$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: ZkGTezyPMv3739XiZhcFqw1uR9RpiZVIJkb3w8lwoHE= Subject key identifier: E3:B6:5D:18:F5:7D:18:8E:D7:7A:71:0E:B8:9E:7C:5D:B8:93:C2:EA Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0BA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0B9F Signing time: Fri 30 May 2025 19:11:57 +0000 Manifest this update: Fri 30 May 2025 19:11:56 +0000 Manifest next update: Fri 06 Jun 2025 19:11:56 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: MAopVBxDVObWdauZ1Wuq6GOn13Y1kE+IvLXtWLw3Eg8=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: 3edR8k68PlyDLwSNioDrZi097Di1Z0qsLBIpivE7sS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2985 (0xba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: May 30 19:11:56 2025 GMT Not After : Jun 6 19:11:56 2025 GMT Subject: CN=683a02fd-3959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:0e:9a:29:4a:48:48:82:e4:52:ee:4f:d3: 32:63:0f:2b:3b:e8:11:13:43:75:3e:8a:3b:e9:44: b4:d5:d2:71:bc:51:e3:eb:74:9d:c1:56:81:ce:56: 8d:16:8d:a3:69:fc:97:c3:ac:d0:52:f3:6a:6a:ef: 7d:e3:66:5c:e3:35:c3:99:36:a1:4f:43:74:89:c2: 60:1b:1e:2e:b8:47:4d:7d:e9:ff:10:7c:00:d9:c1: 96:e9:39:8a:d2:92:55:81:ae:ad:f4:68:36:4b:d6: 63:15:b4:e5:b8:5e:36:12:4b:53:9b:ca:0a:08:2a: af:16:d9:f2:d8:c8:7f:2e:83:3a:40:03:84:78:d0: 68:81:57:72:d3:0c:10:61:2f:85:d6:95:ba:8f:04: f8:3e:34:9d:b4:4a:fa:98:9d:bc:6e:f3:bc:c7:95: 50:c6:6c:9d:c8:6f:c6:d5:60:4c:0d:aa:1d:fb:f9: 38:c6:2a:1f:33:37:11:fd:0c:11:02:02:6f:9e:53: 07:f1:86:bd:c3:62:0c:76:30:d5:0c:28:fd:6f:df: 31:bf:ab:5b:61:29:d2:5b:2e:46:8f:f7:a5:01:86: e4:95:c4:72:31:49:72:71:c2:e2:fb:7c:96:b5:78: 9c:e7:e8:ed:af:82:2e:75:82:09:e8:b2:af:fb:b4: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B6:5D:18:F5:7D:18:8E:D7:7A:71:0E:B8:9E:7C:5D:B8:93:C2:EA X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4a:57:a1:05:73:31:97:54:0e:5f:33:d1:8e:73:64:93:ad: 35:b4:91:01:50:53:c7:8a:d8:e4:cb:0e:05:e6:d1:8e:88:93: 46:74:ba:b5:01:41:f6:6d:0c:be:2e:51:41:ea:40:44:35:08: ef:75:24:3d:91:56:9b:f2:21:8f:78:dd:96:41:50:c0:e6:f3: 04:6d:ef:d0:a1:7f:d2:89:b3:2e:2f:5a:be:d7:85:76:56:b8: 51:bc:0d:db:b7:8b:aa:a7:c7:bc:6e:bd:64:d0:88:b3:16:ec: 2f:5d:93:1d:7f:7a:75:dd:fa:e8:52:bd:bb:46:e8:d7:a6:46: e4:08:c5:97:c4:99:51:a8:e9:79:6d:db:41:51:17:9d:87:6b: d6:60:e5:f7:65:13:84:c6:fc:ad:c6:19:ef:ba:51:b6:ad:7a: 2a:fb:44:66:d7:e6:ca:92:38:36:55:93:d7:65:6a:94:5b:40: 17:b4:66:f3:dd:83:62:2b:e4:58:d2:a4:9f:5b:57:75:66:21: 6e:23:34:1a:ee:03:55:7d:58:8d:0c:95:3b:0e:99:5b:fc:69: a0:c5:18:26:8f:3a:61:23:91:e4:3a:09:b2:7f:35:c5:8f:0d: bf:14:51:50:db:05:24:fd:7c:5f:e8:59:3d:84:99:66:d1:af: b2:18:2c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjUwNTMwMTkxMTU2WhcNMjUwNjA2MTkxMTU2WjAYMRYwFAYD VQQDEw02ODNhMDJmZC0zOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNQOmilKSEiC5FLuT9MyYw8rO+gRE0N1Poo76US01dJxvFHj63SdwVaBzlaN Fo2jafyXw6zQUvNqau9942Zc4zXDmTahT0N0icJgGx4uuEdNfen/EHwA2cGW6TmK 0pJVga6t9Gg2S9ZjFbTluF42EktTm8oKCCqvFtny2Mh/LoM6QAOEeNBogVdy0wwQ YS+F1pW6jwT4PjSdtEr6mJ28bvO8x5VQxmydyG/G1WBMDaod+/k4xiofMzcR/QwR AgJvnlMH8Ya9w2IMdjDVDCj9b98xv6tbYSnSWy5Gj/elAYbklcRyMUlyccLi+3yW tXic5+jtr4IudYIJ6LKv+7TU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO2XRj1 fRiO13pxDriefF24k8LqMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKSlehBXMxl1QOXzPRjnNkk601tJEBUFPHitjkyw4F5tGOiJNGdLq1 AUH2bQy+LlFB6kBENQjvdSQ9kVab8iGPeN2WQVDA5vMEbe/QoX/SibMuL1q+14V2 VrhRvA3bt4uqp8e8br1k0IizFuwvXZMdf3p13froUr27RujXpkbkCMWXxJlRqOl5 bdtBURedh2vWYOX3ZROExvytxhnvulG2rXoq+0Rm1+bKkjg2VZPXZWqUW0AXtGbz 3YNiK+RY0qSfW1d1ZiFuIzQa7gNVfViNDJU7Dplb/GmgxRgmjzphI5HkOgmyfzXF jw2/FFFQ2wUk/Xxf6Fk9hJlm0a+yGCwQ -----END CERTIFICATE-----Generated at Sat May 31 17:53:17 2025 by rpki-client