$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: jEkJJjEm/GdHN7WGOKTVrYHP0Y8qxSUsFc6MNuwhG5g= Subject key identifier: 96:9B:ED:A6:4A:A8:6A:14:CB:92:21:66:B0:BD:2E:D2:95:0A:FD:AC Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0DFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0DF3 Signing time: Fri 30 May 2025 18:02:16 +0000 Manifest this update: Fri 30 May 2025 18:02:15 +0000 Manifest next update: Fri 06 Jun 2025 18:02:15 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: z4yuI6phs2UjXI6ixGf/6qRwXoVjcd4jG+1fLNUJSv0=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: mx4Am+cBFSXiPddaACrFcI512PsDACEUWWDSLjunmeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3579 (0xdfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: May 30 18:02:15 2025 GMT Not After : Jun 6 18:02:15 2025 GMT Subject: CN=6839f2a8-61ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:dc:53:20:39:ed:a6:7f:6b:be:0c:aa:6f: 11:e0:c4:87:54:02:ac:40:2c:d7:5c:4d:63:6d:68: ff:e9:e7:c9:df:a1:6d:e6:9c:0e:96:c7:c3:72:85: 5e:d0:84:07:27:a3:af:f8:54:60:65:07:ba:fc:de: f9:e5:a7:68:65:ae:54:46:b2:42:3b:39:b6:80:ce: de:5c:6d:e7:7b:76:80:51:d8:16:f0:98:f4:cb:94: 78:18:fe:ac:d2:90:b9:0d:22:03:81:1e:3a:9b:f0: 34:55:24:35:be:d3:24:6f:ef:34:48:47:8a:05:89: 18:68:81:9d:83:a5:21:ac:30:20:cf:0f:08:82:5c: 37:c4:85:2e:54:e2:9a:9e:a6:45:22:90:d0:77:c5: 48:03:3f:dc:c4:74:20:78:6b:95:29:6a:02:96:ae: 45:5b:ba:b3:b0:c8:62:92:3b:bc:e6:6c:fa:2d:9e: d1:80:89:1c:e3:3c:92:3c:37:8a:d2:49:99:59:a6: 66:12:6a:ec:cf:f2:64:53:71:b1:43:89:8c:6d:38: 03:8d:89:73:d2:e9:3b:c7:1e:16:a9:96:1a:9e:5b: 32:4d:2a:ff:44:87:54:42:cd:c0:b1:37:cd:00:fe: a2:93:28:b8:62:31:3b:ee:f4:c0:91:5e:73:37:06: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:ED:A6:4A:A8:6A:14:CB:92:21:66:B0:BD:2E:D2:95:0A:FD:AC X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:88:5f:7e:58:9d:0d:79:eb:12:18:32:aa:0f:c8:63:ed:8e: e8:f5:e2:6d:59:85:8c:d4:69:43:f3:50:16:65:07:d2:d6:23: 33:4a:20:5c:44:37:71:d2:f0:32:f4:45:85:6f:61:34:8c:e0: 62:ae:e7:7b:fa:9b:15:45:bf:76:0e:52:c5:6e:59:da:9a:85: 73:de:ab:51:dc:3a:03:06:6a:cf:40:0c:15:f2:4b:cf:93:83: d1:ba:68:ea:cb:e6:b8:91:ee:78:3a:ad:ff:fa:30:6b:45:e3: 52:11:5b:09:ed:96:da:77:ba:94:a8:32:86:7d:a6:a0:aa:70: 12:34:96:50:98:77:39:83:7c:d6:7c:b5:03:0e:1b:f3:ee:48: 52:ac:b5:19:05:0c:d2:d1:54:83:46:d7:9d:0b:30:dc:df:1b: c4:ea:7d:63:29:7c:66:0c:a4:ec:78:a3:fc:d9:80:41:24:dc: 0d:64:0e:ef:6e:7b:7b:c3:b0:0f:f6:e5:1a:1e:8b:13:eb:6b: 97:92:56:26:5b:71:07:73:75:a4:4d:cf:f4:ad:23:0b:ec:5e: 34:ca:a0:0d:52:88:31:35:2b:0f:b0:6f:f1:c2:4e:ea:3e:7c: 35:97:5b:f2:fc:8a:ff:96:6b:c7:f0:ce:5c:d7:43:56:16:5e: 1d:72:dd:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjUwNTMwMTgwMjE1WhcNMjUwNjA2MTgwMjE1WjAYMRYwFAYD VQQDEw02ODM5ZjJhOC02MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+ncUyA57aZ/a74Mqm8R4MSHVAKsQCzXXE1jbWj/6efJ36Ft5pwOlsfDcoVe 0IQHJ6Ov+FRgZQe6/N755adoZa5URrJCOzm2gM7eXG3ne3aAUdgW8Jj0y5R4GP6s 0pC5DSIDgR46m/A0VSQ1vtMkb+80SEeKBYkYaIGdg6UhrDAgzw8Iglw3xIUuVOKa nqZFIpDQd8VIAz/cxHQgeGuVKWoClq5FW7qzsMhikju85mz6LZ7RgIkc4zySPDeK 0kmZWaZmEmrsz/JkU3GxQ4mMbTgDjYlz0uk7xx4WqZYanlsyTSr/RIdUQs3AsTfN AP6ikyi4YjE77vTAkV5zNwYc8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJab7aZK qGoUy5IhZrC9LtKVCv2sMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDiF9+WJ0NeesSGDKqD8hj7Y7o9eJtWYWM1GlD81AWZQfS1iMzSiBc RDdx0vAy9EWFb2E0jOBirud7+psVRb92DlLFblnamoVz3qtR3DoDBmrPQAwV8kvP k4PRumjqy+a4ke54Oq3/+jBrReNSEVsJ7Zbad7qUqDKGfaagqnASNJZQmHc5g3zW fLUDDhvz7khSrLUZBQzS0VSDRtedCzDc3xvE6n1jKXxmDKTseKP82YBBJNwNZA7v bnt7w7AP9uUaHosT62uXklYmW3EHc3WkTc/0rSML7F40yqANUogxNSsPsG/xwk7q Pnw1l1vy/Ir/lmvH8M5c10NWFl4dct0K -----END CERTIFICATE-----Generated at Sat May 31 17:07:38 2025 by rpki-client