$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json) Hash identifier: BfsG79k9VKxCuImDT0N8IHg6FbQ6c0pShgfUWv939l8= Subject key identifier: 34:D2:5E:7C:7F:AD:84:05:E7:6E:23:35:F3:8A:18:B0:E7:67:9B:4C Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft Manifest number: 089B Signing time: Thu 24 Apr 2025 20:27:26 +0000 Manifest this update: Thu 24 Apr 2025 20:27:26 +0000 Manifest next update: Thu 01 May 2025 20:27:26 +0000 Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: L/B0SK+4Yny8BXjcacZY2U8lfOPNvm90hVMteNIi8zo=) 2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: Rbebv7a/3bjYuOYYlHIXr662xadEzX5etaY1VAtT19Q=) 3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8=) 4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 2TPeWUxi8y2dJKsuFTVthNuMYrZypRCJy1Y/CFzYdHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Apr 24 20:27:26 2025 GMT Not After : May 1 20:27:26 2025 GMT Subject: CN=680a9eae-6e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:0f:ec:01:76:b3:11:cc:af:b0:59:6d:a5: cf:36:12:6b:d0:27:ff:2e:0e:c0:db:dc:dd:64:10: 48:f3:59:aa:4a:48:70:4b:36:5c:7a:a8:45:90:9a: 83:f5:c2:dd:c3:c8:c1:c2:7c:6b:62:11:7c:fb:04: 0c:55:1d:9e:87:e1:93:d0:84:bd:5b:5d:ca:76:ec: fc:bf:b7:4f:17:60:47:4a:ee:41:ab:3b:21:a0:61: f6:43:d3:85:8f:94:00:11:01:a5:c4:69:45:27:68: 94:41:fa:b8:6a:54:f4:7b:4e:03:b2:11:a5:8a:b9: ca:16:f8:cb:4a:db:ad:8b:8a:39:bb:7b:7a:b8:4f: 9f:35:21:a3:fc:34:70:2a:48:3f:8a:8f:be:f2:96: 65:29:15:a9:12:fe:ad:f5:cf:ea:83:f4:f6:be:2c: 70:0f:69:16:8f:99:02:2d:0c:d6:ad:45:d1:42:49: 6a:d5:3a:ca:11:38:33:6b:73:f7:5c:db:46:17:8f: e2:66:b6:bd:b2:44:67:a5:76:02:d5:5d:aa:fe:c6: f8:2d:43:6d:e3:11:08:cf:d5:33:00:b7:a3:a9:55: 89:16:ab:cd:76:cd:f7:5c:82:26:3c:92:dc:48:82: 74:cb:6f:f7:63:e7:20:35:06:c6:d6:51:ec:ea:c8: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D2:5E:7C:7F:AD:84:05:E7:6E:23:35:F3:8A:18:B0:E7:67:9B:4C X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1f:14:6a:91:39:8c:5c:fe:92:4b:b5:4e:eb:b9:6b:92:1b: 23:68:99:35:eb:38:1a:86:de:5a:c8:cf:52:24:40:cb:b8:3c: 24:56:67:ba:74:a7:8f:0b:22:60:c2:f8:be:b5:dc:63:df:e7: 47:89:7a:fa:88:5d:74:62:08:cc:49:d1:95:9e:b1:46:16:25: 08:bd:7f:bd:d1:d5:3b:fe:5d:12:24:17:db:46:49:dc:cc:79: 58:55:67:c8:c3:21:5b:38:bd:02:0f:54:d1:ab:f5:52:20:0a: 8f:46:c8:b2:e6:68:07:98:01:b6:6c:de:3c:6d:a6:8d:8f:94: 1b:fd:ad:b6:43:ab:be:8d:00:b8:e9:d9:cf:1e:ab:21:89:0f: 63:90:d3:a1:7d:9c:dc:9a:00:05:59:06:10:36:07:e0:b4:7a: 6a:92:69:65:28:e3:41:4b:6f:0a:4b:29:31:d5:c5:de:a1:5a: b8:f9:14:2d:05:aa:70:64:36:3e:3e:08:22:32:af:45:99:31: d6:19:97:ce:76:ed:ed:bd:25:3b:aa:e7:38:16:fd:78:5c:9e: df:5e:21:83:01:a0:08:a4:30:9e:64:2d:2d:85:2f:73:d3:e5: fd:66:07:f2:5f:e6:61:ec:cb:2d:c4:77:9d:9e:ee:72:5d:c5: 65:ef:cf:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwNDI0MjAyNzI2WhcNMjUwNTAxMjAyNzI2WjAYMRYwFAYD VQQDEw02ODBhOWVhZS02ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRcP7AF2sxHMr7BZbaXPNhJr0Cf/Lg7A29zdZBBI81mqSkhwSzZceqhFkJqD 9cLdw8jBwnxrYhF8+wQMVR2eh+GT0IS9W13Kduz8v7dPF2BHSu5BqzshoGH2Q9OF j5QAEQGlxGlFJ2iUQfq4alT0e04DshGlirnKFvjLStuti4o5u3t6uE+fNSGj/DRw Kkg/io++8pZlKRWpEv6t9c/qg/T2vixwD2kWj5kCLQzWrUXRQklq1TrKETgza3P3 XNtGF4/iZra9skRnpXYC1V2q/sb4LUNt4xEIz9UzALejqVWJFqvNds33XIImPJLc SIJ0y2/3Y+cgNQbG1lHs6si4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTSXnx/ rYQF524jNfOKGLDnZ5tMMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq OVR2MW1xaE4yYXlpRFB0VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaHxRqkTmMXP6SS7VO67lrkhsjaJk16zgaht5ayM9SJEDLuDwkVme6 dKePCyJgwvi+tdxj3+dHiXr6iF10YgjMSdGVnrFGFiUIvX+90dU7/l0SJBfbRknc zHlYVWfIwyFbOL0CD1TRq/VSIAqPRsiy5mgHmAG2bN48baaNj5Qb/a22Q6u+jQC4 6dnPHqshiQ9jkNOhfZzcmgAFWQYQNgfgtHpqkmllKONBS28KSykx1cXeoVq4+RQt BapwZDY+PggiMq9FmTHWGZfOdu3tvSU7quc4Fv14XJ7fXiGDAaAIpDCeZC0thS9z 0+X9ZgfyX+Zh7MstxHednu5yXcVl78+q -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:32 2025 by rpki-client