$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: 0QZnpuaQUutz1BLgoXluHv8wVt3hJB/l11wQ+1id/OU= Subject key identifier: B1:A6:20:60:9F:D6:FC:F7:09:7B:E9:57:D4:87:4F:25:3B:14:B7:26 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 07D1 Signing time: Fri 30 May 2025 21:23:39 +0000 Manifest this update: Fri 30 May 2025 21:23:38 +0000 Manifest next update: Fri 06 Jun 2025 21:23:38 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: J4DMMBVs2+FlDYc/6cgpK36+z8qBn58mgKywqBSOfvE=) 2: BF07B0DA16AF11F08B8C4061C4F9AE02.roa (hash: m5fvUWDyLmphSj+hveftDjH5v8ZvHtc3dCRNArmrofc=) 3: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: RVujGjgRtNml2s4B1MbyglZHc1wuuQ8z+GSwbNfvR2o=) 4: 1070E6CA9A8311EF8BE0F826C4F9AE02.roa (hash: 5usMHuwC29/GKSbCm/Fabiikjfpjet0V04t/dPRj3vM=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: AjNKnPWs+wQxA57p7oeqhPGR6IMIStHtSJ7A+NHTTwU=) 6: 38BE1074FC0F11EA8DEF4D28C4F9AE02.roa (hash: iWWPKNMJez26/4BW7/wljyQN/N1JrdnLJYQsd0J35V0=) 7: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: vJqvl3p3GZGjPo1+bFOu/lz3UGNmQtiNtsOQmfP7QoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: May 30 21:23:38 2025 GMT Not After : Jun 6 21:23:38 2025 GMT Subject: CN=683a21db-95d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:c5:7d:ee:97:55:5e:c6:f6:7f:48:32:ce: 91:26:67:c9:5f:d6:dd:a3:b5:87:9e:5d:46:b9:d9: 7c:7f:b0:47:bd:64:08:78:d7:a1:5e:04:2d:3e:c2: 05:da:ee:51:7e:dd:53:7a:bc:d6:fc:cb:15:b2:2d: fa:6f:4a:4e:4b:4b:bb:32:38:c8:ad:b4:ed:ed:9c: 15:36:81:be:bb:2c:40:0b:20:1d:4d:50:00:3f:e1: 69:76:01:43:10:ba:1a:b6:62:4e:c1:93:45:50:6a: 14:70:d5:58:98:bd:0e:29:d1:22:b3:9b:3a:8a:cd: 65:e7:e9:84:1a:a8:85:3c:45:67:87:d9:4b:02:29: 49:76:15:63:10:82:fe:8a:db:e2:a1:ca:11:f3:70: e4:c5:05:4f:0b:20:2e:ca:fc:06:91:7d:7d:8c:7e: 6e:8c:cc:97:9a:94:00:78:01:ac:60:74:22:0d:fa: 9c:5a:51:09:02:e1:b0:11:0f:06:eb:bd:eb:41:e9: 29:d7:ca:26:48:39:28:2d:56:e3:92:4e:dd:40:84: db:f5:96:c9:e2:b5:a6:f0:df:c1:c9:4e:1f:6c:f6: c5:4a:9a:20:e9:a0:ef:b3:e0:71:d4:9e:66:1d:cf: 12:a4:9d:f1:49:c0:17:df:b2:72:df:b3:8b:b9:ad: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A6:20:60:9F:D6:FC:F7:09:7B:E9:57:D4:87:4F:25:3B:14:B7:26 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e3:0d:46:b6:0f:00:a0:e4:bf:aa:c9:1e:8c:72:7b:94:c1: 3e:e8:7e:42:d6:4c:15:4e:8a:39:4c:af:14:07:28:a9:b1:69: c9:47:76:24:30:e9:4e:44:3b:be:7d:b0:29:73:f9:55:f3:97: 60:ae:63:5d:3c:79:70:bf:2d:bc:0f:c7:82:63:c8:a5:eb:cc: 63:79:fd:0c:ec:d4:ae:73:8d:d1:59:25:5c:34:67:c7:33:70: 45:70:cb:b0:85:d2:91:bd:cf:3b:ae:f6:23:12:35:f8:73:9e: 11:9d:1e:b7:2e:24:8a:39:9c:39:af:d6:de:01:5b:9a:ca:79: ee:bb:90:85:6e:7b:50:6d:aa:69:15:65:f2:21:8c:1e:7a:a6: 33:0d:22:b6:a9:ea:0f:27:b9:d2:c9:d2:05:36:64:f6:0b:80: cc:b8:6b:be:f2:bc:44:47:d6:4a:9c:db:25:82:fc:32:15:99: 96:64:15:49:04:ef:6b:b1:09:e3:34:05:0c:46:25:68:2a:ff: 69:19:4b:a0:34:1d:ae:d7:43:da:07:fc:a1:46:90:42:30:96: e6:4e:7a:fc:71:e8:b6:b0:37:56:fb:f7:90:a6:d9:41:ff:6b: 1c:41:0b:fd:22:00:9c:5a:65:58:b9:8b:14:fa:10:b2:c4:40: 42:d7:49:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjUwNTMwMjEyMzM4WhcNMjUwNjA2MjEyMzM4WjAYMRYwFAYD VQQDEw02ODNhMjFkYi05NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkzFfe6XVV7G9n9IMs6RJmfJX9bdo7WHnl1Gudl8f7BHvWQIeNehXgQtPsIF 2u5Rft1TerzW/MsVsi36b0pOS0u7MjjIrbTt7ZwVNoG+uyxACyAdTVAAP+FpdgFD ELoatmJOwZNFUGoUcNVYmL0OKdEis5s6is1l5+mEGqiFPEVnh9lLAilJdhVjEIL+ itviocoR83DkxQVPCyAuyvwGkX19jH5ujMyXmpQAeAGsYHQiDfqcWlEJAuGwEQ8G 673rQekp18omSDkoLVbjkk7dQITb9ZbJ4rWm8N/ByU4fbPbFSpog6aDvs+Bx1J5m Hc8SpJ3xScAX37Jy37OLua2IIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGmIGCf 1vz3CXvpV9SHTyU7FLcmMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg4w1Gtg8AoOS/qskejHJ7lME+6H5C1kwVToo5TK8UByipsWnJR3Yk MOlORDu+fbApc/lV85dgrmNdPHlwvy28D8eCY8il68xjef0M7NSuc43RWSVcNGfH M3BFcMuwhdKRvc87rvYjEjX4c54RnR63LiSKOZw5r9beAVuaynnuu5CFbntQbapp FWXyIYweeqYzDSK2qeoPJ7nSydIFNmT2C4DMuGu+8rxER9ZKnNslgvwyFZmWZBVJ BO9rsQnjNAUMRiVoKv9pGUugNB2u10PaB/yhRpBCMJbmTnr8cei2sDdW+/eQptlB /2scQQv9IgCcWmVYuYsU+hCyxEBC10kY -----END CERTIFICATE-----Generated at Sat May 31 16:43:50 2025 by rpki-client