$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: bZiy6YrFjK/LcFsklGoQU3ai7B4kLXkICnyXYrXafKQ= Subject key identifier: 26:2A:45:34:7B:67:2C:07:8F:AD:E4:B0:39:DD:ED:82:65:05:79:BC Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 236F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 234E Signing time: Sat 31 May 2025 15:48:15 +0000 Manifest this update: Sat 31 May 2025 15:48:15 +0000 Manifest next update: Sat 07 Jun 2025 15:48:15 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: Nwt2/172bpejbZAnx4NJm/pgzH6ngaRk34QOfh5Q3xQ=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9071 (0x236f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: May 31 15:48:15 2025 GMT Not After : Jun 7 15:48:15 2025 GMT Subject: CN=683b24bf-404f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:e5:5f:c5:ce:33:3b:f5:4a:11:1a:7e:45: d1:bd:25:53:97:7b:1f:b7:7e:99:56:25:c8:a8:b5: 62:81:5b:ea:42:eb:1e:d1:05:fb:c9:e9:2b:97:a8: bd:8e:0a:0f:33:da:f2:d1:3c:86:99:ae:1a:42:01: fb:4a:05:5a:c7:98:b4:d3:db:fa:15:7e:d0:17:64: 2b:5e:d1:f9:b6:b9:89:f8:46:97:c8:12:13:e7:21: e7:09:40:93:0b:7e:3d:b7:c0:82:a4:43:c1:64:44: f0:cb:67:2a:a3:07:18:28:32:1f:32:52:4f:c9:51: b6:0a:af:38:b3:94:2b:6a:48:5a:ac:ee:a2:06:6c: ed:72:cb:c2:b7:fe:f1:e7:2a:f2:a4:a2:7c:3e:52: 36:00:9d:0f:cd:9d:54:df:22:6a:d1:d4:27:5c:6b: 8b:b4:eb:22:a0:ee:08:0f:8c:9e:6b:66:79:9f:ca: f0:44:05:42:ad:f4:36:0d:fd:7c:30:9b:60:72:bb: 70:d1:d5:f2:ff:45:37:4c:ce:01:92:01:ac:a5:d0: fd:a6:16:63:03:01:b9:bd:d3:ed:68:7a:98:1f:b0: 69:d2:c0:06:89:bb:68:8a:a7:82:9e:47:e5:a8:d3: 54:15:49:f9:1e:97:3a:cc:ef:28:03:cf:ec:0f:e4: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:45:34:7B:67:2C:07:8F:AD:E4:B0:39:DD:ED:82:65:05:79:BC X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0c:40:ab:aa:cb:56:a9:56:67:91:57:3c:d4:ee:90:d1:35: 13:e5:85:35:72:e9:a0:df:32:5a:65:53:8c:91:71:c8:ab:7a: 7b:33:dc:1a:59:43:22:ca:f2:16:5c:2e:65:cd:18:70:b0:eb: 52:b3:83:8a:a9:25:1c:23:09:4e:91:de:fb:64:e2:20:39:7b: d4:bd:e8:a9:13:df:03:52:2c:fa:eb:cf:ff:90:ed:5d:85:4d: d6:5b:f6:0a:7b:65:cd:dc:8d:d3:94:ae:05:c7:e5:6a:a9:5f: 32:fd:3b:0b:d5:ae:18:61:02:37:ad:f6:b3:e3:2a:5c:c3:52: c1:ca:41:89:c3:a3:ad:3c:ad:71:d0:db:c9:2f:f0:fe:46:32: be:cf:96:94:97:b2:87:0e:85:81:72:87:a7:a4:76:f3:99:54: 4a:7d:4c:45:7a:36:b7:cc:7e:b5:42:e1:07:61:b4:61:20:e2: 56:b7:54:95:b2:d9:3f:d4:72:37:d8:73:c4:0c:e8:de:79:32: 16:52:4b:a2:88:cc:68:cc:61:19:d3:26:1f:90:15:50:60:b1: c3:c9:0d:52:4d:e6:23:aa:62:b9:24:4d:05:aa:41:36:b6:86: f4:cf:67:6b:26:34:d9:63:0b:c5:d5:9f:31:5c:64:11:19:eb: fb:7f:b0:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwNTMxMTU0ODE1WhcNMjUwNjA3MTU0ODE1WjAYMRYwFAYD VQQDEw02ODNiMjRiZi00MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn3lX8XOMzv1ShEafkXRvSVTl3sft36ZViXIqLVigVvqQuse0QX7yekrl6i9 jgoPM9ry0TyGma4aQgH7SgVax5i009v6FX7QF2QrXtH5trmJ+EaXyBIT5yHnCUCT C349t8CCpEPBZETwy2cqowcYKDIfMlJPyVG2Cq84s5QrakharO6iBmztcsvCt/7x 5yrypKJ8PlI2AJ0PzZ1U3yJq0dQnXGuLtOsioO4ID4yea2Z5n8rwRAVCrfQ2Df18 MJtgcrtw0dXy/0U3TM4BkgGspdD9phZjAwG5vdPtaHqYH7Bp0sAGibtoiqeCnkfl qNNUFUn5Hpc6zO8oA8/sD+TyRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYqRTR7 ZywHj63ksDnd7YJlBXm8MB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSDECrqstWqVZnkVc81O6Q0TUT5YU1cumg3zJaZVOMkXHIq3p7M9wa WUMiyvIWXC5lzRhwsOtSs4OKqSUcIwlOkd77ZOIgOXvUveipE98DUiz668//kO1d hU3WW/YKe2XN3I3TlK4Fx+VqqV8y/TsL1a4YYQI3rfaz4ypcw1LBykGJw6OtPK1x 0NvJL/D+RjK+z5aUl7KHDoWBcoenpHbzmVRKfUxFeja3zH61QuEHYbRhIOJWt1SV stk/1HI32HPEDOjeeTIWUkuiiMxozGEZ0yYfkBVQYLHDyQ1STeYjqmK5JE0FqkE2 tob0z2drJjTZYwvF1Z8xXGQRGev7f7BP -----END CERTIFICATE-----Generated at Sat May 31 17:50:42 2025 by rpki-client