$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: cPmvkaX6Jiu4igFcEI5n3lAPEiaAZrH+Kf+ge9chHfg= Subject key identifier: E8:8F:BD:F7:7F:B0:78:C4:65:2F:8D:64:0D:AD:FD:9B:C4:A1:28:23 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 013B Signing time: Sat 31 May 2025 04:05:03 +0000 Manifest this update: Sat 31 May 2025 04:05:02 +0000 Manifest next update: Sat 07 Jun 2025 04:05:02 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: s/Eu6pbDq1W45BvPX5wBVLxRvipFh4E5k7lH5TnqakY=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: May 31 04:05:02 2025 GMT Not After : Jun 7 04:05:02 2025 GMT Subject: CN=683a7fef-19df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:90:9c:b8:33:2a:1a:eb:d0:f6:4a:eb:a6: 21:08:64:ce:8c:a9:4d:d4:f8:33:1a:98:bc:29:ec: 81:d1:a7:6f:1f:c7:9e:b9:78:9f:0f:0d:a4:d9:93: 4c:de:ec:59:f8:9b:c7:a4:4c:db:6f:03:37:ed:de: 78:cf:d4:53:5d:88:2a:ed:00:c2:65:ce:c2:ac:c0: 83:51:89:20:e3:9e:c5:ce:fd:61:42:77:81:c5:58: 51:14:8a:bd:95:e2:11:99:7f:74:ce:44:e3:9f:9f: 0f:ff:3c:b2:63:31:27:f6:9f:c2:9e:63:ae:56:54: 53:6b:d3:4b:08:4d:cc:f6:ad:42:ad:05:65:d9:10: 19:33:17:2a:ca:91:e4:e8:e1:06:cf:5b:ad:ab:bc: 77:60:12:e6:89:61:7b:a3:68:e0:80:a8:58:af:0a: f6:1a:40:c1:d9:7b:14:af:77:f7:82:f5:89:ac:2d: b5:c1:97:30:9a:e5:18:ae:9a:0c:3c:88:58:17:97: 29:8e:f1:f4:32:e5:26:5f:84:cc:17:51:33:7b:9f: d8:6b:97:18:55:97:c8:f3:b8:ff:e3:77:e9:d5:21: 9c:64:18:50:af:67:a7:83:d1:1e:fd:1b:79:5a:65: 9b:64:06:d8:ed:de:83:8e:0e:36:2f:a1:43:e2:41: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8F:BD:F7:7F:B0:78:C4:65:2F:8D:64:0D:AD:FD:9B:C4:A1:28:23 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:59:6a:42:6a:c8:12:89:55:95:2d:63:9a:89:cf:f6:cf:7a: 62:59:b6:2a:0f:21:42:96:ec:bb:5f:97:a5:9c:20:1b:78:f6: 08:58:c7:1c:68:82:2e:d0:f9:cf:35:39:25:6b:bf:3d:ad:da: 01:80:96:a3:2f:60:67:ef:cf:a8:8c:9c:a8:56:fb:df:24:80: b5:fd:c0:57:ed:94:9a:c6:09:f3:b8:27:4e:3c:2a:ce:05:cc: 3c:50:c3:96:22:d3:c0:7b:38:c4:25:52:68:48:6e:0a:5d:e4: 8f:1f:b9:0d:ea:55:1c:41:7a:d1:72:4d:aa:67:4f:99:4a:77: ea:61:0a:31:f1:50:91:b3:6d:23:ea:9b:f9:ae:de:56:c3:be: b2:23:81:68:c9:f4:a2:0f:a2:37:96:30:b2:86:db:85:7d:cd: da:04:aa:cf:84:17:ce:c1:9a:e4:46:93:42:24:8c:7b:dd:fe: 3e:fb:c1:fd:e5:bb:d5:f7:19:66:bb:51:57:66:d0:76:ba:4f: 2f:2a:ea:cc:e0:bf:50:36:d6:7e:be:c6:17:fd:20:8b:01:e6: 3b:b4:3a:69:f3:a3:7c:e8:d7:db:79:c8:6c:65:4f:75:5e:ed: 6f:4c:4a:2f:25:ac:5f:b8:2a:67:d8:1a:55:73:d4:f9:b8:85: bf:04:f5:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwNTMxMDQwNTAyWhcNMjUwNjA3MDQwNTAyWjAYMRYwFAYD VQQDEw02ODNhN2ZlZi0xOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQSQnLgzKhrr0PZK66YhCGTOjKlN1PgzGpi8KeyB0advH8eeuXifDw2k2ZNM 3uxZ+JvHpEzbbwM37d54z9RTXYgq7QDCZc7CrMCDUYkg457Fzv1hQneBxVhRFIq9 leIRmX90zkTjn58P/zyyYzEn9p/CnmOuVlRTa9NLCE3M9q1CrQVl2RAZMxcqypHk 6OEGz1utq7x3YBLmiWF7o2jggKhYrwr2GkDB2XsUr3f3gvWJrC21wZcwmuUYrpoM PIhYF5cpjvH0MuUmX4TMF1Eze5/Ya5cYVZfI87j/43fp1SGcZBhQr2eng9Ee/Rt5 WmWbZAbY7d6Djg42L6FD4kG9OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiPvfd/ sHjEZS+NZA2t/ZvEoSgjMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWWpCasgSiVWVLWOaic/2z3piWbYqDyFCluy7X5elnCAbePYIWMcc aIIu0PnPNTkla789rdoBgJajL2Bn78+ojJyoVvvfJIC1/cBX7ZSaxgnzuCdOPCrO Bcw8UMOWItPAezjEJVJoSG4KXeSPH7kN6lUcQXrRck2qZ0+ZSnfqYQox8VCRs20j 6pv5rt5Ww76yI4FoyfSiD6I3ljCyhtuFfc3aBKrPhBfOwZrkRpNCJIx73f4++8H9 5bvV9xlmu1FXZtB2uk8vKurM4L9QNtZ+vsYX/SCLAeY7tDpp86N86NfbechsZU91 Xu1vTEovJaxfuCpn2BpVc9T5uIW/BPUW -----END CERTIFICATE-----Generated at Sat May 31 17:57:47 2025 by rpki-client