$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json) Hash identifier: Nzng5mMiTCCz4ZNrIXawwHQAuS+RiTLlEHm8qmdVfnM= Subject key identifier: 9F:2B:D5:2F:39:9C:EB:87:B8:2A:E1:6B:47:6D:11:6D:E2:9C:B5:06 Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Certificate serial: 0EC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft Manifest number: 0EB1 Signing time: Fri 30 May 2025 17:52:08 +0000 Manifest this update: Fri 30 May 2025 17:52:08 +0000 Manifest next update: Fri 06 Jun 2025 17:52:08 +0000 Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: tTEZb1TvKvb2FpHdVdeMVeJCOmDEbHefkEqNkncU/7A=) 2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: 6QYV9FQpqrhneDa4DXvOdtP1INWlFJdLfJWnJ4N05bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3781 (0xec5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Validity Not Before: May 30 17:52:08 2025 GMT Not After : Jun 6 17:52:08 2025 GMT Subject: CN=6839f048-a86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:63:53:47:c6:ae:8d:4b:3a:1b:41:e9:44: ea:05:2c:37:56:03:f2:b4:4b:6d:b8:8c:2d:28:1b: 58:12:62:39:35:a4:47:69:6a:be:d2:f4:63:25:1f: 41:47:a4:65:c9:81:2c:ea:95:6a:fc:04:79:30:aa: 80:2f:52:1a:90:ea:93:0a:07:af:a4:85:8a:91:92: 57:c1:07:14:c0:ab:84:c5:3f:48:e5:56:09:53:9a: f3:91:29:17:cc:ca:52:39:28:d2:4c:e9:97:38:44: 07:58:1e:9e:e9:86:25:d3:ac:2f:c5:d0:86:ba:c9: 40:8d:ad:6b:0b:38:df:10:77:ab:2d:3c:65:d1:49: 8d:a3:fa:7d:60:58:6f:f4:49:f8:43:02:03:d5:a8: a4:5d:b5:ff:54:59:17:01:dc:b5:1e:8f:16:88:3d: 3d:84:e7:73:05:53:9e:b4:93:f4:eb:37:f6:ef:67: c6:c1:f7:33:03:ab:2c:8b:38:8e:b3:73:29:ae:f4: 13:ad:8a:e5:b9:91:c5:cb:f8:24:8a:4a:03:fa:b7: b5:fd:0f:72:d4:be:d9:5b:88:66:62:20:b4:90:a4: 34:3b:e1:df:0c:a9:ff:82:a2:49:6d:71:84:9b:7b: 90:f4:77:00:4e:b6:77:a2:02:0f:bd:9c:fb:0b:09: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2B:D5:2F:39:9C:EB:87:B8:2A:E1:6B:47:6D:11:6D:E2:9C:B5:06 X509v3 Authority Key Identifier: keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:00:10:7a:8a:9b:69:8f:9b:2d:8d:d0:55:d8:b4:a3:c5:51: 84:64:34:1d:7e:3b:29:4c:43:38:59:ab:44:f1:65:ac:3c:a6: 0e:4c:c4:8f:ca:bc:16:1b:d6:c1:c2:d8:d4:e8:49:04:2f:6d: bd:7b:f9:8a:5d:88:f6:21:88:ad:36:8d:e0:f9:c3:d5:3b:8f: 72:91:07:15:e8:1b:8d:c8:21:ce:7a:1c:7c:6b:15:33:6e:c2: cf:e4:59:6a:25:c3:90:a1:57:32:30:59:fd:b9:f3:0c:38:2d: 0e:e0:06:59:79:4e:f5:47:47:29:d6:d3:33:42:c5:ef:23:b0: 90:ac:40:c7:ab:09:dc:7d:b8:ff:df:4a:76:f5:5f:54:e5:f6: 49:8e:4d:ae:4a:ed:62:9c:93:19:4e:bd:3e:d9:c4:25:cd:bd: f8:54:cd:d2:b7:4c:42:87:a6:8c:29:d1:40:4c:f9:a2:64:0f: 84:eb:31:65:12:8e:73:90:96:ce:b5:72:bf:0b:b9:19:18:c8: 01:fe:2f:83:12:4f:3a:ce:66:63:d0:16:a3:01:12:7d:26:6e: 48:d0:9f:06:9c:e0:07:82:10:1f:61:88:e2:c4:99:8a:c8:58: 7a:30:14:80:7a:f7:10:52:93:68:75:fb:ae:ef:4d:86:ab:5d: 6a:ca:a3:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMzUxMTAvBgNVBAUTKDI3QjkxNzZENzUwMUFDNDZGREEwMTkyNkJBQkU3RUJG MDk1RjkyOEUwHhcNMjUwNTMwMTc1MjA4WhcNMjUwNjA2MTc1MjA4WjAYMRYwFAYD VQQDEw02ODM5ZjA0OC1hODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS1jU0fGro1LOhtB6UTqBSw3VgPytEttuIwtKBtYEmI5NaRHaWq+0vRjJR9B R6RlyYEs6pVq/AR5MKqAL1IakOqTCgevpIWKkZJXwQcUwKuExT9I5VYJU5rzkSkX zMpSOSjSTOmXOEQHWB6e6YYl06wvxdCGuslAja1rCzjfEHerLTxl0UmNo/p9YFhv 9En4QwID1aikXbX/VFkXAdy1Ho8WiD09hOdzBVOetJP06zf272fGwfczA6ssiziO s3MprvQTrYrluZHFy/gkikoD+re1/Q9y1L7ZW4hmYiC0kKQ0O+HfDKn/gqJJbXGE m3uQ9HcATrZ3ogIPvZz7CwkVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8r1S85 nOuHuCrha0dtEW3inLUGMB8GA1UdIwQYMBaAFCe5F211AaxG/aAZJrq+fr8JX5KO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzNS9FQTREQ0ExQzhF REExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJFYjlvQmttdXI1LXZ3bGZr bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3a1hiWFVCckViOW9Ca211cjUtdndsZmtvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzNS9FQTREQ0ExQzhFREExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJF YjlvQmttdXI1LXZ3bGZrbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuABB6iptpj5stjdBV2LSjxVGEZDQdfjspTEM4WatE8WWsPKYOTMSP yrwWG9bBwtjU6EkEL229e/mKXYj2IYitNo3g+cPVO49ykQcV6BuNyCHOehx8axUz bsLP5FlqJcOQoVcyMFn9ufMMOC0O4AZZeU71R0cp1tMzQsXvI7CQrEDHqwncfbj/ 30p29V9U5fZJjk2uSu1inJMZTr0+2cQlzb34VM3St0xCh6aMKdFATPmiZA+E6zFl Eo5zkJbOtXK/C7kZGMgB/i+DEk86zmZj0BajARJ9Jm5I0J8GnOAHghAfYYjixJmK yFh6MBSAevcQUpNodfuu702Gq11qyqOb -----END CERTIFICATE-----Generated at Sat May 31 17:30:14 2025 by rpki-client