$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: FeZA7QSBW4062Hlyb++8U7f5sFChLNbll8Fha7GOuOg= Subject key identifier: A5:A1:0C:B2:B8:A8:A8:33:AF:9D:93:45:48:BC:B3:4B:56:83:03:0A Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 3509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 34CB Signing time: Sat 31 May 2025 14:39:52 +0000 Manifest this update: Sat 31 May 2025 14:39:52 +0000 Manifest next update: Sat 07 Jun 2025 14:39:52 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: D64RDzBTPlUwWO3DaxxhzOMNK8ewKDY2fZqfAbCDmX8=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: May 31 14:39:52 2025 GMT Not After : Jun 7 14:39:52 2025 GMT Subject: CN=683b14b8-ce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:c6:bb:1b:a7:c5:cf:d3:e0:36:5d:b2:5b: 37:6a:4f:01:20:59:34:0b:a9:0c:d9:ac:09:00:2d: d9:8e:70:f2:bf:fb:6d:18:8a:05:ff:e9:b0:83:18: a0:70:d4:0d:d4:95:51:31:d9:28:4a:30:f8:77:17: 6f:4d:4d:d2:cc:75:9c:6c:6b:96:ac:51:b7:03:96: 40:c6:e8:d9:4b:58:d4:c1:6b:a1:d7:3e:cf:c7:83: 37:2d:00:a1:47:22:67:dd:34:25:e3:c9:87:da:65: 5f:cb:ca:20:40:c6:03:d0:fe:cc:ad:0e:33:65:62: 21:4a:a4:92:b2:d6:84:b0:33:35:84:90:43:25:cb: eb:1c:85:6b:aa:a6:51:dc:23:b4:f5:15:84:7a:3c: bf:f8:fa:0a:69:74:3c:a8:c0:59:f3:63:79:46:8f: fe:f8:99:3c:88:e6:d4:79:e3:eb:8e:f7:39:eb:dd: ea:31:ab:e6:4d:38:07:41:c7:20:97:5e:25:69:4b: d2:6d:e0:2f:56:08:60:01:04:1f:30:b1:53:70:61: a1:68:a5:75:4f:4f:95:17:db:42:e2:94:de:35:3d: c3:bd:a7:5e:a1:dd:2f:24:49:01:5e:07:3d:c3:19: 33:d0:3c:6d:14:3b:a5:9f:52:ad:09:7c:9f:d3:1f: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A1:0C:B2:B8:A8:A8:33:AF:9D:93:45:48:BC:B3:4B:56:83:03:0A X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:52:40:59:77:4f:89:da:3e:79:d2:24:bb:b8:e7:2a:34:d4: 55:af:75:dd:cc:25:2b:4a:f4:55:90:93:0c:41:52:11:42:21: 1f:c4:0f:29:93:64:2e:3a:c1:3f:64:2e:09:a5:9f:66:df:5b: 52:ad:f0:66:1e:d2:db:17:5a:8e:90:35:1b:72:91:d9:a4:18: 64:9d:17:a7:37:91:1b:d4:fc:23:aa:e1:86:ed:a9:e2:4a:8f: 75:60:a3:45:f8:da:cd:cd:e0:6a:99:54:37:8e:93:78:19:b8: 69:34:e6:cc:c9:bc:9a:d9:37:07:6a:4f:4f:59:c7:1e:52:f7: 35:6f:dc:0a:47:6b:87:6e:aa:d5:05:9f:8e:21:7b:76:3c:21: dd:09:82:77:8c:36:77:a9:68:79:e8:f6:2e:95:5a:92:04:5e: 40:a6:89:9d:50:92:f2:2f:06:5f:9c:64:ed:64:22:85:68:42: 56:2c:ec:fd:3b:f4:9f:c2:36:f3:0c:fa:f9:f9:2d:f7:15:f9: 77:9b:04:0c:cf:d7:0e:60:e1:cc:2a:19:81:b2:0c:56:a7:a3: c9:93:0a:d8:e7:7f:a2:b2:53:20:99:29:83:d6:ba:79:eb:13: fd:2b:de:c6:68:64:43:89:64:c4:68:0c:a3:94:4a:c5:2c:1f: 84:fa:30:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUwNTMxMTQzOTUyWhcNMjUwNjA3MTQzOTUyWjAYMRYwFAYD VQQDEw02ODNiMTRiOC1jZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf/Guxunxc/T4DZdsls3ak8BIFk0C6kM2awJAC3ZjnDyv/ttGIoF/+mwgxig cNQN1JVRMdkoSjD4dxdvTU3SzHWcbGuWrFG3A5ZAxujZS1jUwWuh1z7Px4M3LQCh RyJn3TQl48mH2mVfy8ogQMYD0P7MrQ4zZWIhSqSSstaEsDM1hJBDJcvrHIVrqqZR 3CO09RWEejy/+PoKaXQ8qMBZ82N5Ro/++Jk8iObUeePrjvc5693qMavmTTgHQccg l14laUvSbeAvVghgAQQfMLFTcGGhaKV1T0+VF9tC4pTeNT3Dvadeod0vJEkBXgc9 wxkz0DxtFDuln1KtCXyf0x+21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWhDLK4 qKgzr52TRUi8s0tWgwMKMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUkBZd0+J2j550iS7uOcqNNRVr3XdzCUrSvRVkJMMQVIRQiEfxA8p k2QuOsE/ZC4JpZ9m31tSrfBmHtLbF1qOkDUbcpHZpBhknRenN5Eb1PwjquGG7ani So91YKNF+NrNzeBqmVQ3jpN4GbhpNObMybya2TcHak9PWcceUvc1b9wKR2uHbqrV BZ+OIXt2PCHdCYJ3jDZ3qWh56PYulVqSBF5ApomdUJLyLwZfnGTtZCKFaEJWLOz9 O/SfwjbzDPr5+S33Ffl3mwQMz9cOYOHMKhmBsgxWp6PJkwrY53+islMgmSmD1rp5 6xP9K97GaGRDiWTEaAyjlErFLB+E+jAC -----END CERTIFICATE-----Generated at Sat May 31 17:44:08 2025 by rpki-client