$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json) Hash identifier: xpKCMEUR0PeYmR0nnj9zbrBh2/FsVYf/DNtcTLoGPlo= Subject key identifier: D5:94:16:C9:B1:4D:8E:17:7F:BA:24:15:F4:C1:D9:0B:8B:E0:F8:98 Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft Manifest number: 05CE Signing time: Fri 30 May 2025 23:16:17 +0000 Manifest this update: Fri 30 May 2025 23:16:16 +0000 Manifest next update: Fri 06 Jun 2025 23:16:16 +0000 Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: jqMFbKRKAwSDsM1C9zS0S7/06sUKAK3gMuS2G192qlc=) 2: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (hash: 4bTC2UNunl8WmbthP7AksvyRIOAjMvhZ4haA1p6DOkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A, serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Validity Not Before: May 30 23:16:16 2025 GMT Not After : Jun 6 23:16:16 2025 GMT Subject: CN=683a3c41-62b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:8e:93:64:03:52:0b:af:47:e5:93:ab:66: 47:9f:76:b3:93:2e:b9:78:3b:f9:0a:8f:c9:d5:9b: 67:32:35:46:9e:e9:21:8a:2f:e6:35:c0:52:62:9f: bf:f8:9d:f7:14:bd:39:54:66:6c:06:e7:f5:24:a7: 91:de:56:38:41:69:f6:81:1f:c9:4e:06:e7:02:9a: f4:69:0f:3f:00:70:38:fa:69:4c:17:ea:4e:e9:5a: 55:ac:14:5b:41:3b:c7:a3:11:de:7d:4f:e2:68:96: 0f:3c:b2:23:ac:0f:8c:b6:6b:3d:c6:ba:34:d2:c1: 73:24:55:fc:ce:70:0c:bf:49:26:0d:cb:4d:25:8c: eb:65:7f:2c:f7:07:bc:95:b3:2c:1b:21:cb:c6:cb: 8a:47:bd:87:ba:76:f4:df:08:cc:0e:bf:e7:8c:0e: a5:d7:2a:e7:7d:3c:c2:34:40:db:30:27:31:a9:49: ee:75:b6:3f:42:9d:55:d7:5c:5b:f0:e9:b4:92:d0: 94:1f:54:71:3e:85:73:9d:a6:d6:9d:48:38:33:2c: c3:7b:20:ca:90:54:74:3e:23:4e:17:e1:bd:9b:60: 58:8e:14:f6:cb:33:25:b9:9f:33:85:04:49:61:b8: 31:63:fd:56:cc:c4:e2:01:01:fc:fd:56:8b:54:c9: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:94:16:C9:B1:4D:8E:17:7F:BA:24:15:F4:C1:D9:0B:8B:E0:F8:98 X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d8:9d:08:e8:bc:f5:54:30:4a:16:80:44:0d:a7:d2:f0:0b: cc:9f:0c:b6:fa:4e:7b:ff:a5:cc:7c:9c:3c:24:7c:c0:6e:87: ea:7c:b3:ea:7d:68:ac:ff:d5:cf:b8:36:17:5f:81:61:5e:9d: e2:8d:95:e6:8e:38:c3:1f:e5:57:04:93:20:ae:29:4b:50:5d: 6e:0b:c0:6c:88:18:d3:12:12:e8:4e:87:ce:56:48:ab:19:31: c7:36:aa:47:f7:aa:6b:13:65:03:12:22:68:0e:84:63:02:43: 4f:c8:48:16:40:a5:fa:ba:bd:93:07:8e:fb:fe:81:25:92:ee: 22:01:07:5b:8c:d9:47:37:01:a4:7c:3e:e6:0f:ad:3f:11:82: 84:4f:55:c9:42:cc:b0:f6:42:8f:a1:83:97:82:f3:c4:db:27: 8f:d3:b4:3d:a8:04:8c:25:07:1c:55:fa:49:f7:fc:b7:58:25: 86:d7:6e:62:f3:db:57:53:5a:b0:fe:12:a0:9b:3d:dd:7a:e6: e3:78:37:c6:03:da:2b:32:72:92:8e:7f:13:56:f6:7b:2f:91: 3c:10:d6:92:3a:dd:4f:c4:21:ca:16:2f:c1:0e:1e:35:50:88: 3e:c2:13:f9:2c:31:2c:42:4a:9f:ea:59:1a:e1:b4:ab:04:67: aa:93:00:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjUwNTMwMjMxNjE2WhcNMjUwNjA2MjMxNjE2WjAYMRYwFAYD VQQDEw02ODNhM2M0MS02MmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uqOk2QDUguvR+WTq2ZHn3azky65eDv5Co/J1ZtnMjVGnukhii/mNcBSYp+/ +J33FL05VGZsBuf1JKeR3lY4QWn2gR/JTgbnApr0aQ8/AHA4+mlMF+pO6VpVrBRb QTvHoxHefU/iaJYPPLIjrA+Mtms9xro00sFzJFX8znAMv0kmDctNJYzrZX8s9we8 lbMsGyHLxsuKR72Hunb03wjMDr/njA6l1yrnfTzCNEDbMCcxqUnudbY/Qp1V11xb 8Om0ktCUH1RxPoVznabWnUg4MyzDeyDKkFR0PiNOF+G9m2BYjhT2yzMluZ8zhQRJ YbgxY/1WzMTiAQH8/VaLVMnoBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWUFsmx TY4Xf7okFfTB2QuL4PiYMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhl WnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY2J0I6Lz1VDBKFoBEDafS8AvMnwy2+k57/6XMfJw8JHzAbofqfLPq fWis/9XPuDYXX4FhXp3ijZXmjjjDH+VXBJMgrilLUF1uC8BsiBjTEhLoTofOVkir GTHHNqpH96prE2UDEiJoDoRjAkNPyEgWQKX6ur2TB477/oElku4iAQdbjNlHNwGk fD7mD60/EYKET1XJQsyw9kKPoYOXgvPE2yeP07Q9qASMJQccVfpJ9/y3WCWG125i 89tXU1qw/hKgmz3deubjeDfGA9orMnKSjn8TVvZ7L5E8ENaSOt1PxCHKFi/BDh41 UIg+whP5LDEsQkqf6lka4bSrBGeqkwBB -----END CERTIFICATE-----Generated at Sat May 31 17:45:10 2025 by rpki-client