$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: v78xc29lSKpV8eB1XDYiEK/PBIdGRximfUizjcRcCw0= Subject key identifier: 05:E9:C6:6C:61:3D:06:06:5C:64:6C:5C:1E:39:C8:36:E4:DF:3D:8B Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 053E Signing time: Fri 30 May 2025 23:38:36 +0000 Manifest this update: Fri 30 May 2025 23:38:35 +0000 Manifest next update: Fri 06 Jun 2025 23:38:35 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: PGiZv65r5wBlgtuK8GTSfNZ7a7WbehwdWwwGjVw3ZqM=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: AKQYRTBp1uq5xNSQ+35Oq/CNR0101RtjFiouleUDl3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: May 30 23:38:35 2025 GMT Not After : Jun 6 23:38:35 2025 GMT Subject: CN=683a417b-1eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:b1:92:b5:4a:51:cb:fa:a7:97:39:b9:60: d8:f4:fe:ea:bd:a2:5e:89:d8:f0:3e:ff:5e:48:1c: 07:96:5d:e8:2b:4b:77:ab:5c:cd:b1:f7:6f:05:5c: 8d:ad:41:7b:b7:0e:54:4f:8a:e2:6c:a4:ce:b9:07: b3:2c:87:8f:a5:6d:d6:09:b3:6f:4b:32:9b:ce:4f: d6:23:4a:71:c8:4a:1e:be:05:a9:68:89:ea:31:72: c5:f5:95:c9:a7:20:74:36:36:d9:72:66:03:c0:2e: da:56:d0:1d:11:13:6d:79:68:42:d6:2a:4e:08:c0: e0:fe:b4:1c:7f:1f:a8:05:ae:38:e0:dc:dc:a3:ed: 2c:fa:35:f7:45:e5:65:49:0a:dc:be:05:97:fa:e1: af:a2:5f:b2:3d:b7:00:f0:25:42:ec:13:68:fe:1b: 97:b0:86:16:a5:a3:d1:6f:46:14:58:f9:f1:f5:5c: 9d:6d:dd:8b:9d:27:0e:61:6d:02:ee:f2:ee:39:bb: 99:d2:89:f2:42:c0:f2:6d:d8:60:14:39:7f:5f:e0: 72:fd:03:44:53:e2:02:1c:76:8c:61:ec:ed:12:79: a8:dd:ad:9a:54:88:56:91:cd:1d:ab:51:11:f4:a7: 18:8a:6f:af:58:21:b9:ee:b8:29:48:6d:99:17:ac: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:C6:6C:61:3D:06:06:5C:64:6C:5C:1E:39:C8:36:E4:DF:3D:8B X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:d2:2e:f4:a3:83:f1:3a:25:98:9d:5d:1b:d6:9f:3f:d4:ab: 2b:f4:26:8c:f2:36:d1:53:7c:41:e5:eb:87:51:fb:07:3c:f3: a9:90:7f:c1:a8:23:84:2d:49:75:8f:16:6c:68:c6:53:f8:07: b2:5d:5d:71:05:52:c2:c2:10:a2:fc:ee:05:2d:5c:74:2f:4e: 07:c7:31:f7:93:03:4f:92:88:d5:74:d3:df:28:f1:fc:7b:62: ad:10:e8:fc:00:98:0c:1c:1f:71:5d:43:57:bc:1f:8f:ae:e5: f6:9c:3a:39:da:5e:9d:d4:da:ef:fc:8e:1b:90:ea:04:31:ea: d8:13:53:11:de:6e:92:cc:15:d6:60:00:b5:18:2c:6c:62:aa: 10:b5:0f:11:6a:31:64:96:db:04:8d:90:42:52:19:3d:51:c3: ca:c3:ce:63:76:f5:07:d3:72:ea:ec:8a:57:8f:d7:2a:b5:d7: 04:05:68:7b:32:60:04:72:28:2d:cf:21:ef:7e:e0:24:f3:80: 5b:60:00:d2:35:ba:cd:37:4f:e1:25:17:46:b5:30:c9:bd:a3: 9a:d5:23:f6:97:fc:d1:15:c6:be:a5:52:aa:d6:88:26:13:20: 43:48:00:86:d6:9f:32:fc:58:ea:a9:de:86:0a:11:fb:61:4d: 0a:cb:ef:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUwNTMwMjMzODM1WhcNMjUwNjA2MjMzODM1WjAYMRYwFAYD VQQDEw02ODNhNDE3Yi0xZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RGxkrVKUcv6p5c5uWDY9P7qvaJeidjwPv9eSBwHll3oK0t3q1zNsfdvBVyN rUF7tw5UT4ribKTOuQezLIePpW3WCbNvSzKbzk/WI0pxyEoevgWpaInqMXLF9ZXJ pyB0NjbZcmYDwC7aVtAdERNteWhC1ipOCMDg/rQcfx+oBa444Nzco+0s+jX3ReVl SQrcvgWX+uGvol+yPbcA8CVC7BNo/huXsIYWpaPRb0YUWPnx9Vydbd2LnScOYW0C 7vLuObuZ0onyQsDybdhgFDl/X+By/QNEU+ICHHaMYeztEnmo3a2aVIhWkc0dq1ER 9KcYim+vWCG57rgpSG2ZF6yyYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXpxmxh PQYGXGRsXB45yDbk3z2LMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDW0i70o4PxOiWYnV0b1p8/1Ksr9CaM8jbRU3xB5euHUfsHPPOpkH/B qCOELUl1jxZsaMZT+AeyXV1xBVLCwhCi/O4FLVx0L04HxzH3kwNPkojVdNPfKPH8 e2KtEOj8AJgMHB9xXUNXvB+PruX2nDo52l6d1Nrv/I4bkOoEMerYE1MR3m6SzBXW YAC1GCxsYqoQtQ8RajFkltsEjZBCUhk9UcPKw85jdvUH03Lq7IpXj9cqtdcEBWh7 MmAEcigtzyHvfuAk84BbYADSNbrNN0/hJRdGtTDJvaOa1SP2l/zRFca+pVKq1ogm EyBDSACG1p8y/Fjqqd6GChH7YU0Ky++t -----END CERTIFICATE-----Generated at Sat May 31 15:14:38 2025 by rpki-client