$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: T+1jJ1CUxIG3QxwddPa66eP98JVdcXMGzOABdRu2/24= Subject key identifier: 8E:E0:1D:ED:01:84:F6:C1:7E:D0:C8:87:1F:6D:C2:46:7A:79:9C:FC Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 01C3 Signing time: Sat 31 May 2025 02:48:22 +0000 Manifest this update: Sat 31 May 2025 02:48:22 +0000 Manifest next update: Sat 07 Jun 2025 02:48:22 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: ld71XaUDf7FK63lb737KKXgQO+Z9Sfctt2r5xYY3Z8U=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: C5xmuiW1qdvlYmxgBJhQt0Eam4dFMifTqr76aJr0Pzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: May 31 02:48:22 2025 GMT Not After : Jun 7 02:48:22 2025 GMT Subject: CN=683a6df6-ce90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:f6:e5:3f:b6:c8:c3:b2:f5:17:3b:cc:8d: 6b:81:89:68:ac:ea:62:4b:64:34:de:5e:af:b9:0f: 76:c0:db:38:6e:cc:87:af:6c:e0:7d:20:d3:ae:8e: 0a:0b:b8:10:91:19:db:6f:8c:a6:26:47:5d:a1:bd: 40:14:1e:9e:9f:1d:5f:63:7c:35:60:28:f4:f4:8e: 0a:4d:5b:71:61:19:a1:a8:ac:99:3c:b1:91:8a:d7: 12:e7:42:43:24:d2:71:f4:df:e0:09:9e:b9:34:7c: 31:e4:ef:14:db:b4:74:7a:4a:e1:de:31:31:ff:4a: ba:b1:1c:22:24:b4:81:5d:b4:5e:ff:4b:2a:b8:85: b5:70:bb:37:12:d5:23:43:b5:ee:88:cd:cf:ec:79: 61:93:1f:7c:60:77:b7:58:41:e7:10:15:3e:f5:2d: cd:83:a1:ee:5a:a3:e9:2e:81:72:47:45:10:f6:bf: df:6f:4a:22:30:5c:5d:54:6f:b9:1f:fa:18:74:96: a2:95:7f:7b:2c:10:54:9d:c4:e4:3e:7e:7a:06:fe: 4c:59:0e:2a:88:a5:7c:bc:16:94:65:8d:3e:75:f4: e8:25:79:b6:11:b8:41:db:67:0a:23:63:7a:fa:e3: 45:14:19:43:b7:0d:75:96:f5:ac:be:30:9a:bb:0a: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E0:1D:ED:01:84:F6:C1:7E:D0:C8:87:1F:6D:C2:46:7A:79:9C:FC X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ec:d7:3c:2a:4d:a5:d6:e4:82:b1:7a:86:6e:1e:bf:38:90: 44:3f:f1:89:50:53:48:aa:c3:74:7d:89:f1:b9:16:6e:eb:a1: 1d:e2:1c:3b:62:c3:8e:63:48:cf:05:fb:52:a6:07:f2:f6:e2: fa:e1:aa:bf:ea:8e:15:fa:c4:16:5e:85:1a:04:44:21:94:7e: 26:88:67:c2:52:c6:e8:ff:3d:ed:6e:09:5c:90:55:b0:b2:83: 6c:45:2b:b6:bf:ee:bd:03:19:1b:a8:5a:30:27:38:f9:47:65: 7a:78:6e:24:58:9f:41:70:f9:f9:71:ff:46:40:5b:73:07:c6: af:cb:39:54:41:52:be:07:32:21:c1:20:bc:eb:62:54:58:bc: ea:af:81:13:05:23:c5:bb:49:47:6f:ba:29:fb:0a:79:1e:72: 2e:a0:60:3b:c8:60:5d:0e:90:5e:cb:d8:f3:af:f2:a1:c0:dc: 89:b0:d0:52:c1:4e:e1:fd:3d:94:7a:30:51:24:a6:04:8b:91: e6:59:03:00:11:52:1d:e0:4c:dd:28:2a:41:98:9a:d9:7b:29: 4d:3a:d1:28:54:2b:aa:40:0f:04:85:49:03:ed:ae:84:ff:e3: af:81:78:e8:bf:f8:2c:0c:b2:8d:24:ed:1d:af:f0:df:57:fe: bb:71:0b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUwNTMxMDI0ODIyWhcNMjUwNjA3MDI0ODIyWjAYMRYwFAYD VQQDEw02ODNhNmRmNi1jZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHP25T+2yMOy9Rc7zI1rgYlorOpiS2Q03l6vuQ92wNs4bsyHr2zgfSDTro4K C7gQkRnbb4ymJkddob1AFB6enx1fY3w1YCj09I4KTVtxYRmhqKyZPLGRitcS50JD JNJx9N/gCZ65NHwx5O8U27R0ekrh3jEx/0q6sRwiJLSBXbRe/0squIW1cLs3EtUj Q7XuiM3P7Hlhkx98YHe3WEHnEBU+9S3Ng6HuWqPpLoFyR0UQ9r/fb0oiMFxdVG+5 H/oYdJailX97LBBUncTkPn56Bv5MWQ4qiKV8vBaUZY0+dfToJXm2EbhB22cKI2N6 +uNFFBlDtw11lvWsvjCauwrpQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7gHe0B hPbBftDIhx9twkZ6eZz8MB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV7Nc8Kk2l1uSCsXqGbh6/OJBEP/GJUFNIqsN0fYnxuRZu66Ed4hw7 YsOOY0jPBftSpgfy9uL64aq/6o4V+sQWXoUaBEQhlH4miGfCUsbo/z3tbglckFWw soNsRSu2v+69AxkbqFowJzj5R2V6eG4kWJ9BcPn5cf9GQFtzB8avyzlUQVK+BzIh wSC862JUWLzqr4ETBSPFu0lHb7op+wp5HnIuoGA7yGBdDpBey9jzr/KhwNyJsNBS wU7h/T2UejBRJKYEi5HmWQMAEVId4EzdKCpBmJrZeylNOtEoVCuqQA8EhUkD7a6E /+OvgXjov/gsDLKNJO0dr/DfV/67cQvK -----END CERTIFICATE-----Generated at Sat May 31 17:32:52 2025 by rpki-client