:62:1f: 1c:c3:c1:b0:84:de:c9:5d:dc:32:94:a0:b4:68:06: 0f:fa:da:38:f5:06:2b:52:3c:f6:f8:41:a2:ca:3a: d6:60:14:c9:c6:b6:78:3b:7b:b0:1a:89:0d:8d:b9: 10:56:79:8c:ac:08:9f:5a:4a:0e:f4:f4:cc:db:3a: da:ec:1f:58:11:5a:be:7a:80:26:fc:69:d2:ed:76: 6c:28:dd:52:ba:d2:88:c6:76:da:38:7d:c2:9c:af: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:C3:E4:21:78:01:1A:C9:25:35:94:22:80:A9:D7:86:F4:59:29 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:52:b9:1f:0b:d8:af:f5:0c:39:50:ad:c4:db:82:2b:e3: 16:f1:14:e2:b7:ef:21:df:50:a9:19:b8:ae:38:6c:c0:5b:32: 7f:88:93:cd:e2:d9:33:a6:41:86:84:83:bc:81:f7:f9:84:c6: 88:4a:cd:ea:4c:b2:11:cd:0e:26:67:46:ab:15:89:98:ce:46: cf:be:05:23:6f:39:98:d4:be:a1:53:0a:6f:7b:ff:e9:c1:37: 59:54:cd:2a:3d:62:12:5b:42:e0:bc:64:49:0e:cc:6b:02:ff: 7c:8c:6f:c4:06:4d:3e:ad:88:2f:a1:c0:64:67:68:15:48:6f: 76:f3:69:79:eb:f7:75:42:48:28:8a:eb:1f:06:0e:6e:92:c6: 73:1b:71:0d:0d:6f:30:d9:47:28:0c:0d:4b:c2:5f:c1:5b:40: 76:9f:78:d8:37:a6:d4:db:0d:86:e1:26:48:2e:ad:54:f1:5f: e9:98:96:1e:78:58:3e:df:7b:8c:72:75:e1:71:59:bb:11:03: 64:b4:e8:f7:09:e4:f0:56:4f:90:7b:ed:c4:ef:71:fa:f7:b4: b1:3f:31:0a:0e:80:2c:da:51:90:35:b2:d5:f1:78:e0:11:ec: fd:c3:da:8c:ac:ce:46:f3:a0:5c:d6:16:bc:1c:cf:d7:ab:7d: fc:1a:23:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUwNTE0MTU1NTI1WhcNMjUwNTIxMTU1NTI1WjAYMRYwFAYD VQQDEw02ODI0YmNlZS03ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HjoXrvXLRwYHELgT3oeEtBtCMxo1r6pyUquW2ELUHVP140awW0lhZQK0AbK em/IHA6kF+0KrxNKrJTqcjdr9LVUu1ofAN13v0Ucd68MqF9cSpu3re5QXIQh9Nbr 2CVkMa1J7627SkK/EGPHp17KFHvK64FwV50yUalQ0BUuZ54P5Hd5/RPe2A+f0SrU yf5EkuDRb2+BDJVH0sRNQx/5dqkHYh8cw8GwhN7JXdwylKC0aAYP+to49QYrUjz2 +EGiyjrWYBTJxrZ4O3uwGokNjbkQVnmMrAifWkoO9PTM2zra7B9YEVq+eoAm/GnS 7XZsKN1SutKIxnbaOH3CnK/7SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZzw+Qh eAEaySU1lCKAqdeG9FkpMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABo1K5HwvYr/UMOVCtxNuCK+MW8RTit+8h31CpGbiuOGzAWzJ/iJPN 4tkzpkGGhIO8gff5hMaISs3qTLIRzQ4mZ0arFYmYzkbPvgUjbzmY1L6hUwpve//p wTdZVM0qPWISW0LgvGRJDsxrAv98jG/EBk0+rYgvocBkZ2gVSG9282l56/d1Qkgo iusfBg5uksZzG3ENDW8w2UcoDA1Lwl/BW0B2n3jYN6bU2w2G4SZILq1U8V/pmJYe eFg+33uMcnXhcVm7EQNktOj3CeTwVk+Qe+3E73H697SxPzEKDoAs2lGQNbLV8Xjg Eez9w9qMrM5G86Bc1ha8HM/Xq338GiOV -----END CERTIFICATE-----Generated at Thu May 15 08:53:55 2025 by rpki-client