$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: NbSL3Qm8eVBF6FhVcAmwIa7b5pTlCdkThcpL6dvqO1E= Subject key identifier: 5F:3A:15:CF:E7:A2:F2:92:4D:20:5C:FF:79:A6:E2:7C:10:41:38:DD Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 3500 Signing time: Tue 29 Apr 2025 10:20:21 +0000 Manifest this update: Tue 29 Apr 2025 10:20:20 +0000 Manifest next update: Tue 06 May 2025 10:20:20 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: qXuQBYPrOHkdLIfxJQRfR+3Z/I3ez/51EIcmQbxpj8I=) 2: 3931B4364E9D11EFB8701A32C4F9AE02.roa (hash: qwtv02mSUNqsAwJLIjoSsEOVvDG+6od34vynxjAad54=) 3: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: 6ZDExvD8R6lfn1UNMFWFgjBfUXdJGstZiRI0vF7/Wus=) 4: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: IExbtiolQQ65jCv5u1UwJWeDcm4gG8UyargWa4/V1IY=) 5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: Owe/AbEsMPyKxZYlgL12xosv4eIWMfqMjX4SIt/KeiA=) 6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: 4SnN/Dveh2eNpWKukaIi5N9WfKblXmvZSjIrcjaW3wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 10:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13664 (0x3560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Apr 29 10:20:20 2025 GMT Not After : May 6 10:20:20 2025 GMT Subject: CN=6810a7e4-6e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:9c:4c:58:33:9d:6f:4f:cd:10:d7:44:d9: 92:07:08:3b:e3:e4:62:d5:85:39:21:92:7a:39:56: 99:9a:11:ad:65:88:df:1e:d1:92:d0:f9:9c:20:fb: 37:f9:bb:1a:01:0a:fe:9d:0f:28:16:82:2b:50:2c: 7e:ce:f3:d0:d1:63:70:8f:71:a2:06:a0:38:90:f3: 3e:ac:7a:07:08:d1:c2:1e:27:2f:a3:91:69:19:07: 19:99:fe:86:d8:1d:e5:df:f8:1b:f3:7e:ed:52:41: 10:bb:a3:c8:31:78:52:6a:7a:9e:5b:08:08:8b:a5: 4d:5f:b2:d1:8a:55:a0:e0:b2:0a:b1:bc:11:e5:77: 48:d4:db:f6:be:18:6d:5d:29:46:f3:8a:e1:94:b9: 24:ce:02:92:8d:cb:e3:2c:f7:ad:59:55:fe:fa:ae: b2:fd:77:4f:d3:04:19:b3:ba:43:1e:e0:63:30:e6: 65:75:7f:82:24:4d:26:ee:1e:4c:62:d7:a3:f4:26: 00:d9:29:17:80:49:29:53:93:94:bd:55:24:55:6b: 39:2c:f2:28:ff:76:29:9e:7c:83:51:e0:df:3b:fd: d6:7f:bb:54:2b:5e:ab:0c:49:fa:a8:e4:19:e4:57: 64:a2:f4:1d:4e:0b:f6:c1:e1:d6:fb:20:4c:a5:f9: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3A:15:CF:E7:A2:F2:92:4D:20:5C:FF:79:A6:E2:7C:10:41:38:DD X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a5:7c:55:77:33:09:5c:77:f2:38:05:8e:a9:10:f0:94:fa: 3a:23:04:95:36:16:20:6a:e3:d9:a8:0b:c3:e9:86:9c:13:f2: ec:f6:7a:c1:a9:2f:1a:f6:34:9a:71:7c:fb:8f:a1:58:f9:49: d9:83:61:ff:b6:bc:9e:1b:d4:5c:0a:e2:c9:25:75:5a:c4:60: e4:23:90:e2:65:b1:4c:3a:51:03:0a:8d:a0:d2:62:a6:d7:c9: e0:46:c6:e2:9b:bc:d6:d9:9c:ea:61:16:56:6c:3e:11:26:95: 84:3a:30:63:b2:3e:f0:c9:65:d9:a6:c5:86:7a:4e:2f:c2:b3: 7b:1c:5e:9e:85:73:09:99:3e:62:a9:81:ea:0d:ea:ff:2e:76: 2a:20:92:bd:dd:2c:e0:94:89:23:2a:3e:97:05:0b:32:1f:ac: e4:b8:e7:00:4c:5b:2f:e3:d0:fd:ec:3a:80:f2:9d:e0:02:9f: 14:1a:c5:b9:1c:6d:0a:39:27:f2:57:ce:f3:6b:45:ed:56:64: 7d:72:c1:20:65:7c:62:0f:2b:96:92:3f:aa:13:12:ac:73:58: 79:ca:56:aa:44:34:f9:a4:58:8c:c5:47:29:ba:d2:e0:bc:ec: 99:c1:26:63:2e:18:64:b9:7b:d7:28:0f:ff:87:25:0b:80:34: bd:01:16:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwNDI5MTAyMDIwWhcNMjUwNTA2MTAyMDIwWjAYMRYwFAYD VQQDEw02ODEwYTdlNC02ZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodqcTFgznW9PzRDXRNmSBwg74+Ri1YU5IZJ6OVaZmhGtZYjfHtGS0PmcIPs3 +bsaAQr+nQ8oFoIrUCx+zvPQ0WNwj3GiBqA4kPM+rHoHCNHCHicvo5FpGQcZmf6G 2B3l3/gb837tUkEQu6PIMXhSanqeWwgIi6VNX7LRilWg4LIKsbwR5XdI1Nv2vhht XSlG84rhlLkkzgKSjcvjLPetWVX++q6y/XdP0wQZs7pDHuBjMOZldX+CJE0m7h5M Ytej9CYA2SkXgEkpU5OUvVUkVWs5LPIo/3YpnnyDUeDfO/3Wf7tUK16rDEn6qOQZ 5FdkovQdTgv2weHW+yBMpfm8bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF86Fc/n ovKSTSBc/3mm4nwQQTjdMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCpXxVdzMJXHfyOAWOqRDwlPo6IwSVNhYgauPZqAvD6YacE/Ls9nrB qS8a9jSacXz7j6FY+UnZg2H/tryeG9RcCuLJJXVaxGDkI5DiZbFMOlEDCo2g0mKm 18ngRsbim7zW2ZzqYRZWbD4RJpWEOjBjsj7wyWXZpsWGek4vwrN7HF6ehXMJmT5i qYHqDer/LnYqIJK93SzglIkjKj6XBQsyH6zkuOcATFsv49D97DqA8p3gAp8UGsW5 HG0KOSfyV87za0XtVmR9csEgZXxiDyuWkj+qExKsc1h5ylaqRDT5pFiMxUcputLg vOyZwSZjLhhkuXvXKA//hyULgDS9ARZM -----END CERTIFICATE-----Generated at Tue Apr 29 14:27:31 2025 by rpki-client