$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: 1U3GvaUGcZ5/D7/+zDLPTSV0ZbtO1tb+F9ZynPpVXSA= Subject key identifier: F1:C8:05:F1:2D:4B:1B:44:5A:C7:87:75:40:B7:64:95:A3:6A:93:20 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B4C Signing time: Fri 30 May 2025 19:19:46 +0000 Manifest this update: Fri 30 May 2025 19:19:46 +0000 Manifest next update: Fri 06 Jun 2025 19:19:46 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: 5YVqkpDKvI9NdGIhlSnHsypVbD69cYRwMsUJEVmdSdg=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: May 30 19:19:46 2025 GMT Not After : Jun 6 19:19:46 2025 GMT Subject: CN=683a04d2-404c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:f2:d0:c7:5f:85:aa:b5:e5:99:f5:65:7f: f0:9a:ff:20:c0:f4:84:d9:9b:80:0d:d6:c7:22:78: 01:5e:a3:1d:b3:e2:00:d7:21:56:e3:90:6e:91:4a: 4d:f0:99:e4:fa:e6:30:4c:e2:2d:e8:10:a1:5e:d6: b0:59:3e:ff:38:1a:5b:de:1b:2b:36:bc:a2:e9:fb: 44:a5:48:4e:2e:88:29:c7:3e:07:6a:0a:fd:f7:41: 36:61:76:37:63:6f:8a:4d:a7:1a:ab:fd:df:62:13: e3:5d:b5:14:20:fd:c6:12:76:71:ef:51:da:99:8a: d2:52:d3:5e:3a:de:5d:b8:b2:3d:dc:26:5e:8f:87: 38:f4:b7:21:0b:1b:1f:d2:59:a9:46:66:a8:1d:d3: e0:da:31:a2:1c:26:8f:56:9e:eb:b0:e4:52:b6:f3: 44:7c:a9:e7:18:16:ff:90:78:da:20:06:15:20:02: 23:e4:e4:9f:e2:46:b1:c9:75:b5:9c:be:1d:a3:31: 5d:3c:bc:73:66:20:84:d4:fd:b9:9f:bf:08:e0:50: 00:7b:d0:96:c6:3e:bb:2f:62:74:9c:51:61:1b:ed: 4d:a4:b6:ab:22:fd:77:ae:fe:99:5c:ae:c2:2d:e2: e6:24:eb:0f:eb:65:09:13:a9:d4:eb:99:4d:1d:de: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C8:05:F1:2D:4B:1B:44:5A:C7:87:75:40:B7:64:95:A3:6A:93:20 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a8:39:c7:d4:5d:b7:e1:92:7f:ac:03:6a:b3:df:c0:05:1e: ef:89:de:51:9b:6c:1d:54:73:14:83:42:d2:18:26:0e:c3:51: 71:ee:13:ab:c7:fe:52:06:3c:16:c5:05:d4:1c:bd:3b:74:ac: e5:42:18:4d:92:45:db:86:0d:97:28:85:f7:3b:25:70:63:4d: 41:6f:e0:c9:31:b4:4f:7d:98:4c:23:ea:e5:ba:e4:c4:61:f4: 99:e5:75:0f:38:85:36:06:18:c2:f9:aa:c9:2f:3a:ef:69:1f: c9:ce:df:d6:24:89:03:b4:f7:61:59:97:52:be:31:3b:0b:e4: 74:3c:67:eb:98:18:c0:e9:8a:20:12:fa:94:e3:a2:84:4b:b9: 3e:3c:27:54:9f:38:3c:98:a8:9f:7c:35:fc:1f:b0:36:9c:5a: 86:15:e5:4e:74:9a:98:8b:fb:fc:0d:57:b1:f8:b4:0a:1f:d6: 70:f8:57:96:4a:b5:d2:34:01:b8:61:e0:1e:b8:bf:7c:25:ae: a9:85:5d:fc:cf:bd:ef:69:ec:64:8a:dd:61:80:a1:fa:09:c6: b7:9b:e8:e3:a9:44:49:1f:8d:ae:48:2e:fa:58:e3:1a:29:a9: d6:82:99:c5:ee:45:a1:8e:86:5d:9e:1e:5b:2d:51:61:0b:5e: a2:ee:a1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwNTMwMTkxOTQ2WhcNMjUwNjA2MTkxOTQ2WjAYMRYwFAYD VQQDEw02ODNhMDRkMi00MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xny0Mdfhaq15Zn1ZX/wmv8gwPSE2ZuADdbHIngBXqMds+IA1yFW45BukUpN 8Jnk+uYwTOIt6BChXtawWT7/OBpb3hsrNryi6ftEpUhOLogpxz4Hagr990E2YXY3 Y2+KTacaq/3fYhPjXbUUIP3GEnZx71HamYrSUtNeOt5duLI93CZej4c49LchCxsf 0lmpRmaoHdPg2jGiHCaPVp7rsORStvNEfKnnGBb/kHjaIAYVIAIj5OSf4kaxyXW1 nL4dozFdPLxzZiCE1P25n78I4FAAe9CWxj67L2J0nFFhG+1NpLarIv13rv6ZXK7C LeLmJOsP62UJE6nU65lNHd4YMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHIBfEt SxtEWseHdUC3ZJWjapMgMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBqDnH1F234ZJ/rANqs9/ABR7vid5Rm2wdVHMUg0LSGCYOw1Fx7hOr x/5SBjwWxQXUHL07dKzlQhhNkkXbhg2XKIX3OyVwY01Bb+DJMbRPfZhMI+rluuTE YfSZ5XUPOIU2BhjC+arJLzrvaR/Jzt/WJIkDtPdhWZdSvjE7C+R0PGfrmBjA6Yog EvqU46KES7k+PCdUnzg8mKiffDX8H7A2nFqGFeVOdJqYi/v8DVex+LQKH9Zw+FeW SrXSNAG4YeAeuL98Ja6phV38z73vaexkit1hgKH6Cca3m+jjqURJH42uSC76WOMa KanWgpnF7kWhjoZdnh5bLVFhC16i7qHS -----END CERTIFICATE-----Generated at Sat May 31 17:56:25 2025 by rpki-client