$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json) Hash identifier: /16MyRkTGiW1X67x4YwAZebLhJCt1+GhknFA8KYvGiY= Subject key identifier: 36:E5:00:14:76:AF:1F:21:E6:55:6A:F1:D3:DB:3D:E8:5F:DF:02:FC Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Certificate serial: 10C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft Manifest number: 10BB Signing time: Fri 30 May 2025 17:29:28 +0000 Manifest this update: Fri 30 May 2025 17:29:28 +0000 Manifest next update: Fri 06 Jun 2025 17:29:28 +0000 Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: QAPNgG2YvkbJPNa/roL1ePA5tOv8JRtJamlgupAKc+I=) 2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4292 (0x10c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Validity Not Before: May 30 17:29:28 2025 GMT Not After : Jun 6 17:29:28 2025 GMT Subject: CN=6839eaf8-c7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:8e:cf:e3:ba:6b:1f:07:b3:8e:18:2d:c8: 54:bd:50:5e:ec:10:a5:e7:b7:31:fd:46:75:e2:72: fe:c1:45:d0:4b:ed:fe:6d:7b:4c:59:40:c9:51:c5: 28:80:03:ed:08:b6:3d:b4:bf:7a:93:44:cb:85:05: bb:b0:e8:e9:90:3f:e8:7f:65:7f:69:b5:28:9d:f2: 1f:4e:71:38:ef:5c:1f:e0:18:20:ff:f5:88:57:16: 58:96:64:5b:50:7a:5d:5f:d3:5e:6b:ef:4b:a3:dd: 8d:bf:b8:da:1e:60:03:ff:51:1b:92:85:8e:db:b4: 9c:ab:37:e6:f0:7b:96:62:e5:4b:fb:4d:b5:3a:ac: 59:0c:5f:74:2a:7c:b1:77:e0:f0:cf:5b:c6:a9:02: 5d:b4:a9:de:3b:fb:69:56:13:e3:35:1b:fc:9d:8f: 84:4b:18:2a:4f:ff:15:74:e9:ab:b9:73:6d:fb:e9: f3:87:f6:3b:12:01:ec:0b:dd:87:bb:d4:d7:88:07: ed:f6:37:07:80:07:ee:5a:d4:5e:a1:d7:55:33:8e: d7:fd:a6:f9:61:74:7c:b6:be:44:48:6d:fc:a3:25: 8d:e9:29:0b:cd:30:ab:4d:b3:77:c8:47:a2:23:dc: c8:8c:c2:0f:48:da:c4:61:63:86:50:06:7b:b6:22: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E5:00:14:76:AF:1F:21:E6:55:6A:F1:D3:DB:3D:E8:5F:DF:02:FC X509v3 Authority Key Identifier: keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:df:93:f1:6d:1f:22:be:e5:47:0f:28:ae:fb:5d:96:f6:2f: a6:ec:8c:b2:ee:1d:0e:b1:9a:9b:cf:04:1d:2f:18:d3:d9:4e: 46:8d:6b:98:a0:24:75:b1:76:85:6b:36:43:7d:11:40:b8:6e: 62:95:f3:bf:bf:c5:0e:61:ad:c3:d9:ef:0b:31:41:e6:78:c8: 8b:d1:cc:a0:de:57:b1:b8:90:e3:33:5a:87:58:a3:86:1f:b8: c6:a3:3c:fb:aa:95:a8:41:0c:9a:a8:fd:3f:3d:5c:5f:55:46: 9d:20:4a:2d:d6:8e:0c:a0:1c:0d:80:7d:70:0e:77:26:42:79: 7f:1f:8c:44:49:5f:df:29:b9:7a:5c:c6:ff:3b:32:b4:b8:3c: 24:72:8e:52:29:21:1e:76:c7:33:bb:10:55:79:6d:65:ec:2e: 52:f7:b9:d7:2f:7d:03:70:12:ab:69:1c:52:8c:3d:d3:40:8c: b3:c7:0b:ec:4c:a2:49:0f:59:0b:2d:66:c4:55:9d:39:2a:93: 1c:de:69:af:18:19:79:5d:a9:3a:19:5f:bf:f3:67:db:84:80: 9c:76:8b:b4:e6:8e:21:84:c8:d1:2a:26:ab:a4:9f:f3:d8:bc: 65:8a:3a:11:73:a5:0f:21:63:32:c7:25:56:3a:08:ba:2f:79: 85:b1:65:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB MkFBOTA3QjgwHhcNMjUwNTMwMTcyOTI4WhcNMjUwNjA2MTcyOTI4WjAYMRYwFAYD VQQDEw02ODM5ZWFmOC1jN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAok+Oz+O6ax8Hs44YLchUvVBe7BCl57cx/UZ14nL+wUXQS+3+bXtMWUDJUcUo gAPtCLY9tL96k0TLhQW7sOjpkD/of2V/abUonfIfTnE471wf4Bgg//WIVxZYlmRb UHpdX9Nea+9Lo92Nv7jaHmAD/1EbkoWO27Scqzfm8HuWYuVL+021OqxZDF90Knyx d+Dwz1vGqQJdtKneO/tpVhPjNRv8nY+ESxgqT/8VdOmruXNt++nzh/Y7EgHsC92H u9TXiAft9jcHgAfuWtReoddVM47X/ab5YXR8tr5ESG38oyWN6SkLzTCrTbN3yEei I9zIjMIPSNrEYWOGUAZ7tiIJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDblABR2 rx8h5lVq8dPbPehf3wL8MB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0 MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx35PxbR8ivuVHDyiu+12W9i+m7Iyy7h0OsZqbzwQdLxjT2U5GjWuY oCR1sXaFazZDfRFAuG5ilfO/v8UOYa3D2e8LMUHmeMiL0cyg3lexuJDjM1qHWKOG H7jGozz7qpWoQQyaqP0/PVxfVUadIEot1o4MoBwNgH1wDncmQnl/H4xESV/fKbl6 XMb/OzK0uDwkco5SKSEedsczuxBVeW1l7C5S97nXL30DcBKraRxSjD3TQIyzxwvs TKJJD1kLLWbEVZ05KpMc3mmvGBl5Xak6GV+/82fbhICcdou05o4hhMjRKiarpJ/z 2LxlijoRc6UPIWMyxyVWOgi6L3mFsWVH -----END CERTIFICATE-----Generated at Sat May 31 17:06:32 2025 by rpki-client