$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: K/ZoAFchuh3fjq4jY+v1vr2YRGtEhtMz160vxQc9lDY= Subject key identifier: 36:D4:48:A7:98:42:E2:ED:85:29:07:88:9E:C8:FD:0A:F5:96:03:85 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07B8 Signing time: Fri 30 May 2025 21:23:46 +0000 Manifest this update: Fri 30 May 2025 21:23:45 +0000 Manifest next update: Fri 06 Jun 2025 21:23:45 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: 4aNlqzZZdJ1xIyWQIvqvVcyOuRE7OGA1QRzcplNjQEk=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: May 30 21:23:45 2025 GMT Not After : Jun 6 21:23:45 2025 GMT Subject: CN=683a21e1-a65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:79:be:54:59:89:4b:63:f4:c4:c5:3e:e5: 59:9b:1c:e9:92:ff:7f:53:3b:c6:73:e4:dc:d5:04: 4f:e8:40:65:a3:29:eb:76:5a:16:d8:68:b6:40:ec: ce:7e:35:1d:98:28:c7:25:51:61:c5:59:60:e4:7d: d1:4a:06:14:3d:86:de:ea:1a:27:fe:15:25:9a:6f: c9:15:38:04:70:89:30:23:e4:bf:61:d2:91:78:e8: 62:d3:25:cb:e3:61:f6:04:ea:dc:16:90:09:38:d2: 9d:72:29:23:75:ae:7c:64:dc:b3:0c:69:ac:f0:2d: c4:6d:b6:7d:64:1a:c6:9d:58:10:73:3d:8e:48:86: c4:02:ca:0b:04:67:f2:bd:c6:f6:1c:9d:02:a5:16: e4:f3:1c:26:0e:79:22:21:29:9e:8e:4a:23:8a:75: d2:07:30:3c:fc:f9:ac:32:f5:cf:45:ee:dd:00:1e: f6:5c:80:b6:e1:68:7b:db:f6:54:1e:39:aa:65:f6: 3f:92:cb:1c:25:4b:b2:fd:0b:5a:80:f6:92:6d:bd: 18:6c:03:85:9a:aa:ce:7a:6b:64:df:8e:e2:2d:84: 0b:74:8c:ce:d4:ca:83:56:ea:19:26:01:8b:fb:c2: da:4d:0f:35:aa:ec:fb:1f:43:8e:cd:e6:06:56:0b: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D4:48:A7:98:42:E2:ED:85:29:07:88:9E:C8:FD:0A:F5:96:03:85 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4a:1c:1d:97:35:78:5d:21:30:e2:89:46:e4:42:d7:d5:eb: 8e:56:1e:73:4e:e3:b7:2b:b1:17:1d:5f:57:e1:94:5b:e4:86: d5:db:8b:bb:e7:63:4e:f9:35:ff:13:d3:44:0f:e7:5f:8e:48: b8:fa:1c:83:b3:21:66:c6:c3:1a:f4:15:9a:7e:44:a3:ed:3f: 8e:b1:bd:34:56:fc:22:79:f7:5d:0f:c2:0e:d2:11:b3:c3:23: 87:b0:5a:48:26:9e:bf:35:17:8e:29:a9:6a:0a:80:6b:7e:0e: 81:a4:52:a2:c2:82:0e:f4:b3:a0:72:35:c7:59:71:3c:f5:05: fc:0b:a8:8c:ed:6c:05:01:1a:70:5a:a4:6b:8d:6a:9d:61:ad: 49:3e:8e:c0:30:5f:11:30:ef:fa:88:ac:03:a7:c0:74:b5:ac: 8f:24:0c:fe:8c:e1:81:c9:8c:64:c3:67:e0:9b:71:53:f2:15: 08:36:7a:5a:c1:02:24:3d:bc:59:4b:69:b4:b4:15:f7:e9:56: e9:bc:8a:28:c5:c2:3d:ea:8b:4e:80:60:ea:0a:d6:91:71:2f: 4a:f0:a8:92:3c:b9:10:b8:58:0e:3b:c6:d8:cc:c3:1f:c1:87: 71:bb:59:19:f3:84:e1:e8:e1:ac:df:3b:7c:fb:f2:36:54:78: e3:a6:78:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwNTMwMjEyMzQ1WhcNMjUwNjA2MjEyMzQ1WjAYMRYwFAYD VQQDEw02ODNhMjFlMS1hNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nB5vlRZiUtj9MTFPuVZmxzpkv9/UzvGc+Tc1QRP6EBloynrdloW2Gi2QOzO fjUdmCjHJVFhxVlg5H3RSgYUPYbe6hon/hUlmm/JFTgEcIkwI+S/YdKReOhi0yXL 42H2BOrcFpAJONKdcikjda58ZNyzDGms8C3EbbZ9ZBrGnVgQcz2OSIbEAsoLBGfy vcb2HJ0CpRbk8xwmDnkiISmejkojinXSBzA8/PmsMvXPRe7dAB72XIC24Wh72/ZU HjmqZfY/ksscJUuy/QtagPaSbb0YbAOFmqrOemtk347iLYQLdIzO1MqDVuoZJgGL +8LaTQ81quz7H0OOzeYGVguTiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbUSKeY QuLthSkHiJ7I/Qr1lgOFMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaShwdlzV4XSEw4olG5ELX1euOVh5zTuO3K7EXHV9X4ZRb5IbV24u7 52NO+TX/E9NED+dfjki4+hyDsyFmxsMa9BWafkSj7T+Osb00VvwiefddD8IO0hGz wyOHsFpIJp6/NReOKalqCoBrfg6BpFKiwoIO9LOgcjXHWXE89QX8C6iM7WwFARpw WqRrjWqdYa1JPo7AMF8RMO/6iKwDp8B0tayPJAz+jOGByYxkw2fgm3FT8hUINnpa wQIkPbxZS2m0tBX36VbpvIooxcI96otOgGDqCtaRcS9K8KiSPLkQuFgOO8bYzMMf wYdxu1kZ84Th6OGs3zt8+/I2VHjjpniB -----END CERTIFICATE-----Generated at Sat May 31 17:27:45 2025 by rpki-client