$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft File: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft (raw, json) Hash identifier: Wf1t9FdTpHiF+qagXyw26A5hT2EDA+FFKXvhpwmvS8Y= Subject key identifier: A2:69:2A:3B:72:D4:32:C7:AC:28:C5:29:EF:15:BB:40:5C:69:9F:71 Authority key identifier: EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 Certificate issuer: /CN=A917E458/serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft Manifest number: 08 Signing time: Sat 31 May 2025 07:41:19 +0000 Manifest this update: Sat 31 May 2025 07:41:19 +0000 Manifest next update: Sat 07 Jun 2025 07:41:19 +0000 Files and hashes: 1: 73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl (hash: 8+sTeXY2RodQ3V9Df5wpYwZfkA5cL8K/qbaN7MR07AI=) 2: 84C145D230D911F082B14974C4F9AE02.roa (hash: mP2QQWqHYPeK0WY2IdG9TiulT78Yh4TwS3eeLc1a48k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=EF762CC94219E09923A11B0D3C430E7F35C8D864 Validity Not Before: May 31 07:41:19 2025 GMT Not After : Jun 7 07:41:19 2025 GMT Subject: CN=683ab29f-a2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:0c:a7:7b:eb:29:a6:17:2d:10:1c:c1:1c: 05:97:5b:08:f1:84:ee:1e:ed:3d:33:c4:6e:d3:6a: de:71:d8:82:43:40:08:d9:18:6c:ae:75:b3:58:e4: 34:13:9a:21:4b:7f:83:f1:65:f9:dd:19:47:f1:2e: a5:4b:a1:af:c4:9b:76:64:79:f3:3f:ad:83:61:15: 3e:66:5f:74:57:83:0f:44:7b:7f:fb:5b:ca:54:3c: 25:8a:43:02:34:1a:74:84:d2:f2:65:1a:53:2b:ea: 77:33:16:01:36:d4:1e:83:4e:c4:f3:06:2d:54:32: 57:ca:48:1c:1b:18:dc:c8:69:e6:66:07:d7:b9:96: 77:24:3d:b8:94:d2:f5:c4:5b:9c:6c:d3:80:df:5c: b8:e2:a3:91:da:e6:19:21:5f:80:e4:86:73:a2:24: 5f:53:e4:2f:6b:8d:5d:7d:e8:cd:06:bd:18:21:f0: 39:3b:07:8f:fd:d6:e0:57:a5:d7:0f:5d:06:d9:29: b1:36:82:8c:83:b8:68:e6:6c:fb:97:af:14:0a:93: 25:be:a2:00:e2:73:13:d0:1d:57:64:2d:2a:27:82: dc:cd:a0:1a:55:c6:08:ec:a6:4c:80:6b:8e:6c:58: 49:6f:52:0b:24:3b:ba:1c:fd:a7:67:78:0c:cd:10: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:2A:3B:72:D4:32:C7:AC:28:C5:29:EF:15:BB:40:5C:69:9F:71 X509v3 Authority Key Identifier: keyid:EF:76:2C:C9:42:19:E0:99:23:A1:1B:0D:3C:43:0E:7F:35:C8:D8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/27BE840E30D811F0A7BE2E4FC4F9AE02/73YsyUIZ4JkjoRsNPEMOfzXI2GQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:38:0f:c1:3b:4a:ef:90:a9:36:48:00:85:fe:95:b2:c5:21: 47:d6:ee:74:31:00:d0:46:99:19:be:0f:b1:0a:73:49:3c:25: ac:c0:67:09:0b:8e:47:90:70:48:f7:6a:fb:79:ab:71:78:52: 6b:e7:81:c5:92:c4:3e:4e:19:f3:43:70:d6:40:72:26:57:0e: a8:cb:64:da:e5:e2:e3:a4:e7:64:10:82:f8:16:86:6d:af:3f: 9e:95:52:81:dd:3a:db:24:7c:48:de:c7:0b:1e:c5:d2:22:e5: 3d:f8:f4:33:29:5d:d8:50:af:7e:6a:7a:23:b0:b3:79:4d:ea: 95:c1:2f:02:cc:3f:98:84:64:35:d1:a1:11:cb:72:94:36:c0: b5:22:93:6c:f7:1e:81:a2:8f:bf:0a:9c:50:a3:5f:17:78:5c: f9:6c:6e:f3:0e:26:c9:44:d3:90:b9:64:dc:80:a7:60:1a:2d: 57:a3:0a:b3:5d:46:4c:0f:82:3c:43:5e:c9:d3:cb:e5:5e:ce: e8:40:ba:8a:12:ab:13:56:37:cf:1e:89:67:e5:58:91:bc:15: d6:0c:d3:d7:f9:84:a4:22:b9:ef:44:05:14:a2:80:17:be:85: da:6a:4d:7e:c5:cb:db:3a:d2:13:86:2a:e8:21:09:23:4c:ed: c4:68:86:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoRUY3NjJDQzk0MjE5RTA5OTIzQTExQjBEM0M0MzBFN0Yz NUM4RDg2NDAeFw0yNTA1MzEwNzQxMTlaFw0yNTA2MDcwNzQxMTlaMBgxFjAUBgNV BAMTDTY4M2FiMjlmLWEyYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC16Ayne+spphctEBzBHAWXWwjxhO4e7T0zxG7Tat5x2IJDQAjZGGyudbNY5DQT miFLf4PxZfndGUfxLqVLoa/Em3ZkefM/rYNhFT5mX3RXgw9Ee3/7W8pUPCWKQwI0 GnSE0vJlGlMr6nczFgE21B6DTsTzBi1UMlfKSBwbGNzIaeZmB9e5lnckPbiU0vXE W5xs04DfXLjio5Ha5hkhX4DkhnOiJF9T5C9rjV196M0GvRgh8Dk7B4/91uBXpdcP XQbZKbE2goyDuGjmbPuXrxQKkyW+ogDicxPQHVdkLSongtzNoBpVxgjspkyAa45s WElvUgskO7oc/adneAzNEDY9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUomkqO3LU MsesKMUp7xW7QFxpn3EwHwYDVR0jBBgwFoAU73YsyUIZ4JkjoRsNPEMOfzXI2GQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzI3QkU4NDBFMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpram9Sc05QRU1PZnpYSTJH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzNZc3lVSVo0Smtqb1JzTlBFTU9melhJMkdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzI3QkU4NDBFMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyLzczWXN5VUlaNEpr am9Sc05QRU1PZnpYSTJHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAY4D8E7Su+QqTZIAIX+lbLFIUfW7nQxANBGmRm+D7EKc0k8JazAZwkL jkeQcEj3avt5q3F4UmvngcWSxD5OGfNDcNZAciZXDqjLZNrl4uOk52QQgvgWhm2v P56VUoHdOtskfEjexwsexdIi5T349DMpXdhQr35qeiOws3lN6pXBLwLMP5iEZDXR oRHLcpQ2wLUik2z3HoGij78KnFCjXxd4XPlsbvMOJslE05C5ZNyAp2AaLVejCrNd RkwPgjxDXsnTy+VezuhAuooSqxNWN88eiWflWJG8FdYM09f5hKQiue9EBRSigBe+ hdpqTX7Fy9s60hOGKughCSNM7cRohjM= -----END CERTIFICATE-----Generated at Sat May 31 17:26:13 2025 by rpki-client