$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft File: -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json) Hash identifier: Q6gpVrCpgWP65NPi7lXRVdFArb+cpxAjP1U5OLmt5Oc= Subject key identifier: 9F:55:1A:20:55:C5:3F:CB:49:EE:93:80:AD:9C:D8:6C:B8:4E:D4:3B Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56 Certificate issuer: /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:57:37 +0000 Manifest this update: Sat 31 May 2025 05:57:36 +0000 Manifest next update: Sat 07 Jun 2025 05:57:36 +0000 Files and hashes: 1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: SnwoJqWDO/YMpTrLWvdJLSxwnI9jrUp5Nvj8Ckq/0wo=) 2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56 Validity Not Before: May 31 05:57:36 2025 GMT Not After : Jun 7 05:57:36 2025 GMT Subject: CN=683a9a50-4ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:81:fb:19:3d:b5:1f:2a:a9:19:78:3d:17: 9b:ba:84:69:0e:e6:04:a5:f4:20:29:a9:35:1e:65: e4:5b:1b:d7:c2:5a:0f:91:b7:bb:55:bf:8d:80:12: 09:6c:ca:67:34:48:bc:99:4b:d5:a9:6a:b8:36:1a: f7:4b:5d:35:30:20:03:9d:0e:ad:dc:b2:88:74:7a: 3e:b8:9c:30:7f:84:f0:01:46:18:78:55:69:89:b2: 1c:4b:ac:6b:aa:ff:c3:b9:32:71:6e:d5:0c:18:24: 3e:81:53:b6:b7:8f:8b:d2:2c:5a:bc:90:24:fb:89: f3:47:e6:bf:c5:ca:62:f0:84:6a:63:48:19:a0:4f: cc:8a:67:bb:e8:42:70:f0:c4:a2:4a:69:f8:aa:09: ca:c2:e5:47:09:a2:45:3e:92:16:b0:2e:0b:85:33: a8:02:d1:bc:2c:68:fb:9d:62:ec:47:52:3f:be:aa: c4:5e:e0:be:fb:61:e3:ef:92:04:a2:26:ca:ce:83: 01:4f:41:de:26:9b:a9:a2:08:ec:b3:0c:87:1d:d8: 22:b1:9a:69:1e:b3:e0:2b:ba:73:26:ef:7b:b1:2b: df:e2:ab:2c:79:ff:8d:19:be:73:30:ad:7a:ba:c3: 44:e3:42:16:16:4a:d6:9b:cf:5e:6a:05:9c:ee:3c: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:55:1A:20:55:C5:3F:CB:49:EE:93:80:AD:9C:D8:6C:B8:4E:D4:3B X509v3 Authority Key Identifier: keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e0:14:d6:34:54:29:b6:7e:22:de:5f:56:62:bf:f0:2d:29: 5b:e2:05:87:c2:9b:c7:cc:bb:2d:4f:86:f5:b1:c1:be:e1:a7: 06:c4:d1:3e:83:66:fc:cf:40:77:f1:c7:74:bb:3e:68:2e:01: aa:b1:4b:0c:14:87:dd:39:8e:1b:e9:a6:cc:8a:9d:b8:4e:6b: ba:22:58:f9:db:ed:cf:0e:86:1d:8c:5c:3e:99:32:c9:89:ce: ed:79:a7:bd:d2:96:24:4d:9a:55:c6:ab:8a:49:b2:7f:6d:fb: 63:86:39:95:43:f9:01:68:64:97:7b:32:68:85:4c:f2:e0:c8: 8b:5c:4a:c5:ca:98:df:0d:9d:57:88:65:5e:83:6e:d5:a7:8d: 80:2b:cf:39:8c:f0:67:b6:f5:3c:80:5a:24:0b:e3:c5:80:35: 7d:ee:58:f6:7e:80:70:7d:1a:f8:3c:39:0b:00:ec:bc:a8:3e: 7e:5b:94:bc:2b:a6:2b:ff:d9:fd:cc:55:2a:0e:74:8f:d0:68: f0:ac:61:3c:a3:d8:c7:36:55:5d:23:15:7c:87:6c:1f:ad:18: 66:e3:57:11:95:eb:84:86:35:86:dc:10:35:50:19:75:2e:ba: da:38:83:17:11:14:9c:03:c3:8e:7a:29:c8:cc:e8:f7:93:52: 4d:c4:cc:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCODQxMTAvBgNVBAUTKEY4NUFGRDZFNzQ1QjBBMzQ3Q0E2OTZFRThFQkMxNjdE MDhBNDRGNTYwHhcNMjUwNTMxMDU1NzM2WhcNMjUwNjA3MDU1NzM2WjAYMRYwFAYD VQQDEw02ODNhOWE1MC00ZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXCB+xk9tR8qqRl4PRebuoRpDuYEpfQgKak1HmXkWxvXwloPkbe7Vb+NgBIJ bMpnNEi8mUvVqWq4Nhr3S101MCADnQ6t3LKIdHo+uJwwf4TwAUYYeFVpibIcS6xr qv/DuTJxbtUMGCQ+gVO2t4+L0ixavJAk+4nzR+a/xcpi8IRqY0gZoE/Mime76EJw 8MSiSmn4qgnKwuVHCaJFPpIWsC4LhTOoAtG8LGj7nWLsR1I/vqrEXuC++2Hj75IE oibKzoMBT0HeJpupogjsswyHHdgisZppHrPgK7pzJu97sSvf4qssef+NGb5zMK16 usNE40IWFkrWm89eagWc7jxvawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9VGiBV xT/LSe6TgK2c2Gy4TtQ7MB8GA1UdIwQYMBaAFPha/W50Wwo0fKaW7o68Fn0IpE9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI4NC8wRkI0REY5QzVC QTAxMUVGOTFEMzBFNUVDNEY5QUUwMi8tRnI5Ym5SYkNqUjhwcGJ1anJ3V2ZRaWtU MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1GcjliblJiQ2pSOHBwYnVqcndXZlFpa1QxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI4NC8wRkI0REY5QzVCQTAxMUVGOTFEMzBFNUVDNEY5QUUwMi8tRnI5Ym5SYkNq UjhwcGJ1anJ3V2ZRaWtUMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk4BTWNFQptn4i3l9WYr/wLSlb4gWHwpvHzLstT4b1scG+4acGxNE+ g2b8z0B38cd0uz5oLgGqsUsMFIfdOY4b6abMip24Tmu6Ilj52+3PDoYdjFw+mTLJ ic7teae90pYkTZpVxquKSbJ/bftjhjmVQ/kBaGSXezJohUzy4MiLXErFypjfDZ1X iGVeg27Vp42AK885jPBntvU8gFokC+PFgDV97lj2foBwfRr4PDkLAOy8qD5+W5S8 K6Yr/9n9zFUqDnSP0GjwrGE8o9jHNlVdIxV8h2wfrRhm41cRleuEhjWG3BA1UBl1 LrraOIMXERScA8OOeinIzOj3k1JNxMyF -----END CERTIFICATE-----Generated at Sat May 31 16:43:56 2025 by rpki-client