$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: wpo1Bge/iPzSqYh60bq5RdOJygfuNLqvXXF7uRfedZI= Subject key identifier: 8E:80:68:78:8F:95:14:42:B9:A2:12:DD:56:D3:C4:BC:53:BE:B7:B3 Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 0508 Signing time: Fri 30 May 2025 23:51:14 +0000 Manifest this update: Fri 30 May 2025 23:51:13 +0000 Manifest next update: Fri 06 Jun 2025 23:51:13 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: ebYI/OySosEBtX5F8PfVZC7el6y1M7UWUKGihdBJh/o=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: GBlJBvL9mw9TcJgwkIpDEFzq0c16HJn6FF84wJKDCP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: May 30 23:51:13 2025 GMT Not After : Jun 6 23:51:13 2025 GMT Subject: CN=683a4471-68a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:76:7a:f7:b7:bb:36:56:ff:35:6a:93:13: 2a:e7:b6:43:4f:81:71:ad:36:c6:6f:cb:72:1d:d2: c8:54:96:36:f3:21:c1:65:32:80:48:fd:70:ad:0f: 85:cc:58:45:ea:ca:b0:15:e0:47:61:87:89:d3:03: 1d:f7:88:fd:be:bb:49:4a:20:6d:61:57:cf:65:a3: ea:9c:89:6e:09:bd:37:b4:dd:48:e6:a5:ff:6c:ad: 63:07:f2:74:05:e9:f6:1c:27:8e:ef:89:24:69:b4: d2:0d:4b:4a:ed:53:85:70:8b:a0:80:f0:46:aa:11: 15:43:f4:05:7d:b9:a9:5b:36:c2:fd:97:87:10:e7: 18:3a:63:f0:7e:d2:7d:4a:34:89:ba:3b:b1:65:29: ae:43:66:29:38:d1:6f:ac:89:5e:7c:c4:a3:7f:fc: 31:83:ec:b6:d2:75:2d:db:de:91:cc:f3:3d:e3:ed: 98:14:6c:17:b5:35:bc:df:da:b2:cb:61:0b:c9:0d: 83:e5:fb:ca:4b:5c:3e:dd:05:bf:19:5e:0e:e2:04: 95:c6:56:65:4a:42:6e:3e:f9:2f:04:51:38:20:4d: ff:7c:07:b3:45:2c:63:a5:86:99:26:53:ae:67:40: 76:6e:56:3f:66:af:97:9b:0f:3a:cc:a2:6f:59:39: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:68:78:8F:95:14:42:B9:A2:12:DD:56:D3:C4:BC:53:BE:B7:B3 X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f2:16:13:7f:ea:e4:d8:a7:67:3d:fa:52:ab:43:f9:4b:b9: c1:77:0d:f4:3c:a5:06:ab:6e:66:0b:83:fa:ac:ad:55:d4:66: c2:c0:59:52:fa:81:3e:e9:c8:e8:63:74:6c:fa:2c:80:9e:a7: 34:d8:36:5d:6e:d7:79:b9:fd:f0:58:4c:ad:65:8b:f2:ea:bf: 9b:c4:53:68:bd:80:0e:d4:d5:02:e3:84:df:94:27:0d:84:fd: fb:26:6d:1e:75:63:20:c1:64:17:6e:27:c8:2d:3e:d8:60:0b: 08:63:12:e0:07:83:c5:90:7a:b1:9b:8d:99:8a:85:00:5e:f7: 9b:b3:0d:e2:93:ab:59:30:b7:3a:59:8c:4c:b3:e9:bc:0b:d1: 51:b1:26:47:72:67:07:92:2d:f0:07:83:24:12:6d:87:f8:08: 34:f0:9b:a8:8e:98:66:38:35:2e:37:87:42:59:23:33:71:00: d4:14:2d:f6:d6:bb:da:d2:52:a2:9d:4d:7e:f4:c4:9b:72:2b: ca:69:76:e8:17:c7:63:9e:84:49:db:61:14:b7:32:ba:21:5f: f0:87:f4:02:68:4d:61:b1:03:c8:09:14:b7:82:7a:c2:b7:a6: 2f:d7:a3:9b:34:46:e0:f3:ae:30:4f:a4:d7:46:8d:f5:5e:88: ce:87:d7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjUwNTMwMjM1MTEzWhcNMjUwNjA2MjM1MTEzWjAYMRYwFAYD VQQDEw02ODNhNDQ3MS02OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Y12eve3uzZW/zVqkxMq57ZDT4FxrTbGb8tyHdLIVJY28yHBZTKASP1wrQ+F zFhF6sqwFeBHYYeJ0wMd94j9vrtJSiBtYVfPZaPqnIluCb03tN1I5qX/bK1jB/J0 Ben2HCeO74kkabTSDUtK7VOFcIuggPBGqhEVQ/QFfbmpWzbC/ZeHEOcYOmPwftJ9 SjSJujuxZSmuQ2YpONFvrIlefMSjf/wxg+y20nUt296RzPM94+2YFGwXtTW839qy y2ELyQ2D5fvKS1w+3QW/GV4O4gSVxlZlSkJuPvkvBFE4IE3/fAezRSxjpYaZJlOu Z0B2blY/Zq+Xmw86zKJvWTlkjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6AaHiP lRRCuaIS3VbTxLxTvrezMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT8hYTf+rk2KdnPfpSq0P5S7nBdw30PKUGq25mC4P6rK1V1GbCwFlS +oE+6cjoY3Rs+iyAnqc02DZdbtd5uf3wWEytZYvy6r+bxFNovYAO1NUC44TflCcN hP37Jm0edWMgwWQXbifILT7YYAsIYxLgB4PFkHqxm42ZioUAXvebsw3ik6tZMLc6 WYxMs+m8C9FRsSZHcmcHki3wB4MkEm2H+Ag08JuojphmODUuN4dCWSMzcQDUFC32 1rva0lKinU1+9MSbcivKaXboF8djnoRJ22EUtzK6IV/wh/QCaE1hsQPICRS3gnrC t6Yv16ObNEbg864wT6TXRo31XojOh9e0 -----END CERTIFICATE-----Generated at Sat May 31 16:50:44 2025 by rpki-client