$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: VbMeFv2r1Gh0bqIURFgZkDVzKaVqZogWGg8SaMFuuM0= Subject key identifier: 43:91:7D:79:03:70:FF:60:62:64:CB:78:87:1B:69:36:8F:45:2D:9B Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 0853 Signing time: Fri 30 May 2025 20:56:13 +0000 Manifest this update: Fri 30 May 2025 20:56:12 +0000 Manifest next update: Fri 06 Jun 2025 20:56:12 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: 0uTGjDXyRzr+i/6EdoNojMF4HJN4+jf29cDZBR/c4ig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: May 30 20:56:12 2025 GMT Not After : Jun 6 20:56:12 2025 GMT Subject: CN=683a1b6d-ea67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:06:b3:48:6d:1d:ee:02:6c:83:da:c0:74: 71:f8:81:12:e5:b6:d3:0b:24:7d:f6:0d:f4:07:6f: 7c:94:2e:80:d4:56:8e:3f:a9:93:40:0f:25:97:83: 2e:8f:56:d1:65:17:c4:8b:25:39:4c:02:ad:36:fd: 39:2a:06:b3:bf:25:d9:40:86:04:90:8a:d6:ba:e9: cf:56:7b:ef:01:d5:68:57:63:41:70:28:f9:0f:1b: 50:62:ac:00:28:18:7a:ca:c4:62:18:dd:3b:d2:a3: 6f:3e:e7:ee:38:06:09:23:db:8a:65:3f:6f:dd:8b: d0:63:1a:d2:84:6e:f7:13:83:c9:30:ac:e1:aa:af: 44:d3:e6:a3:b7:79:10:38:3a:90:fe:3d:37:99:7d: 8d:29:1c:b5:28:8c:c2:09:2d:ea:36:07:84:9d:64: 22:69:94:e7:da:4e:9a:cf:4e:4c:7d:01:ed:96:3e: f6:20:f4:ef:0a:f8:e7:7e:b1:9d:16:27:5f:af:50: 23:1b:69:b8:2a:d7:df:df:15:40:b8:38:0e:62:13: c6:7c:10:75:be:4a:b1:91:58:d6:80:2f:4e:68:0a: 21:7a:cc:98:93:79:25:c7:c9:bd:a1:48:48:51:89: 5b:1b:2d:eb:cf:d6:b1:68:03:b8:44:8c:f7:a0:33: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:7D:79:03:70:FF:60:62:64:CB:78:87:1B:69:36:8F:45:2D:9B X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:80:98:ac:ac:b9:85:3a:67:11:71:d7:c4:1f:70:62:69:bd: 61:21:53:72:71:ad:5a:c7:7f:5d:4b:b1:8a:ca:08:5e:87:72: 38:08:85:4f:aa:b6:d4:6c:dd:bd:d5:f6:f5:0c:bd:d0:60:e3: 30:2d:54:f5:22:d7:73:e9:2f:39:c7:0e:31:83:38:df:8d:a4: a5:e4:79:51:e2:3f:f8:ac:52:a4:c4:17:9a:75:a5:00:55:fe: 8a:fd:f2:c1:2a:88:c3:60:97:bb:75:07:cc:a3:bb:9c:71:eb: a0:9b:b0:ad:36:89:51:70:c4:d7:ee:28:d2:06:80:2d:2b:9d: 4e:4e:6b:af:f2:23:16:60:8b:8c:29:e5:1f:3f:1e:2f:2f:7d: fd:8e:6e:f9:f2:78:96:46:02:62:06:2e:d4:3a:81:c7:91:c5: 83:d5:d1:75:96:12:d0:60:bc:b3:1d:70:e6:28:dd:90:4c:17: 79:8f:7e:dc:67:bd:33:c0:ba:01:b9:d9:49:70:ed:bf:9c:d9: 79:7b:32:6f:4a:b9:7b:ec:04:8d:fa:ac:20:5f:37:d7:ea:33: b1:9e:c3:c5:53:6c:0f:4c:eb:0f:d8:87:0f:4d:d5:65:a9:bc: 77:4f:e1:f2:35:9d:29:2c:a3:2a:26:6d:1f:6f:a4:a1:62:3d: 8e:bf:45:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjUwNTMwMjA1NjEyWhcNMjUwNjA2MjA1NjEyWjAYMRYwFAYD VQQDEw02ODNhMWI2ZC1lYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3UGs0htHe4CbIPawHRx+IES5bbTCyR99g30B298lC6A1FaOP6mTQA8ll4Mu j1bRZRfEiyU5TAKtNv05KgazvyXZQIYEkIrWuunPVnvvAdVoV2NBcCj5DxtQYqwA KBh6ysRiGN070qNvPufuOAYJI9uKZT9v3YvQYxrShG73E4PJMKzhqq9E0+ajt3kQ ODqQ/j03mX2NKRy1KIzCCS3qNgeEnWQiaZTn2k6az05MfQHtlj72IPTvCvjnfrGd Fidfr1AjG2m4Ktff3xVAuDgOYhPGfBB1vkqxkVjWgC9OaAohesyYk3klx8m9oUhI UYlbGy3rz9axaAO4RIz3oDMHdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEORfXkD cP9gYmTLeIcbaTaPRS2bMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEgJisrLmFOmcRcdfEH3Biab1hIVNyca1ax39dS7GKygheh3I4CIVP qrbUbN291fb1DL3QYOMwLVT1Itdz6S85xw4xgzjfjaSl5HlR4j/4rFKkxBeadaUA Vf6K/fLBKojDYJe7dQfMo7ucceugm7CtNolRcMTX7ijSBoAtK51OTmuv8iMWYIuM KeUfPx4vL339jm758niWRgJiBi7UOoHHkcWD1dF1lhLQYLyzHXDmKN2QTBd5j37c Z70zwLoBudlJcO2/nNl5ezJvSrl77ASN+qwgXzfX6jOxnsPFU2wPTOsP2IcPTdVl qbx3T+HyNZ0pLKMqJm0fb6ShYj2Ov0Vb -----END CERTIFICATE-----Generated at Sat May 31 17:02:19 2025 by rpki-client