$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: 0S8gGyJV6/4uzOj4daNjVQHx+/JhDDXTNjawhxyS+bs= Subject key identifier: 8D:7D:14:EF:88:2C:2D:8D:81:58:0C:DE:6B:BB:73:F4:F2:B7:D1:1C Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 152C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1522 Signing time: Fri 30 May 2025 16:59:35 +0000 Manifest this update: Fri 30 May 2025 16:59:34 +0000 Manifest next update: Fri 06 Jun 2025 16:59:34 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: tCbqXKGb2I16eRMDUAHcwgZ0rxS5FwnqvhuzoAUMvtM=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: S5mRurG916ui1hjUc9swark9ywmNDAZ5nDRIJrKsR2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5420 (0x152c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: May 30 16:59:34 2025 GMT Not After : Jun 6 16:59:34 2025 GMT Subject: CN=6839e3f6-7bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:c2:4e:e1:8d:2d:d4:90:4a:8f:f3:cd:ba: cf:e9:4c:9f:56:d4:c5:e1:a1:69:71:54:31:a7:24: eb:5c:3c:be:fd:db:45:ed:cd:c6:17:58:36:5d:1a: e4:d6:f0:1d:82:3c:26:0a:1f:66:0b:61:46:76:18: a4:41:a8:81:49:90:a5:88:18:fc:47:17:41:0f:b5: 3f:4e:7c:8d:7e:0f:e7:3a:47:13:88:d8:a1:5f:24: 8d:8a:0b:66:60:e9:6a:10:da:b8:5c:df:4a:93:b5: 93:1f:b7:4c:7b:0f:07:6a:23:d5:d1:d5:56:72:9b: 06:ea:3c:a0:d3:4b:9f:56:86:3a:4a:dd:9a:7c:0f: 23:b0:14:3d:c2:c4:3f:28:f2:1b:d5:2d:89:28:91: 9b:d2:e3:9c:e7:ba:27:4b:78:11:4d:74:32:04:ed: e2:73:a2:d8:53:cc:74:14:61:19:95:3b:d5:05:7b: 88:c3:10:3c:ef:ef:17:d2:79:93:45:ef:f5:9e:33: 5f:9f:68:51:37:a7:d7:91:cc:b1:e2:f5:ba:26:f0: ed:a6:70:09:7b:5d:a6:4b:ab:39:12:44:95:e8:48: 98:a8:c8:af:f1:3c:50:ed:2f:ca:52:cb:05:ab:0c: 6e:27:ac:da:5e:b4:47:0d:95:d2:51:26:5d:ef:96: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:14:EF:88:2C:2D:8D:81:58:0C:DE:6B:BB:73:F4:F2:B7:D1:1C X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:59:28:f1:f7:5c:17:b7:c6:09:2d:fc:e0:20:bc:cc:93:cc: c8:ed:e2:53:f8:3a:33:fb:7d:d5:e5:44:17:99:0f:80:89:68: aa:bc:70:a2:09:d0:ac:70:bc:56:dc:77:91:ee:10:50:82:77: 87:00:22:04:54:d5:c7:8d:97:dd:5b:5e:53:76:6a:42:7b:4e: 21:ab:00:53:c1:bc:80:31:61:10:26:b6:aa:68:2d:7e:96:76: fc:4c:7b:e1:f1:61:82:64:32:4b:ba:c0:63:e2:56:b0:d0:f2: 41:a4:ee:cb:87:54:e2:05:a2:3c:7c:a3:58:97:c9:a6:fb:d4: 0e:65:19:3c:9e:4d:47:4a:25:75:a4:9f:28:85:61:9f:9c:ec: 0f:14:0d:d2:2e:95:de:39:d8:12:34:3b:c5:58:58:e5:bd:39: 9d:d2:2c:7e:93:6a:9f:f3:ed:2a:3f:65:5a:46:2a:8c:13:d8: 64:b9:5a:aa:20:59:3b:b9:47:70:fd:36:bd:8f:89:73:ba:8c: 47:54:31:e3:b0:ac:c6:7a:d8:0a:69:00:b4:fa:2d:17:1e:52: a2:0f:35:b9:ec:8d:86:50:a6:6a:5d:72:98:db:87:71:a8:39: 71:ac:6f:23:61:42:62:4b:e4:8b:fb:e4:81:ac:a2:81:5d:38: 26:82:09:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNTMwMTY1OTM0WhcNMjUwNjA2MTY1OTM0WjAYMRYwFAYD VQQDEw02ODM5ZTNmNi03YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c3CTuGNLdSQSo/zzbrP6UyfVtTF4aFpcVQxpyTrXDy+/dtF7c3GF1g2XRrk 1vAdgjwmCh9mC2FGdhikQaiBSZCliBj8RxdBD7U/TnyNfg/nOkcTiNihXySNigtm YOlqENq4XN9Kk7WTH7dMew8HaiPV0dVWcpsG6jyg00ufVoY6St2afA8jsBQ9wsQ/ KPIb1S2JKJGb0uOc57onS3gRTXQyBO3ic6LYU8x0FGEZlTvVBXuIwxA87+8X0nmT Re/1njNfn2hRN6fXkcyx4vW6JvDtpnAJe12mS6s5EkSV6EiYqMiv8TxQ7S/KUssF qwxuJ6zaXrRHDZXSUSZd75YaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI19FO+I LC2NgVgM3mu7c/Tyt9EcMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxWSjx91wXt8YJLfzgILzMk8zI7eJT+Doz+33V5UQXmQ+AiWiqvHCi CdCscLxW3HeR7hBQgneHACIEVNXHjZfdW15TdmpCe04hqwBTwbyAMWEQJraqaC1+ lnb8THvh8WGCZDJLusBj4law0PJBpO7Lh1TiBaI8fKNYl8mm+9QOZRk8nk1HSiV1 pJ8ohWGfnOwPFA3SLpXeOdgSNDvFWFjlvTmd0ix+k2qf8+0qP2VaRiqME9hkuVqq IFk7uUdw/Ta9j4lzuoxHVDHjsKzGetgKaQC0+i0XHlKiDzW57I2GUKZqXXKY24dx qDlxrG8jYUJiS+SL++SBrKKBXTgmggmv -----END CERTIFICATE-----Generated at Sat May 31 17:26:12 2025 by rpki-client