$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: X6fcpgIFd/FKYlvVpsA0VIQNCRdgMwwjoPAnMwGpDlI= Subject key identifier: 8C:2A:38:46:2C:C6:8B:47:7C:7E:B4:5D:FA:52:18:6D:D6:32:14:CC Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0F47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0F39 Signing time: Fri 16 May 2025 17:52:44 +0000 Manifest this update: Fri 16 May 2025 17:52:43 +0000 Manifest next update: Fri 23 May 2025 17:52:43 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: JZMY1qFKa/WJcnmYJBX7VjHF2QMrwde5svWy3cxpOV4=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: Rwnl5e54mLk+LHSVaZTg2cOR8P1YS+fQ04gmO2RO2+Q=) 3: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (hash: Z1ub1x4sdAUbVhPgJBxhv86znPBuyk7/OiOYt681rm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3911 (0xf47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: May 16 17:52:43 2025 GMT Not After : May 23 17:52:43 2025 GMT Subject: CN=68277b6b-a097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:fb:34:a8:37:d6:e3:83:bc:3f:e2:9d:87: 20:45:5f:f2:a3:2c:a2:83:48:ff:75:20:02:7c:1b: 6f:15:60:3b:44:5f:4a:c7:70:4e:4e:8c:ff:1f:5f: a5:27:91:13:e1:45:83:ba:32:18:3b:01:66:0c:3b: 9d:7a:d6:49:3c:17:de:ef:f0:62:ef:b1:0f:3b:e6: b3:5f:09:60:c5:dd:90:9e:9a:1a:ed:67:b5:2d:0e: fa:f6:ef:2b:24:10:07:cf:e5:2c:62:64:23:a6:10: 3c:36:fb:16:b8:2f:70:ef:ae:bc:58:1c:75:2f:f9: 63:97:a4:fc:3c:e2:11:67:05:96:a7:53:e6:17:1d: d9:47:8f:01:57:45:13:3c:87:00:6c:22:35:bf:b9: 1e:0f:03:fc:d8:40:7d:c7:41:ab:3e:93:e7:3f:6c: a7:b8:7c:7e:98:b3:c3:e3:2f:d0:95:82:e8:df:d4: 44:30:ee:30:f9:0f:f3:ce:e5:58:d8:90:f9:9c:70: 12:19:f5:28:f0:2d:ac:ed:3e:31:69:0b:0f:f7:c1: 2f:29:23:d9:1a:b8:63:19:f6:ed:67:ef:b7:a9:23: dd:d7:c7:20:83:96:0b:53:04:45:d3:02:68:7a:31: ef:d1:87:45:ac:5d:79:8a:d7:0e:bc:37:22:e2:8c: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:38:46:2C:C6:8B:47:7C:7E:B4:5D:FA:52:18:6D:D6:32:14:CC X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:af:5d:a3:8a:ce:f3:b8:4b:ef:82:cf:d1:5f:bc:1d:75:ea: 2e:f2:94:be:a0:c1:1b:81:be:f9:78:eb:d0:64:d0:32:b7:07: c3:dd:84:80:73:e3:75:71:e6:f6:a7:6e:8f:72:39:15:ad:39: 0f:cd:b5:35:15:a5:72:65:35:1f:e4:31:dc:4d:d0:a8:5e:19: 80:9b:c1:06:c3:49:ea:98:64:0d:a3:e4:f7:88:20:63:7a:dc: 89:db:3f:74:2e:d0:16:9a:05:cb:f0:8e:e6:29:22:a9:b8:dd: 04:f4:a1:59:fc:9b:1e:cf:04:a2:bc:72:d4:32:fe:0d:e1:2a: a4:36:b4:fa:89:97:d0:f6:87:8f:5b:83:36:6b:86:fd:19:1f: b4:48:ea:03:89:62:74:9c:1a:04:54:a0:f4:a9:dc:e8:66:05: 76:36:a9:29:43:2b:28:76:0c:e7:01:bd:91:59:19:f9:e9:b1: 6e:b9:3a:75:1e:3d:3c:27:65:ec:3a:72:2a:f5:cb:80:ff:04: a1:1e:d3:bc:76:01:cd:0e:95:ff:09:51:b2:35:3d:e5:66:10: 7e:b8:aa:15:af:27:a4:ab:9c:ba:f3:79:30:9b:47:6f:f9:43: e6:d2:9b:cf:68:5e:e7:4d:07:a6:6d:96:a8:96:0c:43:6f:cd: 48:7e:f2:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUwNTE2MTc1MjQzWhcNMjUwNTIzMTc1MjQzWjAYMRYwFAYD VQQDEw02ODI3N2I2Yi1hMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRX7NKg31uODvD/inYcgRV/yoyyig0j/dSACfBtvFWA7RF9Kx3BOToz/H1+l J5ET4UWDujIYOwFmDDudetZJPBfe7/Bi77EPO+azXwlgxd2Qnpoa7We1LQ769u8r JBAHz+UsYmQjphA8NvsWuC9w7668WBx1L/ljl6T8POIRZwWWp1PmFx3ZR48BV0UT PIcAbCI1v7keDwP82EB9x0GrPpPnP2ynuHx+mLPD4y/QlYLo39REMO4w+Q/zzuVY 2JD5nHASGfUo8C2s7T4xaQsP98EvKSPZGrhjGfbtZ++3qSPd18cgg5YLUwRF0wJo ejHv0YdFrF15itcOvDci4oyf4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwqOEYs xotHfH60XfpSGG3WMhTMMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2r12jis7zuEvvgs/RX7wddeou8pS+oMEbgb75eOvQZNAytwfD3YSA c+N1ceb2p26PcjkVrTkPzbU1FaVyZTUf5DHcTdCoXhmAm8EGw0nqmGQNo+T3iCBj etyJ2z90LtAWmgXL8I7mKSKpuN0E9KFZ/JsezwSivHLUMv4N4SqkNrT6iZfQ9oeP W4M2a4b9GR+0SOoDiWJ0nBoEVKD0qdzoZgV2NqkpQysodgznAb2RWRn56bFuuTp1 Hj08J2XsOnIq9cuA/wShHtO8dgHNDpX/CVGyNT3lZhB+uKoVryekq5y683kwm0dv +UPm0pvPaF7nTQembZaolgxDb81IfvIc -----END CERTIFICATE-----Generated at Sun May 18 17:55:15 2025 by rpki-client