$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: K9gR7xnasrMRcUozsLNGIZglPCJ17gi4VEMzHVU3NLM= Subject key identifier: DA:77:08:B0:09:2C:2E:58:7D:D7:C2:34:45:B9:F3:0B:D7:56:7E:83 Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 0901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 08FC Signing time: Fri 16 May 2025 20:38:33 +0000 Manifest this update: Fri 16 May 2025 20:38:33 +0000 Manifest next update: Fri 23 May 2025 20:38:33 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: MIvnY4vtkeIAguv3CeSSG2vyEekEtVTvndA+vc3/Wok=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: ggnDaBNF34HQg+n5+et1BdldDeh00Zq26oas41hsO6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: May 16 20:38:33 2025 GMT Not After : May 23 20:38:33 2025 GMT Subject: CN=6827a249-81e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:59:e0:24:0d:83:2d:d2:3a:03:3e:5c:25:01: bf:9e:bb:f1:5f:05:eb:34:40:2f:7c:1c:49:db:44: 09:87:5a:6f:42:75:0d:27:91:af:c8:ec:19:5a:fc: 4c:4f:dd:e4:0a:4c:48:54:2f:10:c8:23:6f:57:c6: cf:72:af:13:74:77:13:09:1c:00:b9:34:0a:7b:3b: f7:70:0d:39:f5:ce:83:36:68:58:d4:48:1a:ae:a4: 1c:b8:44:4b:08:a9:44:bb:b7:2d:4f:59:d3:9e:af: 51:38:0b:65:19:69:ff:ee:c3:cd:64:a4:12:77:6f: 79:2b:80:fb:04:7c:b3:de:3d:a4:2a:7f:05:e3:e1: 20:d3:e2:12:bc:f8:27:d7:ed:ab:a1:37:91:d6:60: 8f:fe:18:4d:ff:08:2d:3c:9c:ce:f4:4b:61:f7:8e: 55:e6:7b:88:15:f3:ac:11:35:53:38:d9:b1:ce:49: cc:e1:ec:90:ab:02:25:e9:e9:be:b1:9c:e9:de:c6: a3:27:2d:18:3c:fd:bc:3e:ee:ca:31:8e:15:23:d7: 96:c8:1e:59:12:da:5b:aa:57:f5:f4:55:df:48:4c: d6:c3:13:ea:4a:10:8b:37:f1:0a:2a:2a:59:74:06: 92:ef:ed:30:9b:45:25:29:d9:6f:4e:ae:3a:11:0e: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:08:B0:09:2C:2E:58:7D:D7:C2:34:45:B9:F3:0B:D7:56:7E:83 X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c9:d2:19:30:53:81:3d:a0:cf:31:ef:e4:d7:c1:dd:90:82: d5:58:2b:92:b8:85:51:33:f1:29:2b:b5:dd:64:eb:d0:a4:fe: c5:1d:f7:76:da:c6:36:c9:be:c7:31:76:a4:5a:b2:ba:8e:90: ba:b0:3c:56:fe:8d:21:48:6d:77:6c:bf:1d:b2:74:5f:74:4d: bf:20:8a:15:e4:94:0e:8b:21:31:49:bb:82:23:fc:81:25:ef: 22:03:cb:32:de:fd:a8:3e:36:49:f7:6f:c8:6e:5a:13:fb:8b: 7e:28:bc:de:96:77:18:5e:48:96:8e:15:0d:57:d1:c8:8f:c8: d9:f0:3b:a8:7b:1e:c7:98:4c:40:c7:d8:35:9e:54:9f:2e:ec: 74:c0:a5:e7:c0:46:79:60:bf:7f:f9:02:73:c8:a1:6a:35:22: ef:15:c1:21:ac:ce:79:e3:77:1c:de:2d:d8:33:d7:29:42:29: 72:25:cd:c5:e1:bc:13:e2:2f:43:f4:f1:1b:a3:5f:f3:4b:01: 62:a4:c0:91:6a:d0:ea:aa:c5:c4:89:51:c4:84:75:ea:70:62: bc:7b:2e:65:36:12:f1:d2:4f:9e:a4:b8:71:9e:aa:4b:d3:df: df:3b:54:6e:91:15:c3:8c:b5:06:e8:f6:5b:79:0a:d1:68:d3: 87:8e:f4:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjUwNTE2MjAzODMzWhcNMjUwNTIzMjAzODMzWjAYMRYwFAYD VQQDEw02ODI3YTI0OS04MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71ngJA2DLdI6Az5cJQG/nrvxXwXrNEAvfBxJ20QJh1pvQnUNJ5GvyOwZWvxM T93kCkxIVC8QyCNvV8bPcq8TdHcTCRwAuTQKezv3cA059c6DNmhY1EgarqQcuERL CKlEu7ctT1nTnq9ROAtlGWn/7sPNZKQSd295K4D7BHyz3j2kKn8F4+Eg0+ISvPgn 1+2roTeR1mCP/hhN/wgtPJzO9Eth945V5nuIFfOsETVTONmxzknM4eyQqwIl6em+ sZzp3sajJy0YPP28Pu7KMY4VI9eWyB5ZEtpbqlf19FXfSEzWwxPqShCLN/EKKipZ dAaS7+0wm0UlKdlvTq46EQ57UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp3CLAJ LC5YfdfCNEW58wvXVn6DMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmydIZMFOBPaDPMe/k18HdkILVWCuSuIVRM/EpK7XdZOvQpP7FHfd2 2sY2yb7HMXakWrK6jpC6sDxW/o0hSG13bL8dsnRfdE2/IIoV5JQOiyExSbuCI/yB Je8iA8sy3v2oPjZJ92/IbloT+4t+KLzelncYXkiWjhUNV9HIj8jZ8Duoex7HmExA x9g1nlSfLux0wKXnwEZ5YL9/+QJzyKFqNSLvFcEhrM5543cc3i3YM9cpQilyJc3F 4bwT4i9D9PEbo1/zSwFipMCRatDqqsXEiVHEhHXqcGK8ey5lNhLx0k+epLhxnqpL 09/fO1RukRXDjLUG6PZbeQrRaNOHjvSZ -----END CERTIFICATE-----Generated at Sat May 17 00:49:48 2025 by rpki-client