$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: YKNzcnHSC1CvwZv0gBc0Q0M0O3OSw9dXY2mndiyIwrY= Subject key identifier: D9:4A:3F:30:10:87:30:3F:78:7F:8C:20:90:F5:1A:78:36:C4:14:76 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 0356 Signing time: Sat 31 May 2025 01:15:36 +0000 Manifest this update: Sat 31 May 2025 01:15:35 +0000 Manifest next update: Sat 07 Jun 2025 01:15:35 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: JwvYAH0s0DY214FI0/j5zZ8mNUgE/4hmzxufRpUghUg=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 4: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: 5rm3oqRl26penC4ZlBUixk7pYEojJ8/qGcU/gCHvkcY=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 31 01:15:35 2025 GMT Not After : Jun 7 01:15:35 2025 GMT Subject: CN=683a5838-1d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:20:e6:61:c8:0c:f3:3b:35:09:c3:b3:8d: f2:f2:f5:9e:58:6c:14:0f:bc:e7:36:4b:f0:f5:f3: 59:92:45:fc:7e:75:62:da:70:4b:81:25:de:94:22: 92:ab:df:61:ca:70:68:16:d6:b3:42:0c:ac:e0:57: f0:35:42:00:0c:18:ae:96:71:27:2d:d3:e4:8c:48: 98:4b:d5:6a:a5:d4:26:21:58:ff:8c:6c:51:a9:df: ad:9a:c6:17:9c:4e:a6:61:31:e0:9c:78:9d:56:67: e1:ec:ab:bc:97:c4:df:0e:ae:cf:89:60:59:17:c7: 81:26:b1:59:62:7d:bf:7b:6f:dc:f5:a2:61:3a:83: 87:94:7d:99:2a:98:b8:f3:75:77:91:1a:5d:c4:52: 0a:6a:f7:cb:1b:fb:ff:0e:0d:04:c0:dc:18:8a:6a: 53:78:83:20:ac:25:50:ce:6f:15:2a:09:fc:b2:16: 4c:21:8a:7f:39:88:17:d3:6d:1e:2e:5c:7a:4b:a8: 11:17:80:2a:39:06:f9:df:53:f4:bf:c0:b1:c1:a1: 15:24:3b:f6:5b:32:5c:cc:a4:d4:37:83:e2:30:f9: af:ab:a6:64:08:97:50:74:06:9b:50:b2:c0:7a:15: 5a:e0:af:c9:86:b0:e2:f9:f9:66:e1:11:4d:2b:1b: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4A:3F:30:10:87:30:3F:78:7F:8C:20:90:F5:1A:78:36:C4:14:76 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e7:66:7f:18:91:15:c4:c7:df:0c:68:e0:94:dc:ca:5f:e0: d8:af:4d:8d:dd:d8:78:27:1b:7b:a3:9a:0e:55:2c:1f:bb:6e: a6:19:49:af:cd:c1:7b:44:f8:ae:3e:a3:0f:1d:ba:97:70:d0: e5:84:da:a0:f9:4a:6e:66:06:7c:f1:0c:e7:7f:87:70:f3:e5: 9f:55:72:de:7c:3e:ba:ce:ab:63:15:4e:7f:8d:9b:e0:0a:e0: e7:50:2e:75:b3:8a:00:4d:38:d2:6a:4f:8d:14:a3:32:fc:2b: 8f:8a:33:c7:14:15:f7:2f:03:65:31:d4:6c:95:17:44:b4:c4: fb:94:70:42:f8:cb:61:ad:51:2c:03:82:3c:ae:3d:3f:ad:81: d4:96:a5:ed:ae:0f:ac:25:df:31:68:d5:c9:20:80:3b:f3:08: 81:db:cc:22:00:af:7b:7f:ef:b4:d6:06:23:e0:2d:9e:a8:1e: 60:41:ff:90:87:14:2c:f0:4c:23:d5:27:6c:4e:f3:27:96:6e: e9:49:e0:82:7e:9e:ce:ad:47:42:c8:52:61:8d:24:24:ba:4d: d6:b0:7d:f8:66:02:5d:84:16:0a:6f:68:f1:9f:22:35:83:29: ad:d1:8e:61:22:0e:f9:05:78:a5:51:c5:bf:b8:47:3a:78:82: 09:9d:0e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNTMxMDExNTM1WhcNMjUwNjA3MDExNTM1WjAYMRYwFAYD VQQDEw02ODNhNTgzOC0xZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDYg5mHIDPM7NQnDs43y8vWeWGwUD7znNkvw9fNZkkX8fnVi2nBLgSXelCKS q99hynBoFtazQgys4FfwNUIADBiulnEnLdPkjEiYS9VqpdQmIVj/jGxRqd+tmsYX nE6mYTHgnHidVmfh7Ku8l8TfDq7PiWBZF8eBJrFZYn2/e2/c9aJhOoOHlH2ZKpi4 83V3kRpdxFIKavfLG/v/Dg0EwNwYimpTeIMgrCVQzm8VKgn8shZMIYp/OYgX020e Llx6S6gRF4AqOQb531P0v8CxwaEVJDv2WzJczKTUN4PiMPmvq6ZkCJdQdAabULLA ehVa4K/JhrDi+flm4RFNKxtzFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlKPzAQ hzA/eH+MIJD1Gng2xBR2MB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM52Z/GJEVxMffDGjglNzKX+DYr02N3dh4Jxt7o5oOVSwfu26mGUmv zcF7RPiuPqMPHbqXcNDlhNqg+UpuZgZ88Qznf4dw8+WfVXLefD66zqtjFU5/jZvg CuDnUC51s4oATTjSak+NFKMy/CuPijPHFBX3LwNlMdRslRdEtMT7lHBC+MthrVEs A4I8rj0/rYHUlqXtrg+sJd8xaNXJIIA78wiB28wiAK97f++01gYj4C2eqB5gQf+Q hxQs8Ewj1SdsTvMnlm7pSeCCfp7OrUdCyFJhjSQkuk3WsH34ZgJdhBYKb2jxnyI1 gymt0Y5hIg75BXilUcW/uEc6eIIJnQ7o -----END CERTIFICATE-----Generated at Sat May 31 17:54:50 2025 by rpki-client