$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: WWSVibZcwtvuBzNXQDgthb+g9Tuess+z5ICTam2Uz0Q= Subject key identifier: D8:40:DC:15:9D:B9:A5:90:A9:BE:4D:2C:EA:1C:50:A7:E2:94:DD:60 Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: D7 Signing time: Sat 31 May 2025 05:12:21 +0000 Manifest this update: Sat 31 May 2025 05:12:21 +0000 Manifest next update: Sat 07 Jun 2025 05:12:21 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: pe/2pY9QDSlrQIC90gqy2EYXzQHaCkVll1MfQbL1GxY=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: L/NVWM+Df+GwuQqnyYWtlVp/5U+iQmr8G8cxiRiESFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: May 31 05:12:21 2025 GMT Not After : Jun 7 05:12:21 2025 GMT Subject: CN=683a8fb5-8a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:bf:37:94:2e:53:6d:ad:da:c0:f8:c0:ab: df:3b:ae:70:fd:4a:81:7e:9a:72:26:e0:32:8a:df: ed:0e:d5:23:c5:31:4b:56:5a:08:b1:fe:82:26:21: 47:3d:62:b4:13:a3:ef:e5:26:50:16:d0:21:5b:dc: 74:35:b7:25:7b:31:ab:39:f3:ce:96:08:20:ac:e8: 16:62:ae:08:32:df:42:02:2d:e9:47:70:18:7d:39: 10:d3:6c:7b:74:51:b5:37:84:38:00:f8:88:e7:f5: ef:62:b0:d6:58:ee:a2:64:5f:a8:27:37:e9:88:51: 1d:01:22:70:07:e6:72:b8:5c:c0:46:e9:5a:50:84: fa:c3:26:6b:d7:49:2e:61:c9:ee:3c:9a:9b:81:87: a9:fc:e3:36:fe:0f:60:18:b9:47:2e:aa:ef:79:a1: ce:e4:a4:14:03:51:1a:9e:a8:41:3c:ac:48:23:c8: 41:76:c3:72:32:60:a6:ba:06:22:42:ba:ee:6e:88: a5:44:c8:0d:28:c0:f1:3a:ad:60:6e:55:5e:61:2e: 94:22:d8:b3:59:7f:f1:ec:e5:ec:d0:69:90:00:e1: 53:ec:3c:d8:f8:8d:94:ad:c0:9b:22:dd:3e:6d:32: 5d:42:78:9b:e1:1f:18:ab:89:1a:52:cf:76:ed:ae: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:DC:15:9D:B9:A5:90:A9:BE:4D:2C:EA:1C:50:A7:E2:94:DD:60 X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f6:4d:20:e7:ca:03:32:3c:ee:6b:83:23:04:c8:ba:7f:38: d9:07:18:92:6a:db:b0:62:38:44:53:4d:af:05:77:65:01:f7: 92:15:88:db:10:4f:19:41:92:04:fc:eb:12:9e:11:8f:bc:6b: d0:1d:88:24:af:ed:3f:b6:a0:7c:61:b2:9f:91:24:1d:2f:17: f6:78:93:10:65:03:e9:b2:17:3c:15:72:30:34:62:d9:2b:7f: 77:1d:79:8d:fc:26:ce:95:81:82:f0:a6:08:ac:af:98:c9:42: 30:20:17:f0:02:4a:69:65:3a:6b:4d:88:7e:30:a1:f4:19:c5: 52:1f:63:21:ed:37:b0:b6:9f:5a:dd:1e:a1:32:02:02:e1:14: cb:7f:b6:ca:3b:be:c0:94:d6:5b:fa:6c:22:a9:41:5a:0d:09: fa:ef:aa:21:68:e4:57:c2:10:8d:07:14:71:2b:c8:d4:84:03: 89:46:b4:7d:26:1e:b8:57:27:0b:28:55:2b:35:08:5b:b7:79: 40:79:e6:b2:00:7c:c7:35:a8:23:fc:ae:9f:ad:a3:ee:f3:5b: 0a:7e:92:98:b6:2d:e2:e1:d6:ed:34:7c:39:7f:9d:82:55:38: b5:c8:25:3d:28:ef:f3:fe:35:c0:b0:44:8c:12:cd:d1:b0:0c: 49:12:9e:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy QThERjgwM0IwHhcNMjUwNTMxMDUxMjIxWhcNMjUwNjA3MDUxMjIxWjAYMRYwFAYD VQQDEw02ODNhOGZiNS04YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1G/N5QuU22t2sD4wKvfO65w/UqBfppyJuAyit/tDtUjxTFLVloIsf6CJiFH PWK0E6Pv5SZQFtAhW9x0NbclezGrOfPOlgggrOgWYq4IMt9CAi3pR3AYfTkQ02x7 dFG1N4Q4APiI5/XvYrDWWO6iZF+oJzfpiFEdASJwB+ZyuFzARulaUIT6wyZr10ku YcnuPJqbgYep/OM2/g9gGLlHLqrveaHO5KQUA1EanqhBPKxII8hBdsNyMmCmugYi QrruboilRMgNKMDxOq1gblVeYS6UItizWX/x7OXs0GmQAOFT7DzY+I2UrcCbIt0+ bTJdQnib4R8Yq4kaUs927a4YFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhA3BWd uaWQqb5NLOocUKfilN1gMB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2 NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB49k0g58oDMjzua4MjBMi6fzjZBxiSatuwYjhEU02vBXdlAfeSFYjb EE8ZQZIE/OsSnhGPvGvQHYgkr+0/tqB8YbKfkSQdLxf2eJMQZQPpshc8FXIwNGLZ K393HXmN/CbOlYGC8KYIrK+YyUIwIBfwAkppZTprTYh+MKH0GcVSH2Mh7Tewtp9a 3R6hMgIC4RTLf7bKO77AlNZb+mwiqUFaDQn676ohaORXwhCNBxRxK8jUhAOJRrR9 Jh64VycLKFUrNQhbt3lAeeayAHzHNagj/K6fraPu81sKfpKYti3i4dbtNHw5f52C VTi1yCU9KO/z/jXAsESMEs3RsAxJEp4Q -----END CERTIFICATE-----Generated at Sat May 31 16:44:00 2025 by rpki-client