$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: kfKFY4cJwMgC5zps5deYQ87Vnt6v07NuK4fkVriUf7o= Subject key identifier: E6:40:58:90:3D:00:19:04:5B:46:E3:CB:25:38:91:20:2D:F6:31:69 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0FF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FDA Signing time: Wed 04 Jun 2025 17:29:50 +0000 Manifest this update: Wed 04 Jun 2025 17:29:49 +0000 Manifest next update: Wed 11 Jun 2025 17:29:49 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: PLbA3UIZhWAnpEAHpVfTnN7kz4DRnrFJh2ZNk9qMFY8=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 17:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4082 (0xff2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Jun 4 17:29:49 2025 GMT Not After : Jun 11 17:29:49 2025 GMT Subject: CN=6840828e-1a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:cf:c7:45:8a:17:67:ed:c5:47:68:bc:35: ef:54:86:2b:2a:0d:b2:dd:7a:b5:18:9f:4b:31:6b: 68:d5:72:2f:b8:c8:ac:2a:1f:64:8b:73:63:bc:89: c7:58:8e:e0:bc:37:d3:f5:e4:49:8f:d0:18:63:05: 30:9d:63:c4:6c:5e:2c:0c:24:14:db:3e:8b:83:42: c0:da:11:01:9a:cd:03:22:50:9c:90:f6:ba:09:87: d8:5f:5b:bb:58:47:e8:ee:cd:0d:e9:ef:50:de:02: e8:ac:07:b5:6e:f7:61:21:40:23:7e:4e:73:1a:77: f0:43:c3:09:dd:d1:b9:15:3a:18:15:07:e5:61:76: ef:73:11:0c:38:8b:72:5e:28:d7:23:2b:b0:47:31: 21:3d:e4:30:d3:31:b1:99:75:05:9b:40:a1:3f:c9: 77:11:1e:da:f2:3d:9c:d1:88:66:53:4e:48:7b:fc: db:c1:7c:90:0f:4a:c8:95:be:00:de:cb:ac:17:32: 9d:93:7f:d4:9a:8a:99:2e:0c:49:1c:aa:a2:8d:21: 39:35:96:57:12:44:04:27:38:be:a2:90:86:88:0b: b9:c6:47:6d:90:08:00:0a:c9:90:23:ae:9b:0e:f0: ad:bf:80:e2:38:d0:cc:f6:ee:d7:b1:bf:dc:6a:d0: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:58:90:3D:00:19:04:5B:46:E3:CB:25:38:91:20:2D:F6:31:69 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:be:41:d5:de:7f:26:12:a3:be:fa:06:24:7c:7d:dc:fe:1e: 8a:58:66:12:6e:dd:33:2a:dd:ba:59:e0:88:19:0f:04:e0:b3: 8c:d9:e9:e9:d6:f9:a8:85:53:bd:0b:48:34:74:5c:13:63:f1: 6a:89:93:57:a9:b7:0c:47:2c:0e:15:e5:82:51:29:cb:bc:a0: cf:1f:f3:55:8c:45:f9:72:05:da:b4:f3:65:b8:92:51:5b:b0: 25:a6:2f:d4:db:04:9d:18:35:3f:d5:b4:60:71:c5:65:09:8d: 64:b8:72:43:8a:fb:d2:64:fd:7c:9f:c1:03:f9:d2:7a:59:08: ec:f9:a8:67:59:42:2e:67:35:90:e2:5d:bd:c1:0a:7c:83:7d: ab:26:e1:ef:88:b2:0f:db:f5:d5:d4:ac:9d:e4:d4:01:02:bb: 61:41:14:06:e3:be:5b:4f:3d:79:fe:7e:5e:7a:ec:84:a5:76: 2a:32:10:87:65:d5:c3:2e:49:e8:82:65:00:0a:83:27:67:28: 5f:7d:e2:12:e9:15:8d:bd:6b:71:04:26:28:48:8f:8b:56:5a: 61:07:19:17:9c:29:87:42:76:6d:1c:76:ad:8f:e0:b5:22:3d: 6e:c7:3a:b3:a5:51:f2:d2:12:af:5f:8f:74:69:18:92:69:d6: 1b:12:97:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNjA0MTcyOTQ5WhcNMjUwNjExMTcyOTQ5WjAYMRYwFAYD VQQDEw02ODQwODI4ZS0xYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaDPx0WKF2ftxUdovDXvVIYrKg2y3Xq1GJ9LMWto1XIvuMisKh9ki3NjvInH WI7gvDfT9eRJj9AYYwUwnWPEbF4sDCQU2z6Lg0LA2hEBms0DIlCckPa6CYfYX1u7 WEfo7s0N6e9Q3gLorAe1bvdhIUAjfk5zGnfwQ8MJ3dG5FToYFQflYXbvcxEMOIty XijXIyuwRzEhPeQw0zGxmXUFm0ChP8l3ER7a8j2c0YhmU05Ie/zbwXyQD0rIlb4A 3susFzKdk3/UmoqZLgxJHKqijSE5NZZXEkQEJzi+opCGiAu5xkdtkAgACsmQI66b DvCtv4DiONDM9u7Xsb/catArnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZAWJA9 ABkEW0bjyyU4kSAt9jFpMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyvkHV3n8mEqO++gYkfH3c/h6KWGYSbt0zKt26WeCIGQ8E4LOM2enp 1vmohVO9C0g0dFwTY/FqiZNXqbcMRywOFeWCUSnLvKDPH/NVjEX5cgXatPNluJJR W7Alpi/U2wSdGDU/1bRgccVlCY1kuHJDivvSZP18n8ED+dJ6WQjs+ahnWUIuZzWQ 4l29wQp8g32rJuHviLIP2/XV1Kyd5NQBArthQRQG475bTz15/n5eeuyEpXYqMhCH ZdXDLknogmUACoMnZyhffeIS6RWNvWtxBCYoSI+LVlphBxkXnCmHQnZtHHatj+C1 Ij1uxzqzpVHy0hKvX490aRiSadYbEpcL -----END CERTIFICATE-----Generated at Thu Jun 5 20:02:58 2025 by rpki-client