$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: M3s1wfzZIiR5u2uo2HYJlTpZCTpHcqq0F2EmpY+C6vo= Subject key identifier: 99:B1:24:68:E4:BA:A0:D9:92:87:80:3D:8D:E6:B8:78:84:95:53:43 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 016E Signing time: Sat 31 May 2025 03:31:06 +0000 Manifest this update: Sat 31 May 2025 03:31:05 +0000 Manifest next update: Sat 07 Jun 2025 03:31:05 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: JNocp4ZRdJAciFGc36jqcYpRj3WSFlniCHEQ5r2P5oI=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: May 31 03:31:05 2025 GMT Not After : Jun 7 03:31:05 2025 GMT Subject: CN=683a77fa-251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:d6:97:10:3c:a9:1b:43:27:d3:cf:68:e4: d3:90:13:53:2d:8c:7f:25:5b:36:27:2c:7b:14:cb: ce:ac:26:0d:ea:b4:28:31:61:83:c1:77:59:d5:a8: d5:ce:10:78:ea:e9:c0:d8:b2:92:08:fe:36:d4:79: 0d:2c:40:21:79:aa:92:74:a2:13:50:a0:76:2a:f7: 5b:ff:2b:fa:93:50:ca:66:4d:48:ce:e4:0b:3f:17: 18:a0:7d:4f:68:4c:33:3c:b4:b9:b5:0a:3e:e5:67: e5:0d:85:2a:26:1e:c9:f0:f8:0d:93:25:83:93:0d: d2:67:be:77:2b:d1:14:d7:3f:8e:30:a7:db:69:1c: 98:8d:8a:61:34:3e:7a:ed:c5:72:e1:90:21:b2:b0: 6f:d9:d6:02:1b:52:8b:cf:0a:93:29:7f:38:cc:59: bb:45:2f:21:8f:5e:80:49:1b:a0:e6:7b:78:d8:ed: 1e:34:83:c6:24:8a:a8:94:30:b4:67:48:46:09:f4: ff:a9:74:21:ca:cc:ae:f0:c6:37:3c:bf:08:b8:18: d7:7e:e9:b3:64:e3:6e:4a:01:85:aa:fa:ec:9a:32: 1d:2b:81:cd:2e:38:71:3f:52:e9:0a:b9:cc:1e:f5: 54:9f:26:5b:c7:2b:13:be:58:08:76:da:e8:d8:0c: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B1:24:68:E4:BA:A0:D9:92:87:80:3D:8D:E6:B8:78:84:95:53:43 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6c:28:35:4f:23:1a:47:6e:60:77:63:fb:9b:0b:66:8e:4b: ed:54:cb:f1:c2:6e:86:c0:eb:f0:f8:38:9e:2b:00:6e:63:4f: 58:1b:5e:42:79:26:cb:18:b7:ad:5d:4c:2c:62:d7:ae:fa:ab: e1:c4:30:3c:7a:6e:83:bc:17:bf:57:ed:f6:a5:bf:a5:a7:87: 0c:91:e3:a9:35:5b:1c:97:f4:3f:5b:95:65:f6:6f:7a:09:03: 6d:3a:ef:69:ca:4c:a8:47:3c:56:db:c2:ad:33:4d:a1:9d:52: d5:c3:aa:18:39:7c:c7:14:a6:73:a2:7e:c8:d1:32:67:eb:01: 0e:09:50:c5:51:e9:38:94:2e:a3:95:47:5e:0d:d5:d2:87:41: d6:88:49:06:81:b9:73:74:47:f2:11:df:4e:cc:4f:6d:8e:bf: bd:3d:fc:07:0a:b8:3e:6f:4a:9e:01:a6:e5:b1:d3:b8:35:f3: 9c:f7:f8:7a:50:df:2d:41:92:ec:c7:a2:c6:d2:12:db:53:72: cf:62:58:5c:f8:c9:28:45:17:7e:45:4c:28:e7:35:59:fb:ba: 2a:4a:64:ec:e6:dd:5a:ab:61:ed:16:97:0c:81:c7:bb:ef:8f: f8:41:e3:0a:ce:b4:57:8b:9c:6e:98:19:a3:0d:5b:99:e1:a3: 59:0e:f5:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwNTMxMDMzMTA1WhcNMjUwNjA3MDMzMTA1WjAYMRYwFAYD VQQDEw02ODNhNzdmYS0yNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYPWlxA8qRtDJ9PPaOTTkBNTLYx/JVs2Jyx7FMvOrCYN6rQoMWGDwXdZ1ajV zhB46unA2LKSCP421HkNLEAheaqSdKITUKB2Kvdb/yv6k1DKZk1IzuQLPxcYoH1P aEwzPLS5tQo+5WflDYUqJh7J8PgNkyWDkw3SZ753K9EU1z+OMKfbaRyYjYphND56 7cVy4ZAhsrBv2dYCG1KLzwqTKX84zFm7RS8hj16ASRug5nt42O0eNIPGJIqolDC0 Z0hGCfT/qXQhysyu8MY3PL8IuBjXfumzZONuSgGFqvrsmjIdK4HNLjhxP1LpCrnM HvVUnyZbxysTvlgIdtro2AwwiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmxJGjk uqDZkoeAPY3muHiElVNDMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvbCg1TyMaR25gd2P7mwtmjkvtVMvxwm6GwOvw+DieKwBuY09YG15C eSbLGLetXUwsYteu+qvhxDA8em6DvBe/V+32pb+lp4cMkeOpNVscl/Q/W5Vl9m96 CQNtOu9pykyoRzxW28KtM02hnVLVw6oYOXzHFKZzon7I0TJn6wEOCVDFUek4lC6j lUdeDdXSh0HWiEkGgblzdEfyEd9OzE9tjr+9PfwHCrg+b0qeAablsdO4NfOc9/h6 UN8tQZLsx6LG0hLbU3LPYlhc+MkoRRd+RUwo5zVZ+7oqSmTs5t1aq2HtFpcMgce7 74/4QeMKzrRXi5xumBmjDVuZ4aNZDvVc -----END CERTIFICATE-----Generated at Sat May 31 16:53:39 2025 by rpki-client