$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: 2SXLxTB7NFE1YVr3CFbfrNqBQA2reLNZZutNaacEiWA= Subject key identifier: DA:53:2C:04:7F:38:1E:42:DC:44:17:D3:EB:46:15:C0:CF:27:90:02 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 17DD Signing time: Mon 02 Jun 2025 16:44:26 +0000 Manifest this update: Mon 02 Jun 2025 16:44:25 +0000 Manifest next update: Mon 09 Jun 2025 16:44:25 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: JmpEmBNLTdoDDdpqD3sUxH1Cp/vSVchz3FT+X+lXMDY=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6116 (0x17e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jun 2 16:44:25 2025 GMT Not After : Jun 9 16:44:25 2025 GMT Subject: CN=683dd4ea-19b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:cc:62:4c:ce:8a:bf:67:bb:1e:c0:2b:18: 2f:1a:6b:5f:81:23:bf:1e:6c:34:7d:d1:a0:0e:d6: d0:f0:ed:ab:72:9c:cc:0e:6c:eb:48:66:6c:5f:2e: da:74:14:d2:2c:4f:c7:30:a9:a0:f4:1b:d3:8f:d5: 75:dc:dd:ad:27:5d:58:47:87:76:f2:39:f2:7a:f9: fb:a0:e0:22:73:d2:1f:24:07:fd:d7:08:31:0b:59: 91:83:b5:38:ef:6e:cc:87:b5:73:00:94:9c:6d:7d: f7:b1:2e:ff:60:3c:ad:c0:36:35:c7:c4:e0:81:0e: 78:c5:e5:7b:4c:fe:5a:83:78:6c:b9:f0:e5:3b:b6: b3:fb:23:fa:aa:a6:4c:60:8f:7b:2d:31:b0:f8:54: 88:f1:d5:82:b4:60:e1:69:72:2b:eb:7a:22:2a:1c: b2:e5:50:e4:9f:46:ea:2f:51:8c:59:b2:fb:a4:3d: 29:18:ee:6e:c1:69:4c:81:00:7a:d6:df:6f:04:fd: 2c:cf:ae:03:2b:df:8f:43:3f:15:2c:44:5c:c6:f0: 38:54:27:fd:dc:c6:d2:43:d7:df:ad:75:bb:32:3a: 92:6c:97:b5:14:cd:bf:03:6d:f8:9c:cc:a6:b9:ae: d9:08:60:e6:63:13:e2:a1:f7:e5:1a:38:49:c5:9d: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:53:2C:04:7F:38:1E:42:DC:44:17:D3:EB:46:15:C0:CF:27:90:02 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:35:05:46:ed:5b:92:32:f9:0a:b2:2e:4e:48:87:aa:ac:f9: 01:83:20:67:0b:e5:35:be:66:73:e1:9c:5d:27:a9:17:d8:92: 6b:21:c6:e9:63:5b:b5:a5:b6:d6:46:fc:c4:93:3a:00:66:32: 24:eb:b9:ce:70:57:04:ee:7d:b4:1e:6f:9a:00:27:90:0e:42: 97:f5:65:5e:8b:72:d4:7c:c4:50:69:5d:e6:de:8a:bf:d1:18: c0:17:10:44:6a:1e:0e:cd:65:76:d1:1f:aa:cc:2c:70:92:b6: 02:23:2e:8a:15:68:f8:32:5b:9f:f4:6c:fc:68:88:a7:c3:d5: ef:18:77:da:40:16:06:cb:81:1a:7e:2f:64:3d:31:d1:b1:e1: 07:b3:12:45:29:f9:d7:73:21:38:07:de:fc:3f:83:41:a1:c1: 41:86:9d:63:d7:75:02:b0:69:fd:9a:13:f9:6b:e0:53:09:9a: 0d:23:d4:80:3f:a6:16:95:6a:a7:df:7d:41:15:d7:79:ca:38: a4:1f:6f:2d:7a:47:25:79:92:3b:17:aa:ee:69:c1:8c:e9:f7: 4d:68:f2:bd:4e:20:a5:e4:e9:38:45:2c:9a:4c:92:9d:90:49: 84:63:1b:b0:cc:ac:31:80:42:84:f8:4a:e0:cd:a7:1e:d2:56: af:f1:3d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNjAyMTY0NDI1WhcNMjUwNjA5MTY0NDI1WjAYMRYwFAYD VQQDEw02ODNkZDRlYS0xOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtezMYkzOir9nux7AKxgvGmtfgSO/Hmw0fdGgDtbQ8O2rcpzMDmzrSGZsXy7a dBTSLE/HMKmg9BvTj9V13N2tJ11YR4d28jnyevn7oOAic9IfJAf91wgxC1mRg7U4 727Mh7VzAJScbX33sS7/YDytwDY1x8TggQ54xeV7TP5ag3hsufDlO7az+yP6qqZM YI97LTGw+FSI8dWCtGDhaXIr63oiKhyy5VDkn0bqL1GMWbL7pD0pGO5uwWlMgQB6 1t9vBP0sz64DK9+PQz8VLERcxvA4VCf93MbSQ9ffrXW7MjqSbJe1FM2/A234nMym ua7ZCGDmYxPiofflGjhJxZ2DFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpTLAR/ OB5C3EQX0+tGFcDPJ5ACMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBANQVG7VuSMvkKsi5OSIeqrPkBgyBnC+U1vmZz4ZxdJ6kX2JJrIcbp Y1u1pbbWRvzEkzoAZjIk67nOcFcE7n20Hm+aACeQDkKX9WVei3LUfMRQaV3m3oq/ 0RjAFxBEah4OzWV20R+qzCxwkrYCIy6KFWj4Mluf9Gz8aIinw9XvGHfaQBYGy4Ea fi9kPTHRseEHsxJFKfnXcyE4B978P4NBocFBhp1j13UCsGn9mhP5a+BTCZoNI9SA P6YWlWqn331BFdd5yjikH28tekcleZI7F6ruacGM6fdNaPK9TiCl5Ok4RSyaTJKd kEmEYxuwzKwxgEKE+Ergzace0lav8T0H -----END CERTIFICATE-----Generated at Mon Jun 2 21:30:47 2025 by rpki-client