$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: I5mf/dZTqvtQwjPqnFoWKL4YXjuTpzh5fY5/FzbcKgA= Subject key identifier: 72:96:7B:4B:53:05:43:12:6D:26:76:5B:0F:9A:70:82:A2:0D:08:BC Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 03D5 Signing time: Sat 31 May 2025 00:47:30 +0000 Manifest this update: Sat 31 May 2025 00:47:29 +0000 Manifest next update: Sat 07 Jun 2025 00:47:29 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: 0QyXL3b/qVNFfiotnYyrxlxYYvDwKx4oDVguxRxaCd0=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: May 31 00:47:29 2025 GMT Not After : Jun 7 00:47:29 2025 GMT Subject: CN=683a51a1-28eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:89:0e:27:45:bc:f8:c3:99:5f:ce:51:0f: 11:c5:ab:58:51:4f:49:02:1f:51:16:a6:d9:d9:a3: fe:d0:28:be:5d:50:94:ba:24:ba:40:55:d2:b8:31: 55:09:d0:49:6e:90:60:92:a6:1c:45:51:9b:23:19: 17:6c:95:47:c6:39:fa:7f:5d:f8:07:2b:95:9b:cc: 79:25:a3:31:93:81:ae:64:a3:0f:66:a0:f5:43:b9: ae:d5:33:f4:65:87:31:3e:ca:21:75:27:da:ed:4b: b6:ee:90:51:1b:92:90:cd:3b:9e:46:64:78:d9:85: 51:1c:f2:5f:c5:c3:a4:48:3a:5c:3b:25:0b:b8:8f: c9:91:eb:83:c9:d2:bc:34:e8:13:78:d4:8e:bd:95: f1:4b:4a:cb:ee:3e:28:11:cc:45:37:73:7b:54:b7: df:68:3c:cf:35:3b:aa:96:57:72:ec:2e:f3:49:03: 75:ae:94:27:a3:22:23:44:fb:e9:0e:39:0c:50:af: 18:1f:b1:3d:95:fc:ea:b0:7a:6e:62:3c:39:86:c9: 47:66:fd:f1:c9:de:95:fc:12:0a:04:9b:df:ce:c5: 13:f3:57:0a:fc:36:a2:64:1a:df:a0:f5:08:97:d3: d5:6a:61:23:ce:d8:0c:e3:f3:3c:c5:79:f8:e0:e6: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:7B:4B:53:05:43:12:6D:26:76:5B:0F:9A:70:82:A2:0D:08:BC X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e7:dd:68:95:6c:40:8c:1e:58:ca:8a:bd:85:23:90:bf:1b: 21:ae:36:15:72:c3:8b:38:4a:6a:c5:66:3a:e2:bd:1d:c6:a3: f5:67:d8:7f:d6:94:82:f2:25:45:66:a2:64:a9:ef:cc:22:a5: 05:28:9b:1b:e7:80:f9:4a:30:df:33:65:58:a6:66:1f:83:05: ca:bb:ef:e9:9c:d3:94:be:eb:f3:55:a7:b9:d0:4f:7c:38:16: 45:89:d0:6b:ec:5d:73:6c:69:9a:9e:c0:fa:f3:f6:94:40:57: ee:21:9c:94:63:af:f8:82:0f:57:02:bf:dc:15:d0:17:20:f1: 15:17:d2:07:44:3a:0d:06:67:ef:57:8c:69:fc:6b:fb:04:61: 18:e4:dc:e4:7a:f0:ae:8c:e9:42:1b:4f:ac:9f:da:10:e3:6d: ce:e5:05:14:ee:e1:7d:22:b5:ae:c2:db:59:ce:51:4b:4e:cf: 5a:c7:ce:4f:df:7f:21:25:5c:82:51:1a:d0:b4:55:49:fa:2a: df:91:da:4c:d0:3a:8a:b8:35:7e:47:7c:3d:6d:ff:6d:6b:76: 45:11:93:b5:a3:6d:45:d5:a4:aa:fc:88:c9:82:e1:dd:4c:3e: cb:c4:12:f7:8f:e1:78:bc:27:0c:a6:dc:f0:32:cf:0a:fa:af: 98:98:f6:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUwNTMxMDA0NzI5WhcNMjUwNjA3MDA0NzI5WjAYMRYwFAYD VQQDEw02ODNhNTFhMS0yOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwKJDidFvPjDmV/OUQ8RxatYUU9JAh9RFqbZ2aP+0Ci+XVCUuiS6QFXSuDFV CdBJbpBgkqYcRVGbIxkXbJVHxjn6f134ByuVm8x5JaMxk4GuZKMPZqD1Q7mu1TP0 ZYcxPsohdSfa7Uu27pBRG5KQzTueRmR42YVRHPJfxcOkSDpcOyULuI/JkeuDydK8 NOgTeNSOvZXxS0rL7j4oEcxFN3N7VLffaDzPNTuqlldy7C7zSQN1rpQnoyIjRPvp DjkMUK8YH7E9lfzqsHpuYjw5hslHZv3xyd6V/BIKBJvfzsUT81cK/DaiZBrfoPUI l9PVamEjztgM4/M8xXn44OYFBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKWe0tT BUMSbSZ2Ww+acIKiDQi8MB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8591olWxAjB5Yyoq9hSOQvxshrjYVcsOLOEpqxWY64r0dxqP1Z9h/ 1pSC8iVFZqJkqe/MIqUFKJsb54D5SjDfM2VYpmYfgwXKu+/pnNOUvuvzVae50E98 OBZFidBr7F1zbGmansD68/aUQFfuIZyUY6/4gg9XAr/cFdAXIPEVF9IHRDoNBmfv V4xp/Gv7BGEY5NzkevCujOlCG0+sn9oQ423O5QUU7uF9IrWuwttZzlFLTs9ax85P 338hJVyCURrQtFVJ+irfkdpM0DqKuDV+R3w9bf9ta3ZFEZO1o21F1aSq/IjJguHd TD7LxBL3j+F4vCcMptzwMs8K+q+YmPbS -----END CERTIFICATE-----Generated at Sat May 31 17:23:34 2025 by rpki-client