$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: IX9ybLlQugrtbIcNW6CdKhvqHNXdC5jU/mHMkvbA45g= Subject key identifier: 18:B0:FC:65:08:F9:D1:8C:5C:A9:19:0B:6A:7E:17:EA:DF:03:C7:FF Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 080C Signing time: Fri 30 May 2025 21:04:53 +0000 Manifest this update: Fri 30 May 2025 21:04:52 +0000 Manifest next update: Fri 06 Jun 2025 21:04:52 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: Zcpkc4K2Pzy2JgQcdsxlVX7fhOYJ1Kc+mcc8g5ph25g=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: BMvYT9IDar1yOpAiOIQ1zT2emoZ3Z/Bj9QOBnQBKVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: May 30 21:04:52 2025 GMT Not After : Jun 6 21:04:52 2025 GMT Subject: CN=683a1d75-45e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:56:ee:21:b2:b7:29:0d:45:81:2c:94:7b: f3:0b:74:17:74:1a:43:77:e7:49:73:72:c0:f2:45: 91:74:45:d4:0d:1e:4c:3a:ba:46:8d:4a:28:eb:14: 12:b8:28:28:e9:46:61:7a:f0:fb:5b:eb:15:fd:99: a1:d2:7d:4d:b2:f9:a5:61:df:97:3a:95:ce:f0:78: 72:58:99:ab:72:e6:d9:86:0a:ae:2e:3e:42:01:63: 6a:77:64:3a:27:6a:3c:e9:f7:58:6f:92:7f:e0:fe: 80:1f:1d:44:06:86:3b:7b:25:02:c1:56:2b:db:23: 33:d7:3b:28:17:a8:f0:00:67:a9:ba:0e:44:56:16: 06:51:4b:3b:d4:a5:f0:1b:4e:42:d9:6f:9e:15:5f: 25:e9:8a:e8:7b:03:b4:7e:9a:0d:db:39:d4:46:4c: 11:83:6e:93:63:0c:38:6f:1f:b5:46:f2:69:20:6e: 82:b0:33:84:3c:ec:b6:37:20:75:16:ef:f8:76:5b: d8:d5:7f:4b:0e:f6:a2:b0:6c:c4:ca:08:8c:37:72: d5:54:78:95:44:64:4d:da:04:a8:4e:94:65:4e:74: 72:7d:c5:93:17:bb:36:a9:0b:5f:a0:c3:72:79:83: a4:69:e2:b8:a4:65:d2:cd:eb:dc:bc:a3:9d:7e:02: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B0:FC:65:08:F9:D1:8C:5C:A9:19:0B:6A:7E:17:EA:DF:03:C7:FF X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:82:3c:bf:40:77:59:83:55:4c:6d:dd:6d:8e:cb:e4:c7:9f: 23:0c:62:a2:b9:35:2a:b2:23:b1:8d:f3:50:49:58:22:26:17: 1f:df:a2:58:f6:98:ec:ce:12:2c:9c:66:30:93:48:b9:2e:1c: 8a:b7:cc:20:bf:f4:4a:22:ef:dc:d2:34:66:33:c2:8f:46:b4: 1b:27:57:1a:f5:5d:be:35:0a:75:f0:45:dd:d3:c5:64:49:4f: 81:08:cc:51:37:85:36:37:88:28:5d:16:ba:2f:ac:bb:9e:24: 06:20:a1:0f:1a:75:3b:51:f7:bc:2d:35:39:66:da:ab:a1:a5: b7:cd:b9:5f:80:fd:a5:f9:0e:67:19:2f:09:ac:a7:20:21:58: 52:92:3f:bf:5f:47:2e:65:c2:a4:9c:42:ec:15:20:b7:36:ec: 66:66:04:8e:ea:bf:67:ae:51:3c:6e:43:fc:26:03:7d:99:e3: e5:db:42:d4:b8:b4:77:31:6b:0e:ff:68:1b:b3:fc:6f:c7:c5: dc:e2:c5:c5:86:5e:26:f1:de:70:2a:35:8c:6e:7c:84:31:a7: 59:27:8f:8f:de:ca:38:32:88:9c:82:1d:9f:ef:bd:3d:03:6a: 7c:bb:a9:5d:fb:66:b1:ab:ae:a1:09:18:85:f0:63:26:f8:c0: 08:e9:0e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUwNTMwMjEwNDUyWhcNMjUwNjA2MjEwNDUyWjAYMRYwFAYD VQQDEw02ODNhMWQ3NS00NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHxW7iGytykNRYEslHvzC3QXdBpDd+dJc3LA8kWRdEXUDR5MOrpGjUoo6xQS uCgo6UZhevD7W+sV/Zmh0n1NsvmlYd+XOpXO8HhyWJmrcubZhgquLj5CAWNqd2Q6 J2o86fdYb5J/4P6AHx1EBoY7eyUCwVYr2yMz1zsoF6jwAGepug5EVhYGUUs71KXw G05C2W+eFV8l6YroewO0fpoN2znURkwRg26TYww4bx+1RvJpIG6CsDOEPOy2NyB1 Fu/4dlvY1X9LDvaisGzEygiMN3LVVHiVRGRN2gSoTpRlTnRyfcWTF7s2qQtfoMNy eYOkaeK4pGXSzevcvKOdfgI+NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiw/GUI +dGMXKkZC2p+F+rfA8f/MB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjgjy/QHdZg1VMbd1tjsvkx58jDGKiuTUqsiOxjfNQSVgiJhcf36JY 9pjszhIsnGYwk0i5LhyKt8wgv/RKIu/c0jRmM8KPRrQbJ1ca9V2+NQp18EXd08Vk SU+BCMxRN4U2N4goXRa6L6y7niQGIKEPGnU7Ufe8LTU5ZtqroaW3zblfgP2l+Q5n GS8JrKcgIVhSkj+/X0cuZcKknELsFSC3NuxmZgSO6r9nrlE8bkP8JgN9mePl20LU uLR3MWsO/2gbs/xvx8Xc4sXFhl4m8d5wKjWMbnyEMadZJ4+P3so4Moicgh2f7709 A2p8u6ld+2axq66hCRiF8GMm+MAI6Q48 -----END CERTIFICATE-----Generated at Sat May 31 17:17:24 2025 by rpki-client