$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: CcHU93C4sL9XVyz4++cT+jfOoH3IsfFKqFnB8q6+s/k= Subject key identifier: B2:81:80:14:0A:BE:B2:D5:1B:98:6F:07:53:98:E1:4E:8E:09:F5:4D Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0B9E Signing time: Fri 30 May 2025 19:11:06 +0000 Manifest this update: Fri 30 May 2025 19:11:05 +0000 Manifest next update: Fri 06 Jun 2025 19:11:05 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: AskWEYn/AHxqNr06ntgwTNh/c2z6sVb7muBnQi47CHM=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: dh5ymVZvIc7FqFzTtBzYEQEIMygfVmNQaVU/qA2YVgE=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: W6nL3EukqFE9RFLXXry6g4CH+1Dbd14zPnwD38PnUxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: May 30 19:11:05 2025 GMT Not After : Jun 6 19:11:05 2025 GMT Subject: CN=683a02ca-5673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:ac:66:d5:50:87:d5:e0:55:59:3d:de:1a: e5:07:50:f3:9a:43:d2:cc:9b:eb:9b:d4:eb:f0:88: 0f:6c:55:52:1a:7b:54:7d:a4:bd:99:95:8f:68:74: 63:60:f8:2e:43:91:88:23:18:db:2f:17:5d:6a:80: d6:a6:5b:88:7d:e6:3a:4e:bf:eb:01:0f:a2:56:ef: e2:a2:74:54:38:6f:a6:a5:b6:28:42:c2:fd:d1:7b: c8:45:12:33:85:a6:1e:43:0b:16:19:db:1b:4d:05: 2d:ea:8f:79:37:3d:2f:52:99:c6:78:67:ad:8f:59: b1:5e:52:72:36:f7:8a:25:fb:45:72:58:55:e3:54: 98:9f:d8:f5:4b:6b:db:74:a0:6b:1c:38:d3:9a:a6: cb:71:44:01:6e:93:a0:ab:f8:f9:c0:d5:f5:6c:d7: 12:ee:19:f3:15:21:68:86:40:6b:fe:99:0f:2a:12: f4:d3:4b:d3:82:66:66:5b:d9:b4:ca:de:a3:d3:2c: 7e:ae:e0:7f:9e:e4:94:32:31:23:2c:70:61:54:26: d8:22:b2:a0:d8:f8:a6:78:5f:bc:3c:1f:3a:03:f9: 08:1b:6a:a1:c1:ad:a9:5b:95:b5:8b:23:60:59:78: 07:9a:b3:47:00:4c:9b:8f:7a:28:73:94:f4:16:ee: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:80:14:0A:BE:B2:D5:1B:98:6F:07:53:98:E1:4E:8E:09:F5:4D X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ea:84:ad:4a:ca:42:94:5c:61:0e:38:b6:75:f8:3b:14:22: 75:44:1a:f5:bf:d5:96:60:03:97:a9:88:8d:70:e6:e6:ca:42: 50:48:3a:a3:af:90:7b:89:55:a5:ad:7f:a5:c4:3c:f2:e1:f8: 54:72:5d:a1:47:22:97:89:83:73:0d:81:2b:1c:ef:66:63:20: 3a:71:b0:de:8a:51:89:4c:65:ca:81:c8:59:23:b8:63:16:e3: 03:78:21:ce:8c:b9:21:a6:fb:52:ee:23:71:be:36:16:a5:9b: a8:06:fc:fb:8f:5e:c6:1a:67:fc:fc:7a:f0:34:97:24:17:bd: 91:96:2b:3d:8c:84:68:06:18:b8:da:3b:2d:b2:45:ef:b1:cb: b3:12:76:46:38:17:33:b3:67:f8:53:00:69:03:78:df:ee:2b: 60:6b:60:8c:bd:da:06:2d:45:c6:bb:24:aa:3d:cc:82:2d:f8: ca:91:33:5b:e0:83:65:7e:29:d3:26:1b:88:22:fc:07:13:62: b3:02:fa:8b:4e:aa:1a:91:7f:33:3e:8b:97:55:f7:a5:7d:40: a8:24:c5:cb:d3:25:a5:7f:29:30:42:04:50:8d:fa:5c:1d:bc: 17:c9:fc:6b:2c:5c:c4:0a:c5:a1:84:bc:94:28:58:f0:84:9a: c8:80:24:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjUwNTMwMTkxMTA1WhcNMjUwNjA2MTkxMTA1WjAYMRYwFAYD VQQDEw02ODNhMDJjYS01NjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3w+sZtVQh9XgVVk93hrlB1DzmkPSzJvrm9Tr8IgPbFVSGntUfaS9mZWPaHRj YPguQ5GIIxjbLxddaoDWpluIfeY6Tr/rAQ+iVu/ionRUOG+mpbYoQsL90XvIRRIz haYeQwsWGdsbTQUt6o95Nz0vUpnGeGetj1mxXlJyNveKJftFclhV41SYn9j1S2vb dKBrHDjTmqbLcUQBbpOgq/j5wNX1bNcS7hnzFSFohkBr/pkPKhL000vTgmZmW9m0 yt6j0yx+ruB/nuSUMjEjLHBhVCbYIrKg2PimeF+8PB86A/kIG2qhwa2pW5W1iyNg WXgHmrNHAEybj3ooc5T0Fu5EPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKBgBQK vrLVG5hvB1OY4U6OCfVNMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn6oStSspClFxhDji2dfg7FCJ1RBr1v9WWYAOXqYiNcObmykJQSDqj r5B7iVWlrX+lxDzy4fhUcl2hRyKXiYNzDYErHO9mYyA6cbDeilGJTGXKgchZI7hj FuMDeCHOjLkhpvtS7iNxvjYWpZuoBvz7j17GGmf8/HrwNJckF72Rlis9jIRoBhi4 2jstskXvscuzEnZGOBczs2f4UwBpA3jf7itga2CMvdoGLUXGuySqPcyCLfjKkTNb 4INlfinTJhuIIvwHE2KzAvqLTqoakX8zPouXVfelfUCoJMXL0yWlfykwQgRQjfpc HbwXyfxrLFzECsWhhLyUKFjwhJrIgCRO -----END CERTIFICATE-----Generated at Sat May 31 17:53:15 2025 by rpki-client