$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json) Hash identifier: HPhbz2fth/ddiHj2tYEsdOEdv2uAlhTaxrkcJGkBpDQ= Subject key identifier: 16:03:B5:25:9F:70:3A:34:EE:16:B3:46:A7:4D:26:4D:B8:75:7A:BD Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Certificate serial: 19EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft Manifest number: 19AB Signing time: Fri 16 May 2025 16:37:21 +0000 Manifest this update: Fri 16 May 2025 16:37:20 +0000 Manifest next update: Fri 23 May 2025 16:37:20 +0000 Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: 6NKZRkdkoZ+sSdoeQGw0XMqgKF/V9P10wyWkpxGrErg=) 2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: c2CgFARH3NGyjJVcgLSdMDavs6AC8B7rRi2PB+rzCh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6634 (0x19ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Validity Not Before: May 16 16:37:20 2025 GMT Not After : May 23 16:37:20 2025 GMT Subject: CN=682769c0-753c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:ea:81:e5:2f:0d:5e:c1:16:3a:6b:51:db: 72:69:1c:a9:c5:6e:27:d4:91:c3:8b:c2:da:f7:1e: f3:df:3b:0a:b3:25:d4:a4:db:d8:34:42:d4:cd:cb: 3e:d7:f4:c7:85:ae:5f:a3:e4:dd:04:89:75:02:4d: 99:e3:9e:ee:29:7a:0c:48:83:7c:23:6c:28:84:f5: 12:12:5e:84:4a:56:40:e7:6d:b4:28:96:3a:8d:e5: 2a:0a:43:5f:51:cf:a5:9e:5b:81:49:aa:5f:e1:09: c0:08:96:9f:1d:d5:e8:37:e9:a0:c5:b0:a3:f8:a9: de:ff:22:6b:fc:50:98:7a:a6:d8:21:ad:e5:6d:da: 72:2d:21:65:ab:46:43:d5:ab:3c:87:25:87:29:79: ed:98:b0:04:ca:98:8c:26:0c:aa:e2:ec:3a:1f:c0: ef:14:e2:6e:f4:b3:7f:44:3e:3a:ab:ac:72:0e:b3: ff:6e:84:92:92:1e:e5:f0:3c:17:e9:7e:97:8e:06: d1:a0:81:4a:39:99:f6:83:45:8e:32:64:43:6e:9a: 05:35:2a:e7:6b:6c:d8:e7:e5:cb:2e:3d:b4:13:50: f8:bd:e0:91:53:4c:ac:c7:f5:51:0e:f3:91:0b:31: 4a:16:39:cf:bc:00:ad:3a:c6:12:3e:11:cf:69:35: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:B5:25:9F:70:3A:34:EE:16:B3:46:A7:4D:26:4D:B8:75:7A:BD X509v3 Authority Key Identifier: keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:13:ff:08:12:5f:91:44:b1:52:78:b6:26:c8:de:7b:64:6e: 99:cb:0e:a3:c3:73:89:c9:6c:29:e0:4d:46:0f:2a:e3:e0:0b: e2:6a:42:d8:48:54:07:c1:b3:3f:43:59:3e:c9:bd:c3:ee:58: 79:92:a5:b1:e5:68:1b:f7:5e:1e:1b:52:ef:fa:03:99:fa:be: 56:00:59:70:7c:83:32:35:57:f0:a0:2a:c9:0c:5a:aa:3f:ed: ca:7f:65:5b:e4:a3:3a:e4:af:b0:fb:9d:da:d8:e7:32:b1:05: bc:56:5c:7b:3b:d1:a2:35:c1:37:40:8d:ff:1d:6e:44:c3:e5: a5:7a:ef:e9:10:a4:6e:27:82:2f:10:d5:f1:75:b5:b6:86:09: 82:57:5d:0c:3d:0d:60:3a:7b:8f:d9:8a:c6:1f:27:84:8f:ca: bf:83:7e:89:60:48:94:d4:44:c4:1d:25:96:82:20:c4:a1:b6: 4f:4f:34:e6:89:28:a2:6c:4a:7d:50:57:16:ae:85:08:a6:84: 27:e9:d5:df:39:1d:24:0f:f3:56:d9:35:a0:eb:da:05:12:91: 6c:11:75:89:5b:67:73:f8:38:df:3d:82:8e:50:ba:51:9e:89: b1:96:32:f7:5c:f5:fa:52:61:b5:05:10:21:ed:07:ca:e5:81: 79:00:59:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw OTQ2RUFCQzQwHhcNMjUwNTE2MTYzNzIwWhcNMjUwNTIzMTYzNzIwWjAYMRYwFAYD VQQDEw02ODI3NjljMC03NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVzqgeUvDV7BFjprUdtyaRypxW4n1JHDi8La9x7z3zsKsyXUpNvYNELUzcs+ 1/THha5fo+TdBIl1Ak2Z457uKXoMSIN8I2wohPUSEl6ESlZA5220KJY6jeUqCkNf Uc+lnluBSapf4QnACJafHdXoN+mgxbCj+Kne/yJr/FCYeqbYIa3lbdpyLSFlq0ZD 1as8hyWHKXntmLAEypiMJgyq4uw6H8DvFOJu9LN/RD46q6xyDrP/boSSkh7l8DwX 6X6XjgbRoIFKOZn2g0WOMmRDbpoFNSrna2zY5+XLLj20E1D4veCRU0ysx/VRDvOR CzFKFjnPvACtOsYSPhHPaTWqnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYDtSWf cDo07hazRqdNJk24dXq9MB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5 UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWE/8IEl+RRLFSeLYmyN57ZG6Zyw6jw3OJyWwp4E1GDyrj4AviakLY SFQHwbM/Q1k+yb3D7lh5kqWx5Wgb914eG1Lv+gOZ+r5WAFlwfIMyNVfwoCrJDFqq P+3Kf2Vb5KM65K+w+53a2OcysQW8Vlx7O9GiNcE3QI3/HW5Ew+Wleu/pEKRuJ4Iv ENXxdbW2hgmCV10MPQ1gOnuP2YrGHyeEj8q/g36JYEiU1ETEHSWWgiDEobZPTzTm iSiibEp9UFcWroUIpoQn6dXfOR0kD/NW2TWg69oFEpFsEXWJW2dz+DjfPYKOULpR nomxljL3XPX6UmG1BRAh7QfK5YF5AFk3 -----END CERTIFICATE-----Generated at Sun May 18 06:31:05 2025 by rpki-client