$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: Z2tB6mLT89K35tOrsVxufhABwgDfaeNZAa893eQF0Oc= Subject key identifier: 6D:4D:BC:D0:AE:C3:2F:AA:03:9F:D9:4C:64:1A:42:05:FF:A8:BB:4C Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0B01 Signing time: Fri 30 May 2025 19:32:55 +0000 Manifest this update: Fri 30 May 2025 19:32:55 +0000 Manifest next update: Fri 06 Jun 2025 19:32:55 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: Xpfh5W91/YQn2radKwuCGGdap+I+LgsUc9yM8UlB/Hk=) 2: FE836A62B19D11EC86ADF246C4F9AE02.roa (hash: GwwP8IDRreAQ5Nv9uamFq9DGquD+BWtdJPdVB793Iq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2828 (0xb0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: May 30 19:32:55 2025 GMT Not After : Jun 6 19:32:55 2025 GMT Subject: CN=683a07e7-e3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:5c:91:64:53:1b:27:26:06:93:1c:85:bd: 8c:b6:ae:75:c4:c7:28:da:17:39:4d:05:f4:11:43: 91:5e:64:98:a9:34:aa:6c:88:4d:06:7b:4f:3f:2f: ea:f4:4b:21:46:16:5a:45:07:be:b2:d2:20:a0:b5: a4:00:26:52:d0:58:b6:bb:1a:a4:94:cf:5d:3d:49: 6d:1f:79:3a:d7:e0:9b:44:dd:04:7c:be:2f:e4:73: 17:dc:71:bd:13:89:6c:10:f8:e1:6f:90:1c:9a:49: c7:d2:bc:4b:75:d4:7c:2b:6f:97:c6:be:18:4b:7f: 41:ca:a6:12:4c:cb:9f:7b:dc:c0:39:b5:24:cc:e2: cd:e8:5c:62:9d:6f:10:12:cf:b7:5f:bc:0c:d4:dd: 57:95:23:38:a1:51:98:12:4c:35:95:c4:7f:0f:c4: 40:14:3d:40:80:13:21:79:ba:45:09:ad:cb:7b:04: f1:fe:fa:8c:4c:18:2c:79:74:36:3e:02:82:7f:9a: ba:b5:3a:b8:d7:42:5c:7b:6c:61:d7:2c:78:49:bc: 59:0d:7e:b5:96:de:70:6f:dc:dc:6b:1f:c7:3f:5f: a8:2a:63:ed:09:45:a1:6e:c6:1f:0c:f5:e3:29:81: e7:7a:fa:64:e8:bb:6a:b5:05:ac:ed:33:c2:42:ad: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4D:BC:D0:AE:C3:2F:AA:03:9F:D9:4C:64:1A:42:05:FF:A8:BB:4C X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9c:0c:e7:de:4e:da:e6:12:cd:64:60:51:91:8f:06:90:e1: df:6c:79:7c:d2:33:66:30:cd:18:f1:19:13:7c:43:ef:07:0d: d4:b5:c6:ab:7b:f9:ef:00:46:eb:5a:bb:4f:ce:85:f7:6e:47: c4:c4:47:c5:4a:0f:b9:90:e0:8b:86:31:1d:e5:5f:9d:7e:f7: 5e:4f:fc:f5:70:b6:4c:d5:1b:2a:a0:d1:de:b5:cd:6f:8a:c7: d6:7a:36:c3:3f:88:87:fe:c2:52:79:0a:9d:1e:1e:00:68:14: 32:a2:40:32:69:6c:6a:5f:9e:b5:e5:0d:c5:b8:df:0c:bc:a9: 19:9b:6b:1e:d2:0b:36:51:cb:df:1c:0c:c9:55:f9:4c:dc:ea: 77:c0:c1:cb:49:2f:ad:19:d0:5a:95:5d:6f:99:4b:27:e6:cf: d4:bd:8f:c3:63:ed:a3:e5:2a:d3:c5:e3:59:c9:93:39:6b:53: e5:99:db:8f:ef:b4:26:d5:50:da:59:86:1f:05:51:da:f9:b7: 28:0d:78:9c:c7:d5:86:7c:56:48:f7:ee:9b:54:c2:72:f3:3c: 47:8f:da:40:d4:1a:85:41:02:a6:56:f4:16:9f:d3:a3:e6:d9: cf:0c:68:88:45:05:a4:98:06:20:63:bd:57:02:df:15:ba:ac: 4d:c2:e1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUwNTMwMTkzMjU1WhcNMjUwNjA2MTkzMjU1WjAYMRYwFAYD VQQDEw02ODNhMDdlNy1lM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78xckWRTGycmBpMchb2Mtq51xMco2hc5TQX0EUORXmSYqTSqbIhNBntPPy/q 9EshRhZaRQe+stIgoLWkACZS0Fi2uxqklM9dPUltH3k61+CbRN0EfL4v5HMX3HG9 E4lsEPjhb5AcmknH0rxLddR8K2+Xxr4YS39ByqYSTMufe9zAObUkzOLN6FxinW8Q Es+3X7wM1N1XlSM4oVGYEkw1lcR/D8RAFD1AgBMhebpFCa3LewTx/vqMTBgseXQ2 PgKCf5q6tTq410Jce2xh1yx4SbxZDX61lt5wb9zcax/HP1+oKmPtCUWhbsYfDPXj KYHnevpk6LtqtQWs7TPCQq3DmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1NvNCu wy+qA5/ZTGQaQgX/qLtMMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAanAzn3k7a5hLNZGBRkY8GkOHfbHl80jNmMM0Y8RkTfEPvBw3Utcar e/nvAEbrWrtPzoX3bkfExEfFSg+5kOCLhjEd5V+dfvdeT/z1cLZM1RsqoNHetc1v isfWejbDP4iH/sJSeQqdHh4AaBQyokAyaWxqX5615Q3FuN8MvKkZm2se0gs2Ucvf HAzJVflM3Op3wMHLSS+tGdBalV1vmUsn5s/UvY/DY+2j5SrTxeNZyZM5a1PlmduP 77Qm1VDaWYYfBVHa+bcoDXicx9WGfFZI9+6bVMJy8zxHj9pA1BqFQQKmVvQWn9Oj 5tnPDGiIRQWkmAYgY71XAt8VuqxNwuGH -----END CERTIFICATE-----Generated at Sat May 31 17:51:39 2025 by rpki-client