$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: XHp1YeXlD0lSTvicGR4ghbAUdLArYU6h6IwICB4ZjSs= Subject key identifier: B6:04:6B:2E:AA:20:BC:6E:9B:E7:10:37:F0:C4:7C:02:22:2D:90:EF Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0447 Signing time: Sat 31 May 2025 00:29:08 +0000 Manifest this update: Sat 31 May 2025 00:29:08 +0000 Manifest next update: Sat 07 Jun 2025 00:29:08 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: 418Pu0YAheVjYOaSiYMzGalytDjJwChOagSNKLDTA4Y=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: May 31 00:29:08 2025 GMT Not After : Jun 7 00:29:08 2025 GMT Subject: CN=683a4d54-3e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:2c:fd:44:eb:18:b0:8c:c5:01:16:2d:fe: f2:c2:bc:57:f1:01:ca:d5:d7:f7:0d:49:42:e1:c7: 3f:36:8d:52:0b:15:4f:5c:aa:92:c0:d4:1a:33:15: f3:0c:b9:d0:8f:3c:13:8b:92:25:83:d2:fe:15:2d: 36:ab:e0:f4:d4:45:3a:c4:e1:38:53:87:64:90:f0: f6:1b:41:bc:a4:69:ad:1b:0f:56:89:56:03:ed:8e: a9:b9:5b:26:48:9b:4e:03:2f:12:bc:b8:b1:61:5c: 53:40:d7:77:0c:26:01:8e:b6:56:2d:10:8b:74:9b: c0:cd:8c:80:3e:57:b3:64:cc:8b:4c:ee:92:b6:10: e7:01:fd:c6:fb:e2:e6:af:3d:bd:53:e3:fb:cf:f5: c6:f6:cc:1b:ce:78:18:a1:ed:c1:1c:4f:b7:39:9f: 14:3f:4a:de:6c:85:53:9f:81:6b:91:8f:6e:79:82: 76:8e:52:72:91:32:d6:d8:99:b7:93:c6:dc:af:4d: 38:0f:2e:22:14:72:93:97:a5:ea:52:62:9e:6c:a5: a9:ad:04:55:3b:79:ea:67:cf:c1:01:d2:4e:be:1f: 51:1d:b8:d5:be:41:1c:e9:f2:23:b8:b4:2d:66:14: 54:48:a5:9d:83:16:7b:2b:7d:f3:d6:57:9f:83:e8: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:04:6B:2E:AA:20:BC:6E:9B:E7:10:37:F0:C4:7C:02:22:2D:90:EF X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:95:c9:7c:5b:b1:5d:67:a4:b2:a3:2f:84:46:fc:29:92:fb: 86:02:30:95:81:d4:8a:7e:2f:06:95:5e:c3:0c:82:9e:48:7c: f3:69:d6:76:53:e2:18:37:92:79:04:b1:b7:bb:19:da:c7:e8: 4b:71:0f:da:d5:85:64:36:ed:29:bf:0a:74:e3:9c:5f:b4:93: 0d:fa:d3:1a:c6:f8:f7:c7:2e:f8:a9:3c:22:6a:39:78:85:9d: 1f:57:39:9c:a5:b4:b0:57:2c:04:c0:95:dd:ae:af:44:e9:c1: a8:13:ac:25:45:a4:c2:55:44:79:36:be:eb:4c:d2:16:d5:0c: 9f:ea:60:9b:27:18:fd:71:b0:fb:e0:10:1a:8c:2b:4a:3b:37: 60:59:fc:73:fc:ab:ab:43:b3:47:28:17:5f:ae:f7:27:b6:05: 09:bd:f8:05:51:d0:02:33:0c:11:2f:49:8a:ea:fa:2a:81:82: d6:0b:e1:e2:2d:bd:cb:e1:91:44:13:18:f3:1e:f7:46:0a:18: aa:85:96:b0:68:20:6d:37:3d:c8:78:df:f6:45:45:a4:64:9b: b3:98:86:8c:e9:20:b6:a3:f5:96:80:7e:87:e7:c2:84:07:21: 42:c1:4f:c2:a2:e7:f8:0d:f0:b4:06:b9:e9:97:4e:19:4f:66: 34:d6:83:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUwNTMxMDAyOTA4WhcNMjUwNjA3MDAyOTA4WjAYMRYwFAYD VQQDEw02ODNhNGQ1NC0zZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPos/UTrGLCMxQEWLf7ywrxX8QHK1df3DUlC4cc/No1SCxVPXKqSwNQaMxXz DLnQjzwTi5Ilg9L+FS02q+D01EU6xOE4U4dkkPD2G0G8pGmtGw9WiVYD7Y6puVsm SJtOAy8SvLixYVxTQNd3DCYBjrZWLRCLdJvAzYyAPlezZMyLTO6SthDnAf3G++Lm rz29U+P7z/XG9swbzngYoe3BHE+3OZ8UP0rebIVTn4FrkY9ueYJ2jlJykTLW2Jm3 k8bcr004Dy4iFHKTl6XqUmKebKWprQRVO3nqZ8/BAdJOvh9RHbjVvkEc6fIjuLQt ZhRUSKWdgxZ7K33z1lefg+hypQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYEay6q ILxum+cQN/DEfAIiLZDvMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNlcl8W7FdZ6Syoy+ERvwpkvuGAjCVgdSKfi8GlV7DDIKeSHzzadZ2 U+IYN5J5BLG3uxnax+hLcQ/a1YVkNu0pvwp045xftJMN+tMaxvj3xy74qTwiajl4 hZ0fVzmcpbSwVywEwJXdrq9E6cGoE6wlRaTCVUR5Nr7rTNIW1Qyf6mCbJxj9cbD7 4BAajCtKOzdgWfxz/KurQ7NHKBdfrvcntgUJvfgFUdACMwwRL0mK6voqgYLWC+Hi Lb3L4ZFEExjzHvdGChiqhZawaCBtNz3IeN/2RUWkZJuzmIaM6SC2o/WWgH6H58KE ByFCwU/Couf4DfC0Brnpl04ZT2Y01oPf -----END CERTIFICATE-----Generated at Sat May 31 17:17:34 2025 by rpki-client