$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: hqIiKmrxNYZPx5Tk/DW+LjTsUXlE7pREYH5AClvm6rs= Subject key identifier: CA:D0:24:A6:ED:BA:71:46:79:5E:9F:A0:C9:78:AE:93:A8:1D:FD:8E Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 082B Signing time: Fri 30 May 2025 21:02:28 +0000 Manifest this update: Fri 30 May 2025 21:02:27 +0000 Manifest next update: Fri 06 Jun 2025 21:02:27 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: 0DcWbVX5RbieVTyjSvHtYEM0k6xmZvu81VfM47gNbfA=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: May 30 21:02:27 2025 GMT Not After : Jun 6 21:02:27 2025 GMT Subject: CN=683a1ce3-4bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:5f:ba:fb:87:4d:b9:01:81:7e:cc:44:f6: 7e:4b:4c:81:5e:0b:82:7c:cf:7c:2b:9f:b9:62:34: 77:33:c7:7c:21:f8:60:a8:f6:c4:48:56:6c:8c:1a: c4:7d:d0:66:02:91:22:5f:e8:00:c8:63:ba:6f:3a: 92:8b:34:5e:be:82:8b:51:fe:cc:f3:90:eb:d2:f2: 77:ed:75:0f:34:c6:8e:f9:ec:90:0f:48:bb:18:3d: 70:19:58:4e:64:b5:ca:c9:6e:81:8c:6e:28:3e:0a: 5b:1d:ce:0d:45:e8:98:b4:70:e4:ac:2c:18:f5:ed: 7d:96:2a:4a:fe:62:83:25:06:90:12:4a:d2:02:f5: 2f:d7:ec:bd:b3:b7:c8:c0:93:ce:2a:cc:36:f4:17: 28:16:52:f4:94:ae:4f:9b:71:c6:b4:83:5f:62:3f: a1:fd:89:24:c2:82:57:87:1b:0a:a9:6a:76:ed:ed: 85:61:91:d1:47:d3:a1:17:9c:7a:27:1a:b1:2d:81: 2a:26:55:d3:e5:1f:ce:60:59:c7:2b:57:3e:1f:3d: d2:50:bc:f1:a9:f6:a7:b1:c7:f6:68:2f:93:46:58: 6a:8e:33:4b:75:50:4e:97:0e:dc:bd:fa:a4:d7:73: c4:c6:51:5b:09:72:77:0e:8b:64:a0:c8:65:bc:2a: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:24:A6:ED:BA:71:46:79:5E:9F:A0:C9:78:AE:93:A8:1D:FD:8E X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:3d:07:85:35:66:2f:94:21:55:3c:86:a9:a6:58:8d:52:22: 07:a7:3c:55:48:1f:65:86:81:0a:8c:50:db:1b:2b:73:a6:a8: 21:64:f7:bc:24:44:38:70:c0:d6:d0:d8:9b:d3:34:b6:4d:1c: 63:15:b8:01:69:49:f2:49:b9:bd:b5:65:d8:fd:3e:5e:c0:5d: 5d:cc:6d:a0:95:b6:11:91:ec:d5:07:2a:0e:e0:72:ac:e8:7f: 99:53:a1:08:51:49:ca:f8:6a:33:55:5e:b6:d6:4f:1c:af:b2: c6:e0:60:b9:c7:1b:88:d0:1d:97:a9:8f:24:20:09:71:3a:f5: 50:bd:7f:09:9b:04:f8:ef:c4:0d:94:f2:90:f0:fa:8b:89:7a: f0:e4:15:6e:dd:66:26:72:ca:6f:86:d9:dd:02:79:94:c2:14: 85:ee:d1:46:e5:5e:59:fd:be:74:59:89:ab:b3:55:0e:b3:d4: 82:d7:6a:85:5d:33:68:b7:43:f2:eb:88:98:65:2c:80:da:21: 5f:8c:1f:45:50:f7:56:56:9a:19:a4:ca:34:17:bc:85:cb:57: e1:cb:6b:c5:49:36:a9:d1:98:c6:66:07:d3:7a:65:75:9d:86: 98:8e:a0:a1:11:cb:77:c3:bf:bc:f2:8a:25:36:00:01:1d:4f: 67:0f:a9:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjUwNTMwMjEwMjI3WhcNMjUwNjA2MjEwMjI3WjAYMRYwFAYD VQQDEw02ODNhMWNlMy00YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVBfuvuHTbkBgX7MRPZ+S0yBXguCfM98K5+5YjR3M8d8IfhgqPbESFZsjBrE fdBmApEiX+gAyGO6bzqSizRevoKLUf7M85Dr0vJ37XUPNMaO+eyQD0i7GD1wGVhO ZLXKyW6BjG4oPgpbHc4NReiYtHDkrCwY9e19lipK/mKDJQaQEkrSAvUv1+y9s7fI wJPOKsw29BcoFlL0lK5Pm3HGtINfYj+h/YkkwoJXhxsKqWp27e2FYZHRR9OhF5x6 JxqxLYEqJlXT5R/OYFnHK1c+Hz3SULzxqfanscf2aC+TRlhqjjNLdVBOlw7cvfqk 13PExlFbCXJ3DotkoMhlvCp9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrQJKbt unFGeV6foMl4rpOoHf2OMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNPQeFNWYvlCFVPIappliNUiIHpzxVSB9lhoEKjFDbGytzpqghZPe8 JEQ4cMDW0Nib0zS2TRxjFbgBaUnySbm9tWXY/T5ewF1dzG2glbYRkezVByoO4HKs 6H+ZU6EIUUnK+GozVV621k8cr7LG4GC5xxuI0B2XqY8kIAlxOvVQvX8JmwT478QN lPKQ8PqLiXrw5BVu3WYmcspvhtndAnmUwhSF7tFG5V5Z/b50WYmrs1UOs9SC12qF XTNot0Py64iYZSyA2iFfjB9FUPdWVpoZpMo0F7yFy1fhy2vFSTap0ZjGZgfTemV1 nYaYjqChEct3w7+88oolNgABHU9nD6nc -----END CERTIFICATE-----Generated at Sat May 31 17:23:41 2025 by rpki-client