$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: /BsCqM5GD6fvUQqETe1Vr/Nab37V3LDeBa1qnY8UdQY= Subject key identifier: F8:64:95:14:F9:39:24:2C:84:88:12:03:83:43:1A:0D:C5:D2:C6:E7 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 16E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 16BB Signing time: Sat 31 May 2025 16:40:27 +0000 Manifest this update: Sat 31 May 2025 16:40:27 +0000 Manifest next update: Sat 07 Jun 2025 16:40:27 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 9ahYqb5d0ROzBdUpFMG35v7M5sLxcDZdmGUda+lxpSQ=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5859 (0x16e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: May 31 16:40:27 2025 GMT Not After : Jun 7 16:40:27 2025 GMT Subject: CN=683b30fb-03f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:dc:db:02:58:3b:58:66:ec:5d:26:39:6f: e7:b6:e8:e9:8a:7a:4c:6e:ab:7c:0f:d6:45:22:09: 3c:05:1d:6c:07:43:fc:2d:38:58:79:b8:2d:51:2c: 44:52:6d:54:02:ba:59:99:a5:f7:c8:b1:32:44:f4: 3b:97:c7:19:f2:fa:d0:c4:be:37:be:ec:f0:2f:7d: 5c:e5:e5:0b:1b:0e:b4:77:a3:75:ca:45:56:dd:fd: 34:5f:61:64:21:da:26:17:b6:6b:40:f7:0e:c6:d1: 14:35:fe:c9:11:d7:26:6b:bf:a1:c3:06:4d:35:3f: 86:dd:42:0c:e0:4c:d9:27:1b:56:91:3d:6f:fa:c8: 5d:b2:2d:f3:cb:a4:dc:0e:c6:c4:49:90:34:7d:41: 7e:94:82:ea:db:5d:1a:59:a8:59:d5:6e:d6:15:31: 7a:1f:28:91:6b:a1:84:dd:02:0e:e7:1e:b1:e3:41: d4:00:eb:69:be:75:2b:aa:1d:0e:a6:f4:43:be:bb: b2:13:55:ac:57:7d:75:02:63:4b:1f:9a:60:4b:db: 2f:b3:46:d4:c5:df:e4:4f:94:4f:a8:29:53:5b:65: 87:08:9b:1f:02:1b:7f:5e:03:53:af:ae:aa:98:bc: ab:f8:ce:73:55:72:b0:8c:cd:9e:65:b1:44:7d:81: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:95:14:F9:39:24:2C:84:88:12:03:83:43:1A:0D:C5:D2:C6:E7 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3f:ca:ac:4f:e4:79:6e:88:46:24:f1:16:14:04:cd:f2:39: 0f:53:97:b3:2f:d8:f1:98:ee:a7:9a:e5:6b:79:39:7d:68:36: ae:e2:f1:b5:3c:14:12:f3:4c:44:a4:9a:d2:70:42:c8:82:75: 9e:c5:97:40:bb:d4:7d:79:fc:ed:63:4b:66:1d:ca:42:51:d4: 0c:c3:5e:bf:80:f8:bf:7c:04:e4:e0:83:13:b8:13:91:af:e1: b2:64:c6:ca:b8:52:7c:61:51:eb:f7:da:0f:cf:ce:32:a0:62: 6e:d0:ac:3d:57:f5:21:2e:d7:4f:8c:78:f8:0a:0b:e3:e8:c4: 7f:67:46:2b:65:34:60:0d:38:81:a5:c4:b1:af:a8:65:2e:7f: 3d:74:61:36:af:ad:37:92:4f:ea:e1:37:8e:bd:63:2a:d1:fb: 21:28:12:24:90:49:af:b7:9d:7d:41:f4:91:cc:de:c5:ba:a4: 21:0e:84:c3:bc:79:42:e4:b7:97:a0:2d:42:ef:3f:b5:78:a3: bf:80:04:82:45:71:68:ce:e4:06:45:cc:1a:89:19:31:96:6a: 93:41:87:83:d7:e6:e7:c4:27:5b:a5:83:1f:3b:02:95:68:bd: fe:48:53:0a:18:b9:65:ef:44:d5:6a:bb:d0:2d:3e:78:34:9f: 0b:6e:08:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUwNTMxMTY0MDI3WhcNMjUwNjA3MTY0MDI3WjAYMRYwFAYD VQQDEw02ODNiMzBmYi0wM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAps/c2wJYO1hm7F0mOW/ntujpinpMbqt8D9ZFIgk8BR1sB0P8LThYebgtUSxE Um1UArpZmaX3yLEyRPQ7l8cZ8vrQxL43vuzwL31c5eULGw60d6N1ykVW3f00X2Fk IdomF7ZrQPcOxtEUNf7JEdcma7+hwwZNNT+G3UIM4EzZJxtWkT1v+shdsi3zy6Tc DsbESZA0fUF+lILq210aWahZ1W7WFTF6HyiRa6GE3QIO5x6x40HUAOtpvnUrqh0O pvRDvruyE1WsV311AmNLH5pgS9svs0bUxd/kT5RPqClTW2WHCJsfAht/XgNTr66q mLyr+M5zVXKwjM2eZbFEfYGaxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhklRT5 OSQshIgSA4NDGg3F0sbnMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAP8qsT+R5bohGJPEWFATN8jkPU5ezL9jxmO6nmuVreTl9aDau4vG1 PBQS80xEpJrScELIgnWexZdAu9R9efztY0tmHcpCUdQMw16/gPi/fATk4IMTuBOR r+GyZMbKuFJ8YVHr99oPz84yoGJu0Kw9V/UhLtdPjHj4Cgvj6MR/Z0YrZTRgDTiB pcSxr6hlLn89dGE2r603kk/q4TeOvWMq0fshKBIkkEmvt519QfSRzN7FuqQhDoTD vHlC5LeXoC1C7z+1eKO/gASCRXFozuQGRcwaiRkxlmqTQYeD1+bnxCdbpYMfOwKV aL3+SFMKGLll70TVarvQLT54NJ8Lbgj1 -----END CERTIFICATE-----Generated at Sat May 31 17:57:52 2025 by rpki-client