$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft File: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json) Hash identifier: /N0eFYUcxmzTDOoQ2fhorJjhLvutT9obDPW9Wupc22w= Subject key identifier: 2B:BC:94:CE:EB:DC:B6:30:F5:83:3B:EE:CA:5E:2A:F3:32:06:E3:EE Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft Manifest number: 3B Signing time: Sat 31 May 2025 07:13:40 +0000 Manifest this update: Sat 31 May 2025 07:13:40 +0000 Manifest next update: Sat 07 Jun 2025 07:13:40 +0000 Files and hashes: 1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: +lrT49V1nToj0ZgkjnbzGO1ttu0cg8jAn6ZWQbEcSbU=) 2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=) 3: 0173D2DC217311F0BAF2AA30C4F9AE02.roa (hash: nryCYlJbHFwsxOAc1QWOqjcmSxXnzL35lsWmd38XYPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Validity Not Before: May 31 07:13:40 2025 GMT Not After : Jun 7 07:13:40 2025 GMT Subject: CN=683aac24-658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:f8:86:ba:34:b7:a0:36:ae:3f:b5:59:25: 03:a3:0f:95:f8:fd:db:ab:b8:91:96:d7:1d:6c:d8: 1b:2d:2c:a7:ee:df:ca:8d:ab:b0:92:8c:b3:b0:62: b5:c1:fe:62:d9:0a:f9:b9:69:04:4e:c3:97:e8:0f: 86:e8:04:fb:92:1a:c3:2b:24:0a:51:27:55:bc:78: af:ce:91:3e:25:77:72:61:13:20:5d:17:b5:45:06: ee:8e:c9:fc:71:c5:cd:88:d7:93:7d:0f:0e:09:2a: 36:a4:52:ef:84:39:59:2a:97:75:88:ac:f5:d9:f9: da:f8:fe:54:3a:6c:1d:59:92:a0:49:6c:61:56:c9: ae:d8:a0:3e:c6:b8:eb:b7:6e:42:5f:5b:1e:e1:9f: 1e:66:25:aa:a9:70:78:85:cf:dc:f5:39:f1:62:a5: 69:85:20:32:41:e0:13:39:34:04:a6:42:4c:f4:12: 6d:53:1e:4c:b9:fa:d8:bc:12:5a:81:8f:dd:b6:79: 42:e4:d9:04:b1:29:86:a3:f3:95:86:fd:25:a8:5e: 1f:7c:f5:e0:08:aa:c0:b9:62:4c:8c:af:69:4c:7d: 63:c3:d1:dd:37:2e:ed:a2:34:63:dc:85:d5:b0:bc: b7:e5:ee:12:37:e2:8d:0d:01:aa:84:23:21:3d:42: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BC:94:CE:EB:DC:B6:30:F5:83:3B:EE:CA:5E:2A:F3:32:06:E3:EE X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8c:92:3c:c9:07:ff:c4:78:71:07:c8:90:67:7d:77:aa:3d: dd:48:9e:27:90:8e:c0:68:f8:8e:d2:b2:39:c0:24:05:77:dd: d8:ed:51:b0:af:23:0a:ab:e6:ad:cb:b3:3d:d4:f2:db:80:91: 01:e5:35:4d:63:3c:33:0a:f9:34:a0:0b:2a:e1:80:e0:28:0a: 29:44:01:6d:36:f1:e7:b6:b0:36:da:7d:02:fc:92:5e:91:85: 10:f0:ac:33:fc:78:14:09:8c:f4:00:11:dd:89:83:fb:2e:6d: 5b:b0:2b:6a:19:e0:99:a7:4f:9d:e4:43:c0:19:8c:46:b8:44: be:44:7f:5d:d1:c4:9f:b0:48:f6:1b:2a:dc:fa:2c:3b:24:e2: a4:8f:c0:11:f4:c3:6e:f1:6b:87:a0:bc:44:e2:4c:74:54:e3: f3:6d:73:9d:95:2b:aa:52:23:0c:e1:43:a0:c1:8e:21:3e:22: 5b:16:32:35:ae:1a:42:5c:c3:9e:f6:ef:cd:8e:c7:f2:cf:2a: 3e:45:25:fe:3d:74:8f:0a:ca:4b:95:19:b8:3b:d2:db:23:d0: 1b:22:d0:ce:2f:d8:84:38:48:44:46:34:1a:98:72:e3:af:62: e1:b7:5b:16:b1:2d:1c:61:df:a1:84:0a:0b:a6:a0:c3:01:ff: b8:47:1c:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTA1MzEwNzEzNDBaFw0yNTA2MDcwNzEzNDBaMBgxFjAUBgNV BAMTDTY4M2FhYzI0LTY1OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/R/iGujS3oDauP7VZJQOjD5X4/duruJGW1x1s2BstLKfu38qNq7CSjLOwYrXB /mLZCvm5aQROw5foD4boBPuSGsMrJApRJ1W8eK/OkT4ld3JhEyBdF7VFBu6Oyfxx xc2I15N9Dw4JKjakUu+EOVkql3WIrPXZ+dr4/lQ6bB1ZkqBJbGFWya7YoD7GuOu3 bkJfWx7hnx5mJaqpcHiFz9z1OfFipWmFIDJB4BM5NASmQkz0Em1THky5+ti8ElqB j922eULk2QSxKYaj85WG/SWoXh989eAIqsC5YkyMr2lMfWPD0d03Lu2iNGPchdWw vLfl7hI34o0NAaqEIyE9QpYlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK7yUzuvc tjD1gzvuyl4q8zIG4+4wHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw OTE3L0E1QUY4RTY4RjU2MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0 dk5LWjliMXVFSUpyWmxzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+MkjzJB//EeHEHyJBnfXeqPd1InieQjsBo+I7SsjnAJAV33djtUbCv Iwqr5q3Lsz3U8tuAkQHlNU1jPDMK+TSgCyrhgOAoCilEAW028ee2sDbafQL8kl6R hRDwrDP8eBQJjPQAEd2Jg/subVuwK2oZ4JmnT53kQ8AZjEa4RL5Ef13RxJ+wSPYb Ktz6LDsk4qSPwBH0w27xa4egvETiTHRU4/Ntc52VK6pSIwzhQ6DBjiE+IlsWMjWu GkJcw572782Ox/LPKj5FJf49dI8KykuVGbg70tsj0Bsi0M4v2IQ4SERGNBqYcuOv YuG3WxaxLRxh36GECgumoMMB/7hHHKA= -----END CERTIFICATE-----Generated at Sat May 31 17:56:27 2025 by rpki-client