$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: Q9LGqtNIuBCItsCBXdYvEH1ai6fGcvb/DTsQpKGFRog= Subject key identifier: 92:C4:AB:D7:19:86:32:A1:75:4B:21:F1:75:CF:9B:34:62:03:23:CD Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1A0D Signing time: Fri 30 May 2025 17:21:40 +0000 Manifest this update: Fri 30 May 2025 17:21:39 +0000 Manifest next update: Fri 06 Jun 2025 17:21:39 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: ILz5sLngdH+FPFnGuADARelkOjR0JCEbPJRSZdiQ6ZA=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: QQ2kSpkziq7c/OfdUjW7k6le4ABn54sNBVAUYS+VxSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: May 30 17:21:39 2025 GMT Not After : Jun 6 17:21:39 2025 GMT Subject: CN=6839e923-43dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:60:11:14:2d:f0:a7:42:90:fc:5c:f7:02:e9: c0:d6:2f:35:74:ce:bf:28:ce:da:a8:de:d7:d9:e9: 6b:bc:0e:1b:11:63:7b:59:3a:7b:ba:8e:65:7f:1c: 5a:0a:85:27:ad:ec:a3:00:4c:1d:9d:82:38:51:20: 54:71:3c:a4:4b:eb:0b:86:ac:9f:c8:ae:4c:e5:8a: ee:df:f5:5c:f5:15:78:5b:7a:0e:d5:3f:58:2f:02: 6e:d2:ea:fd:33:1c:68:b4:4f:18:3c:76:5f:0f:c3: 1a:0d:5a:0e:4d:73:e7:e4:f2:86:47:ca:41:77:9c: b9:40:31:34:55:8f:29:00:c5:4c:59:c5:54:c5:ce: 5f:11:42:ce:45:52:b8:70:12:ed:5a:42:b2:9f:05: bf:8b:44:d8:f4:10:16:d0:54:2b:be:5c:a5:7a:31: 25:5c:25:7b:fb:14:cc:75:68:e4:9e:b5:7e:67:e6: ed:50:fc:f7:9b:31:d3:60:19:4b:e1:2c:b1:f8:66: ea:3a:b2:9d:ca:fe:86:c3:e3:2a:28:a0:af:bd:4b: 6c:9f:de:7a:52:9c:ab:1d:d9:61:38:28:c1:4d:c3: da:81:3d:88:ea:e8:ed:ed:35:56:f4:51:92:47:46: 1f:da:87:b1:32:ba:43:67:ab:7d:cf:be:ac:6c:d4: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C4:AB:D7:19:86:32:A1:75:4B:21:F1:75:CF:9B:34:62:03:23:CD X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7b:a1:51:4e:7e:4f:16:7a:6f:96:bd:07:fd:f8:2a:1c:d5: d0:1c:29:62:c3:4e:85:63:b1:70:8c:0b:b9:d9:01:62:e1:56: 19:ff:66:87:de:66:f9:80:3e:65:aa:a2:47:69:03:14:ef:49: 59:bb:7c:73:01:59:2b:5a:ec:a2:dd:39:4e:ff:43:91:9c:20: 47:74:c9:63:d4:8f:bb:97:1d:13:c6:56:d6:a4:ce:a5:c0:98: ea:9c:f6:4a:d2:63:e6:90:86:e4:14:17:b4:e2:1d:51:82:d3: d6:5c:d8:97:f3:2b:1e:fe:90:92:3e:4d:14:d7:43:e6:d0:e3: 6c:c5:44:d1:9a:de:38:2e:70:3a:7b:44:1c:d3:93:60:48:b2: 7e:7c:16:47:2a:23:b9:9a:c2:6e:f5:be:cb:b0:1e:2a:13:8d: 33:17:cc:ef:c8:c5:27:20:2a:97:79:36:a1:6d:d2:67:5f:29: 77:af:1f:5e:32:67:e0:3f:02:7f:d5:0a:b2:b2:92:98:6e:a5: d8:38:18:a5:93:6d:08:70:49:74:1e:68:96:6e:92:b1:df:2d: c8:44:7b:15:c3:83:13:0d:2b:bd:2e:ca:62:5a:39:ce:86:84: 41:ac:f6:12:12:37:fa:b0:30:7b:b1:a5:08:51:66:a7:67:88: 74:7b:eb:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUwNTMwMTcyMTM5WhcNMjUwNjA2MTcyMTM5WjAYMRYwFAYD VQQDEw02ODM5ZTkyMy00M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+WARFC3wp0KQ/Fz3AunA1i81dM6/KM7aqN7X2elrvA4bEWN7WTp7uo5lfxxa CoUnreyjAEwdnYI4USBUcTykS+sLhqyfyK5M5Yru3/Vc9RV4W3oO1T9YLwJu0ur9 MxxotE8YPHZfD8MaDVoOTXPn5PKGR8pBd5y5QDE0VY8pAMVMWcVUxc5fEULORVK4 cBLtWkKynwW/i0TY9BAW0FQrvlylejElXCV7+xTMdWjknrV+Z+btUPz3mzHTYBlL 4Syx+GbqOrKdyv6Gw+MqKKCvvUtsn956UpyrHdlhOCjBTcPagT2I6ujt7TVW9FGS R0Yf2oexMrpDZ6t9z76sbNRJsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLEq9cZ hjKhdUsh8XXPmzRiAyPNMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOe6FRTn5PFnpvlr0H/fgqHNXQHCliw06FY7FwjAu52QFi4VYZ/2aH 3mb5gD5lqqJHaQMU70lZu3xzAVkrWuyi3TlO/0ORnCBHdMlj1I+7lx0TxlbWpM6l wJjqnPZK0mPmkIbkFBe04h1RgtPWXNiX8yse/pCSPk0U10Pm0ONsxUTRmt44LnA6 e0Qc05NgSLJ+fBZHKiO5msJu9b7LsB4qE40zF8zvyMUnICqXeTahbdJnXyl3rx9e MmfgPwJ/1QqyspKYbqXYOBilk20IcEl0HmiWbpKx3y3IRHsVw4MTDSu9LspiWjnO hoRBrPYSEjf6sDB7saUIUWanZ4h0e+u8 -----END CERTIFICATE-----Generated at Sat May 31 17:13:02 2025 by rpki-client