$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: oUd5OtY1fyns4h5PJkQl9oPcNkJ51B/LVR1AjwNqAME= Subject key identifier: 1C:D1:51:9F:C9:46:18:5B:A1:3D:46:6F:7F:55:A0:2A:06:25:5E:19 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: E3 Signing time: Sat 31 May 2025 05:00:33 +0000 Manifest this update: Sat 31 May 2025 05:00:32 +0000 Manifest next update: Sat 07 Jun 2025 05:00:32 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: ZkhZqWVqgXPiakPk/W4k2IxVResbLlaEMGJqHiGg5wc=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: May 31 05:00:32 2025 GMT Not After : Jun 7 05:00:32 2025 GMT Subject: CN=683a8cf0-ca8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:a7:2e:8b:c8:e2:f6:46:14:69:7e:27:d8: e7:f8:79:60:43:ac:77:40:6f:38:d2:16:de:c1:3d: 8d:55:3b:22:b6:e3:a1:39:59:1e:cd:3b:b2:47:9a: b8:b3:63:d0:0f:94:bd:2c:4e:74:4e:a4:ef:37:10: d8:09:89:62:fd:e7:75:f2:72:1c:ea:d6:1a:6e:cf: 4c:4a:9d:43:ef:f9:c6:13:99:b5:9f:f8:27:5e:55: f0:1f:8d:d5:09:35:87:a2:54:10:ed:3e:21:c5:1f: 45:78:c7:bc:f3:07:7c:b3:a1:46:c0:32:a4:73:52: 47:d8:94:0a:2d:c2:7b:42:2a:f5:ef:ca:32:4e:8a: 86:6d:e8:2b:a7:6a:a1:05:06:c5:8e:89:ca:4a:1b: 31:b1:9e:6b:43:ad:0a:bc:55:ec:fc:34:8b:65:4a: 36:ec:5c:cf:f4:31:29:50:81:77:9d:22:e0:f6:ee: 2e:e1:45:27:13:d0:a0:b6:89:3a:4b:47:36:ee:c9: ea:db:95:92:40:1d:9e:b1:f9:68:26:92:fa:e4:ce: 5a:93:f2:5d:83:09:62:ef:84:c8:88:58:66:fa:0c: a4:64:3c:8b:8d:0c:4f:96:26:0c:37:8f:c1:eb:fc: ff:20:d6:05:d8:8f:44:bd:4f:0b:34:88:a5:3b:0c: dc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D1:51:9F:C9:46:18:5B:A1:3D:46:6F:7F:55:A0:2A:06:25:5E:19 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:04:84:00:be:6a:0e:9a:b3:93:bd:94:85:7b:5a:24:ae:38: cf:ea:e8:ec:35:bd:34:bb:07:3d:86:2c:12:04:43:ce:9f:44: ed:8c:3e:36:29:f4:14:7d:31:0d:6c:5e:5d:32:d5:d1:e9:50: f0:92:38:79:62:f6:84:5c:5a:c1:5f:59:39:ca:dd:8e:bc:0b: 4a:d8:a3:da:6c:55:21:77:ef:62:f0:ef:1e:b5:ed:64:11:0e: 30:a9:21:ea:61:85:4d:a3:4d:dc:f1:15:6d:a3:fd:b3:82:7f: 14:06:4f:c7:29:d5:29:a2:9c:64:1d:e2:3f:f0:c8:be:b2:08: 43:ea:d8:16:59:0f:97:21:ae:c5:15:76:69:ee:a8:e6:60:39: 07:25:d5:7e:50:35:3e:e1:b2:45:61:c8:7c:df:9c:1e:48:eb: 9d:ed:55:6b:90:19:e3:39:f8:d8:bf:44:44:c3:65:8d:3b:85: 57:79:28:5e:00:46:ed:36:43:df:1b:a5:64:6a:43:ec:43:5a: ba:32:be:42:95:bf:19:d8:39:7c:73:c1:67:21:a4:50:12:ed: 34:fd:10:6a:2c:4b:67:36:af:f5:b2:1f:65:13:8c:d9:51:f1: ce:7a:12:43:6c:83:47:63:98:57:8d:33:44:46:52:62:32:f3: ab:ec:89:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUwNTMxMDUwMDMyWhcNMjUwNjA3MDUwMDMyWjAYMRYwFAYD VQQDEw02ODNhOGNmMC1jYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr6nLovI4vZGFGl+J9jn+HlgQ6x3QG840hbewT2NVTsituOhOVkezTuyR5q4 s2PQD5S9LE50TqTvNxDYCYli/ed18nIc6tYabs9MSp1D7/nGE5m1n/gnXlXwH43V CTWHolQQ7T4hxR9FeMe88wd8s6FGwDKkc1JH2JQKLcJ7Qir178oyToqGbegrp2qh BQbFjonKShsxsZ5rQ60KvFXs/DSLZUo27FzP9DEpUIF3nSLg9u4u4UUnE9Cgtok6 S0c27snq25WSQB2esfloJpL65M5ak/Jdgwli74TIiFhm+gykZDyLjQxPliYMN4/B 6/z/INYF2I9EvU8LNIilOwzc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzRUZ/J RhhboT1Gb39VoCoGJV4ZMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPBIQAvmoOmrOTvZSFe1okrjjP6ujsNb00uwc9hiwSBEPOn0TtjD42 KfQUfTENbF5dMtXR6VDwkjh5YvaEXFrBX1k5yt2OvAtK2KPabFUhd+9i8O8ete1k EQ4wqSHqYYVNo03c8RVto/2zgn8UBk/HKdUpopxkHeI/8Mi+sghD6tgWWQ+XIa7F FXZp7qjmYDkHJdV+UDU+4bJFYch835weSOud7VVrkBnjOfjYv0REw2WNO4VXeShe AEbtNkPfG6VkakPsQ1q6Mr5Clb8Z2Dl8c8FnIaRQEu00/RBqLEtnNq/1sh9lE4zZ UfHOehJDbINHY5hXjTNERlJiMvOr7Img -----END CERTIFICATE-----Generated at Sat May 31 15:58:34 2025 by rpki-client