$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: HuSas4Mke6iEhweF4ZRvIdlIT8V7aXEER1y8bJG3Rag= Subject key identifier: DB:E5:C5:CF:1D:E7:BB:AE:C3:D3:E4:B8:D7:58:C5:FB:5C:68:05:B5 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 09BD Signing time: Fri 30 May 2025 20:27:39 +0000 Manifest this update: Fri 30 May 2025 20:27:39 +0000 Manifest next update: Fri 06 Jun 2025 20:27:39 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: b3iPXZB5lW8lwY748bNw5FLwfKp/kVvwZNJj2VYTrOk=) 2: 2DC621D83C2A11F0A74B7710C4F9AE02.roa (hash: rmIAlbUJUVk0XZ4xKIgfP0KCbOYrcaw0M75kffZPy5A=) 3: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=) 4: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=) 5: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=) 6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=) 7: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=) 8: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: May 30 20:27:39 2025 GMT Not After : Jun 6 20:27:39 2025 GMT Subject: CN=683a14bb-892a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:97:c2:f4:ce:b3:d0:55:ae:d7:3f:19:7f: 8d:ca:de:31:ca:37:a4:45:67:b9:dd:b4:9c:dd:2e: de:90:2c:99:32:2d:72:77:e2:47:80:ce:de:f2:e0: 24:22:20:1b:52:09:dd:b1:21:87:e7:e1:f5:de:65: 3f:b8:9d:7b:6a:e6:99:cb:80:e5:c6:e1:a8:06:cb: 66:5e:3a:e3:92:5c:12:f1:cb:8d:ab:b7:04:4a:c9: 70:d8:1f:d7:e5:98:26:fc:e3:ad:38:64:c1:d6:7c: 97:3f:78:e4:de:fa:53:8e:fa:2a:69:a7:0f:3e:3c: fe:98:cc:8a:f0:c3:ad:b1:c6:b3:30:39:0c:46:e7: 23:ed:e3:76:d9:c5:8c:c1:59:3b:e1:8f:e6:b6:0c: 06:07:07:5e:8f:7b:e7:92:8e:35:d2:8e:c5:eb:e9: d8:12:16:9c:21:0f:3b:0c:05:7f:19:f0:51:d6:f0: 4e:7b:39:51:e8:7b:30:1c:bb:cd:71:8d:25:f3:c5: cb:07:13:ff:5a:56:9f:ac:d4:19:ba:e3:88:2a:1d: 6c:d2:e2:db:f9:2e:f1:69:9e:a1:5d:af:96:99:6c: 59:b2:ed:0b:40:66:11:04:37:29:85:70:13:b6:a8: 1d:b7:d0:89:4e:62:18:1c:18:fe:30:1d:d6:64:50: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E5:C5:CF:1D:E7:BB:AE:C3:D3:E4:B8:D7:58:C5:FB:5C:68:05:B5 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f8:b8:0d:43:35:0e:64:60:e3:56:aa:c0:4c:ff:75:0b:2d: e1:72:9f:87:b9:93:67:e8:ef:52:4d:3d:bf:fe:5c:03:da:e9: f3:67:0a:18:79:92:a7:fb:4c:a9:cf:e7:6f:cd:6f:ad:14:0a: c9:25:f9:9f:91:92:37:5b:a0:33:d4:5c:66:04:3e:59:37:e2: e1:dd:7a:9c:16:4f:9a:fb:ab:88:04:77:1a:27:37:4c:03:47: 4a:0b:dd:d7:09:c3:72:2a:4f:91:e9:51:72:3c:8f:52:e6:c2: f6:90:0d:08:17:13:19:cb:62:a3:26:5a:3f:f9:c9:9c:db:c5: 36:50:e6:98:45:c8:04:60:5e:83:80:14:86:fb:b3:33:6e:29: 4b:a7:e7:7e:36:40:bc:2a:0b:12:c5:73:c1:88:e0:84:05:de: b3:78:92:92:57:f7:54:be:64:01:39:29:9b:59:e9:96:73:e8: 8d:46:0a:ed:63:3d:4f:6a:74:8a:79:50:0a:ce:b3:9e:c8:9b: 8c:72:60:4a:60:ab:27:d0:a4:6d:22:39:6e:a2:92:f0:6a:12: 0d:93:58:2f:3f:01:fb:fa:d7:fb:52:81:07:ce:41:66:e4:22: 65:ab:62:46:10:ce:25:77:22:ae:4d:43:11:7e:ac:d7:53:65: 47:51:ba:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNTMwMjAyNzM5WhcNMjUwNjA2MjAyNzM5WjAYMRYwFAYD VQQDEw02ODNhMTRiYi04OTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RWXwvTOs9BVrtc/GX+Nyt4xyjekRWe53bSc3S7ekCyZMi1yd+JHgM7e8uAk IiAbUgndsSGH5+H13mU/uJ17auaZy4DlxuGoBstmXjrjklwS8cuNq7cESslw2B/X 5Zgm/OOtOGTB1nyXP3jk3vpTjvoqaacPPjz+mMyK8MOtscazMDkMRucj7eN22cWM wVk74Y/mtgwGBwdej3vnko410o7F6+nYEhacIQ87DAV/GfBR1vBOezlR6HswHLvN cY0l88XLBxP/WlafrNQZuuOIKh1s0uLb+S7xaZ6hXa+WmWxZsu0LQGYRBDcphXAT tqgdt9CJTmIYHBj+MB3WZFB0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvlxc8d 57uuw9PkuNdYxftcaAW1MB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+LgNQzUOZGDjVqrATP91Cy3hcp+HuZNn6O9STT2//lwD2unzZwoY eZKn+0ypz+dvzW+tFArJJfmfkZI3W6Az1FxmBD5ZN+Lh3XqcFk+a+6uIBHcaJzdM A0dKC93XCcNyKk+R6VFyPI9S5sL2kA0IFxMZy2KjJlo/+cmc28U2UOaYRcgEYF6D gBSG+7MzbilLp+d+NkC8KgsSxXPBiOCEBd6zeJKSV/dUvmQBOSmbWemWc+iNRgrt Yz1PanSKeVAKzrOeyJuMcmBKYKsn0KRtIjluopLwahINk1gvPwH7+tf7UoEHzkFm 5CJlq2JGEM4ldyKuTUMRfqzXU2VHUbrA -----END CERTIFICATE-----Generated at Sat May 31 17:17:33 2025 by rpki-client