$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: /t0Wx+eH96XlIA9eZCneMTX3IvloiPVbDZ4Q55zavek= Subject key identifier: B5:A5:54:91:3D:6A:4E:55:C8:23:5A:3F:95:31:1F:F9:6E:7B:E3:18 Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 02E8 Signing time: Sat 31 May 2025 01:37:55 +0000 Manifest this update: Sat 31 May 2025 01:37:55 +0000 Manifest next update: Sat 07 Jun 2025 01:37:55 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: 6EXuI4PNiYN7vlWj6bmuP7WYr3cRDu/jw9IZuVOCZS4=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: WMqw6puvAMI/KOIEmj7+KVGtQT9V3R2V9xclcYWsYsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: May 31 01:37:55 2025 GMT Not After : Jun 7 01:37:55 2025 GMT Subject: CN=683a5d73-8b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:ad:93:af:bc:83:85:b0:91:28:01:7c:85: e9:c5:9b:6f:80:62:61:26:6a:38:33:d7:b5:e7:9a: 66:2c:d2:46:87:e3:b0:21:e3:95:ce:2f:ac:79:fe: 92:37:cf:6f:d7:79:0c:04:98:d2:ea:80:07:70:cb: 8b:07:27:83:04:af:62:90:c4:f8:c2:38:25:93:be: 5e:24:9c:cd:14:43:3e:a6:9b:12:90:25:9a:94:34: 49:a6:75:dc:59:7a:5d:fa:b2:00:a1:92:a6:8e:23: b3:d7:c0:92:69:50:3b:bd:e6:04:4e:7b:5d:7e:1c: d5:00:39:67:65:42:05:b9:f7:4f:1d:b2:8a:de:5c: 52:16:1b:ae:a5:e4:78:a6:48:4c:22:5e:06:0d:c9: 7f:b1:8f:da:91:46:e5:e5:c8:4f:f9:3d:a0:68:70: af:8b:4c:70:5a:d3:4f:3d:0e:9d:b2:19:7a:11:2e: 49:48:ef:18:f6:11:ae:92:de:45:9b:aa:4c:3f:25: 28:b4:2a:a8:a1:57:f6:61:67:76:98:59:ec:f6:87: f1:e7:d0:75:a6:df:b0:e8:46:a3:1e:9a:72:5c:ec: 02:76:f8:ae:95:74:d8:fa:83:78:eb:5b:cb:a5:99: f4:81:00:3a:7a:0e:ad:22:68:11:b0:d0:d1:ed:14: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:54:91:3D:6A:4E:55:C8:23:5A:3F:95:31:1F:F9:6E:7B:E3:18 X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:20:44:f3:e7:76:eb:33:8e:e1:6b:f6:e6:17:c8:05:d7:65: f4:5a:a7:f3:70:9b:90:de:d5:bb:28:55:d2:3c:06:61:4d:26: bd:6c:d6:bc:bf:bb:6f:23:d4:0b:3e:4b:ae:09:a4:8d:31:54: 2e:f6:05:4a:ec:0c:aa:14:58:2d:db:6d:a8:62:99:9d:0f:8b: 97:81:6b:ec:07:07:5a:51:f7:a2:28:cc:5b:0f:7d:32:77:1c: f2:db:ce:2c:c3:cb:a0:4c:fa:c2:82:23:6d:79:52:56:72:9b: e3:15:31:c6:e7:dc:b2:76:ec:69:ae:0d:f3:f7:e4:07:c3:2f: c7:0c:7d:c2:8a:f9:ab:55:ef:cd:00:4c:e2:8f:ae:7a:c1:46: 52:42:8a:08:1b:16:d7:93:2c:30:2e:4f:8a:74:64:68:5f:4a: 68:e4:f2:de:ef:46:5f:97:5d:99:11:bd:3c:57:12:27:3c:a4: 13:fa:de:e2:48:f8:14:97:81:6e:7e:89:a1:4e:e0:7e:69:51: 3e:53:9e:f4:6c:d6:0c:83:80:e2:b6:64:27:62:72:4c:b1:5b: 51:4b:50:71:5b:e8:2f:38:dd:ed:01:b0:c6:f2:7a:fc:d5:35: 1f:e8:e4:a0:86:91:d6:6f:38:91:78:15:d8:82:a8:fd:73:3b: 0f:f4:8e:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUwNTMxMDEzNzU1WhcNMjUwNjA3MDEzNzU1WjAYMRYwFAYD VQQDEw02ODNhNWQ3My04YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtatk6+8g4WwkSgBfIXpxZtvgGJhJmo4M9e155pmLNJGh+OwIeOVzi+sef6S N89v13kMBJjS6oAHcMuLByeDBK9ikMT4wjglk75eJJzNFEM+ppsSkCWalDRJpnXc WXpd+rIAoZKmjiOz18CSaVA7veYETntdfhzVADlnZUIFufdPHbKK3lxSFhuupeR4 pkhMIl4GDcl/sY/akUbl5chP+T2gaHCvi0xwWtNPPQ6dshl6ES5JSO8Y9hGukt5F m6pMPyUotCqooVf2YWd2mFns9ofx59B1pt+w6EajHppyXOwCdviulXTY+oN461vL pZn0gQA6eg6tImgRsNDR7RTxgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWlVJE9 ak5VyCNaP5UxH/lue+MYMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5IETz53brM47ha/bmF8gF12X0WqfzcJuQ3tW7KFXSPAZhTSa9bNa8 v7tvI9QLPkuuCaSNMVQu9gVK7AyqFFgt222oYpmdD4uXgWvsBwdaUfeiKMxbD30y dxzy284sw8ugTPrCgiNteVJWcpvjFTHG59yyduxprg3z9+QHwy/HDH3CivmrVe/N AEzij656wUZSQooIGxbXkywwLk+KdGRoX0po5PLe70Zfl12ZEb08VxInPKQT+t7i SPgUl4FufomhTuB+aVE+U570bNYMg4DitmQnYnJMsVtRS1BxW+gvON3tAbDG8nr8 1TUf6OSghpHWbziReBXYgqj9czsP9I41 -----END CERTIFICATE-----Generated at Sat May 31 17:45:07 2025 by rpki-client