$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: qn43LbLUo3BPqBdTIdDvE0ncUznAduj/0WwQmsszch8= Subject key identifier: 1E:FE:85:93:44:9F:FC:56:31:DE:10:A9:39:6A:EA:B3:B2:62:E6:AC Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 0791 Signing time: Fri 30 May 2025 21:33:45 +0000 Manifest this update: Fri 30 May 2025 21:33:45 +0000 Manifest next update: Fri 06 Jun 2025 21:33:45 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: nQzLmEvrRlyvKSCLUKiRIt5WlW2w1nZwH1T9BdbX9iA=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: TvcOHSsYCyXpnMLRDhy2fSmnr1T+wVns1s4NPPpAH1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: May 30 21:33:45 2025 GMT Not After : Jun 6 21:33:45 2025 GMT Subject: CN=683a2439-41c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:07:fe:4a:dc:2b:05:9e:63:a0:39:62:1b: 7a:46:94:5b:0a:04:30:85:81:f1:c6:68:21:5c:82: 12:1e:e1:4e:38:3e:36:ef:ba:63:e9:42:9f:63:c1: 54:9c:21:57:aa:86:8e:da:3e:9c:93:86:34:48:30: 2e:9f:11:b3:d5:35:de:9b:60:58:1d:2d:86:17:e3: 73:c1:36:6e:95:df:bd:e6:f9:6d:4f:89:2e:11:45: bb:a3:4e:82:44:14:78:2d:eb:ac:dd:1d:86:1c:2e: e2:0e:5d:8a:1e:bf:58:11:e4:c6:a1:c4:54:67:47: e5:b9:5e:a1:a6:63:55:46:3d:1d:e4:09:0e:0b:f2: c7:a1:29:45:65:c9:ea:98:05:96:da:60:8f:14:0e: 80:b9:d7:4c:b4:f6:48:7c:61:a8:06:4c:15:b2:c9: 9e:f3:bc:66:fd:c8:21:23:26:25:04:51:e4:b5:e7: 7b:38:7c:ce:d8:e1:d9:57:86:7e:3f:22:f9:35:19: 22:d6:26:1c:6f:f4:7e:02:0c:5c:06:51:e4:0c:a1: ce:da:8c:7c:94:4f:f4:ed:68:b8:f6:29:dd:1d:4e: 8c:35:a9:58:25:2c:d1:35:18:f8:b4:54:5e:47:90: 92:98:a9:e9:e9:44:71:e5:da:29:04:7b:60:15:0d: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FE:85:93:44:9F:FC:56:31:DE:10:A9:39:6A:EA:B3:B2:62:E6:AC X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7b:9f:ed:54:ed:b8:55:77:5f:53:be:25:67:4b:bc:01:9b: 9f:0e:7e:7a:5e:9a:d1:7f:63:a4:fa:62:26:a9:5a:39:76:7b: 4e:ae:91:58:2c:3e:f5:d5:5e:da:ef:65:1a:b3:1f:8c:9c:c8: 87:95:df:4c:24:df:14:52:11:a6:bd:b6:f5:e2:1c:a3:95:8a: fd:7d:bd:c2:69:2a:b0:9d:a0:95:44:85:26:66:92:cc:de:4d: be:35:6c:b9:cf:83:f4:75:75:e0:06:88:7b:ae:96:90:80:ed: 94:aa:80:a8:8a:20:bf:8b:b6:60:ce:11:76:d8:10:c9:22:36: 3d:c3:41:83:ec:dd:32:64:7a:cb:d7:3e:17:93:57:a1:fc:b2: f7:38:0c:b5:d7:bb:d6:53:8f:46:b3:65:1f:77:3a:02:e9:27: 36:44:3d:5e:77:bb:80:46:e9:34:0d:90:50:f1:fc:71:4a:75: 61:54:66:7f:83:d3:8d:80:3a:32:2e:3f:ec:16:d2:a4:ea:fb: 5c:e8:c3:a3:ce:a8:05:f8:58:bc:fb:1c:6d:78:d0:82:e6:be: 96:2a:c2:d6:34:fd:3f:77:f2:8f:72:42:80:72:bd:77:38:ce: 1e:13:95:13:c4:41:96:a0:0c:78:89:6c:f6:d8:a4:d4:a9:31: 4f:da:d6:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwNTMwMjEzMzQ1WhcNMjUwNjA2MjEzMzQ1WjAYMRYwFAYD VQQDEw02ODNhMjQzOS00MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UQH/krcKwWeY6A5Yht6RpRbCgQwhYHxxmghXIISHuFOOD4277pj6UKfY8FU nCFXqoaO2j6ck4Y0SDAunxGz1TXem2BYHS2GF+NzwTZuld+95vltT4kuEUW7o06C RBR4Leus3R2GHC7iDl2KHr9YEeTGocRUZ0fluV6hpmNVRj0d5AkOC/LHoSlFZcnq mAWW2mCPFA6AuddMtPZIfGGoBkwVssme87xm/cghIyYlBFHkted7OHzO2OHZV4Z+ PyL5NRki1iYcb/R+AgxcBlHkDKHO2ox8lE/07Wi49indHU6MNalYJSzRNRj4tFRe R5CSmKnp6URx5dopBHtgFQ3PUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7+hZNE n/xWMd4QqTlq6rOyYuasMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3e5/tVO24VXdfU74lZ0u8AZufDn56XprRf2Ok+mImqVo5dntOrpFY LD711V7a72Uasx+MnMiHld9MJN8UUhGmvbb14hyjlYr9fb3CaSqwnaCVRIUmZpLM 3k2+NWy5z4P0dXXgBoh7rpaQgO2UqoCoiiC/i7ZgzhF22BDJIjY9w0GD7N0yZHrL 1z4Xk1eh/LL3OAy117vWU49Gs2UfdzoC6Sc2RD1ed7uARuk0DZBQ8fxxSnVhVGZ/ g9ONgDoyLj/sFtKk6vtc6MOjzqgF+Fi8+xxteNCC5r6WKsLWNP0/d/KPckKAcr13 OM4eE5UTxEGWoAx4iWz22KTUqTFP2tbi -----END CERTIFICATE-----Generated at Sat May 31 16:52:15 2025 by rpki-client