$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: u5bowRSgn4akvkFxxbzMvpf6dE7WUTknN6UVvrK8f/M= Subject key identifier: 95:87:D7:6C:1B:32:BD:A0:78:24:B3:79:61:F4:69:9D:FB:55:B1:97 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 052D Signing time: Thu 24 Apr 2025 23:16:22 +0000 Manifest this update: Thu 24 Apr 2025 23:16:22 +0000 Manifest next update: Thu 01 May 2025 23:16:22 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: FQqoBTJCFlqGC2jUmlgYyaqudH5RFRNKZeUADvX5nXI=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: AKQYRTBp1uq5xNSQ+35Oq/CNR0101RtjFiouleUDl3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Apr 24 23:16:22 2025 GMT Not After : May 1 23:16:22 2025 GMT Subject: CN=680ac646-73f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:a9:a6:e1:42:23:96:b6:1d:e1:b3:ce:21: 4c:48:9f:23:32:71:b0:d0:52:13:fb:c7:70:26:e2: b7:b5:6b:7e:36:76:e2:11:a4:de:eb:75:87:15:af: 10:93:3f:c3:7a:6f:44:7e:b3:21:58:d4:7b:16:90: 94:96:4e:76:0b:ff:d4:35:a1:d9:aa:94:da:c1:18: 95:3a:f9:e0:a1:9e:c9:85:d2:ec:21:57:69:e8:31: ec:6b:f0:56:ef:8e:83:e1:ed:a7:27:9d:7f:c6:66: 18:8b:d6:29:e1:9c:1e:37:cc:e5:fe:30:a1:82:68: 93:89:05:af:b2:f4:d4:d6:0b:bc:68:ec:70:dd:5a: f7:7c:34:28:1f:76:37:80:e7:d1:35:76:94:f1:05: aa:13:d4:a5:02:a3:1f:29:e4:4a:50:a6:07:61:82: fd:b1:34:ba:8f:62:8d:00:0a:38:ba:d2:98:e0:d0: ff:57:a8:db:fd:72:fa:6f:b4:af:a4:eb:b8:a4:f8: d6:9d:1d:30:6a:0b:51:70:0f:a8:23:fe:a9:92:5d: 08:61:f1:f2:78:5d:08:18:00:cf:44:b4:02:d9:42: a1:45:b3:20:6b:28:00:18:5b:e6:63:41:bc:b6:cc: 17:30:62:78:10:65:f0:ed:17:b0:a8:86:04:c4:b5: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:D7:6C:1B:32:BD:A0:78:24:B3:79:61:F4:69:9D:FB:55:B1:97 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7e:df:64:42:bd:f9:46:6a:d6:03:6b:d0:9f:45:71:50:40: 5f:9d:0f:b0:cd:f9:9f:22:1b:cd:a8:2b:e6:14:7d:ad:c7:0b: b7:d5:c9:52:0f:a5:70:b5:73:9d:d6:43:b3:b6:97:c3:5a:b8: 0f:30:d1:44:1b:e8:14:a0:2e:6c:3d:03:29:73:dd:7c:e0:36: af:da:36:1c:a1:83:92:f7:e1:e8:bc:5e:a6:f3:dc:ac:48:4f: 4e:e5:9a:f2:69:16:a7:2d:ff:a2:1e:89:54:90:ec:fb:c9:02: ed:35:e0:81:c8:6d:99:ab:e4:8b:52:fb:f8:47:e8:8f:4a:8b: b7:8d:b5:b0:b1:5a:5d:82:69:28:2c:d6:a5:e7:3e:a3:e7:05: c9:ab:ff:2b:79:80:b1:1d:6d:81:1e:28:39:99:55:99:77:6f: 44:48:a1:35:cb:27:01:a3:29:81:59:57:a6:67:a4:9f:ed:dc: 8a:90:84:0e:b5:2b:62:e8:a3:cc:60:97:ca:53:e6:1f:42:e0: 23:7b:64:96:bb:57:0b:fd:41:2d:69:29:94:78:29:76:5d:7f: 88:26:48:9a:ed:64:d7:95:4e:d6:cf:a6:49:99:97:72:6e:4c: 0e:05:26:ec:c8:de:0a:fb:7f:4f:b8:ef:f2:71:5a:73:5b:8c: 63:81:ca:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjUwNDI0MjMxNjIyWhcNMjUwNTAxMjMxNjIyWjAYMRYwFAYD VQQDEw02ODBhYzY0Ni03M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunappuFCI5a2HeGzziFMSJ8jMnGw0FIT+8dwJuK3tWt+NnbiEaTe63WHFa8Q kz/Dem9EfrMhWNR7FpCUlk52C//UNaHZqpTawRiVOvngoZ7JhdLsIVdp6DHsa/BW 746D4e2nJ51/xmYYi9Yp4ZweN8zl/jChgmiTiQWvsvTU1gu8aOxw3Vr3fDQoH3Y3 gOfRNXaU8QWqE9SlAqMfKeRKUKYHYYL9sTS6j2KNAAo4utKY4ND/V6jb/XL6b7Sv pOu4pPjWnR0wagtRcA+oI/6pkl0IYfHyeF0IGADPRLQC2UKhRbMgaygAGFvmY0G8 tswXMGJ4EGXw7RewqIYExLWmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWH12wb Mr2geCSzeWH0aZ37VbGXMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEft9kQr35RmrWA2vQn0VxUEBfnQ+wzfmfIhvNqCvmFH2txwu31clS D6VwtXOd1kOztpfDWrgPMNFEG+gUoC5sPQMpc9184Dav2jYcoYOS9+HovF6m89ys SE9O5ZryaRanLf+iHolUkOz7yQLtNeCByG2Zq+SLUvv4R+iPSou3jbWwsVpdgmko LNal5z6j5wXJq/8reYCxHW2BHig5mVWZd29ESKE1yycBoymBWVemZ6Sf7dyKkIQO tSti6KPMYJfKU+YfQuAje2SWu1cL/UEtaSmUeCl2XX+IJkia7WTXlU7Wz6ZJmZdy bkwOBSbsyN4K+39PuO/ycVpzW4xjgcr+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:57 2025 by rpki-client