$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: L9yAWVD1e3FQxkNfji5Rx+7fk5PBkxjDhwfw1RjuGf4= Subject key identifier: 0D:43:13:4F:C4:0B:7D:A9:7F:D4:2E:EB:A6:78:F7:AC:B2:51:DA:F1 Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 34F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 34B8 Signing time: Thu 24 Apr 2025 14:39:49 +0000 Manifest this update: Thu 24 Apr 2025 14:39:48 +0000 Manifest next update: Thu 01 May 2025 14:39:48 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: AfRd4+W5UdI1TSwrftMD2ZrtPG52WkJn2cVQXNmCUvc=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13558 (0x34f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Apr 24 14:39:48 2025 GMT Not After : May 1 14:39:48 2025 GMT Subject: CN=680a4d35-119f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:4b:2b:23:5c:f7:b3:fd:d3:57:f4:0e:c6: 2b:84:91:0e:26:97:98:c9:95:13:95:0b:da:bd:8c: 91:78:a8:78:51:7c:6d:bd:b5:10:61:7e:de:7f:ca: 74:10:05:e2:ed:ff:bf:2a:27:bb:ec:45:e5:e1:63: 28:ec:6e:a5:b6:01:86:9c:04:43:60:9c:82:3d:6d: e9:c5:d6:92:31:2c:1e:bb:e6:5f:4e:f5:a6:ac:b5: 65:11:60:05:21:6e:ee:da:bc:8f:e7:39:74:bb:1a: 6d:ae:cd:f8:01:d7:21:5b:d6:e4:e6:b3:2b:78:35: 09:fd:1b:43:44:45:6e:25:93:0d:7a:ec:b0:64:fd: 10:e4:10:88:f0:83:18:c4:38:f7:21:0c:d9:a0:8a: 57:61:2c:40:e6:3c:84:a9:a2:74:44:56:48:ff:69: 82:75:1d:d1:ac:ec:4f:44:e0:6b:c7:dc:03:ee:a9: b6:29:4a:fc:5f:e3:97:49:d6:dc:33:9d:98:70:26: 99:72:8c:7d:ba:8d:2b:51:12:b3:9f:f6:b5:9e:ba: 44:e7:9a:4f:1d:07:26:b9:3b:ae:f6:4a:64:bc:d8: 0d:b3:03:8d:c9:09:66:f8:1b:8c:ce:d2:ce:65:28: 22:aa:aa:58:d1:41:e6:f5:6a:22:83:26:d5:f3:92: 33:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:43:13:4F:C4:0B:7D:A9:7F:D4:2E:EB:A6:78:F7:AC:B2:51:DA:F1 X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:7a:9c:f9:aa:e5:9e:ae:69:90:e3:30:2b:04:96:44:dc:ee: 53:82:2a:7e:13:9a:0c:b4:29:c7:87:c3:15:a7:58:a5:93:c5: be:39:ed:05:80:86:fe:d7:49:0e:c7:48:57:a9:c8:5d:75:5e: e9:e4:bc:94:7a:6f:6b:c7:6d:2c:e6:5b:4a:54:7e:8a:b0:bb: e6:20:82:41:eb:74:31:72:8f:b5:fc:ae:32:23:3e:6d:3b:d6: d7:f1:cf:11:c1:80:72:91:f1:de:3b:91:69:52:5c:81:36:ce: 60:72:3c:d0:91:5d:97:90:52:bf:8e:fe:3f:14:8c:83:08:4a: a4:c4:7b:57:88:33:26:e6:b8:e1:ea:67:a7:2c:68:e7:15:46: 4d:1a:df:d0:44:99:a5:fd:cb:2c:24:12:67:88:3a:a3:cb:64: 25:93:60:2b:f8:f1:9d:ee:ed:28:ec:50:d0:8a:99:1a:24:05: 83:33:28:e1:42:12:43:f4:2e:06:45:0a:52:72:9a:ec:fb:a4: e2:b7:87:b7:56:7b:34:5b:42:60:a2:10:bb:66:8c:8a:82:6f: bc:19:56:08:d3:2f:b6:0c:88:f6:18:08:fe:d2:89:60:02:dd: 28:24:6e:44:8f:25:33:73:43:b0:4e:d8:fc:49:ee:6d:11:e5: eb:81:42:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUwNDI0MTQzOTQ4WhcNMjUwNTAxMTQzOTQ4WjAYMRYwFAYD VQQDEw02ODBhNGQzNS0xMTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XNLKyNc97P901f0DsYrhJEOJpeYyZUTlQvavYyReKh4UXxtvbUQYX7ef8p0 EAXi7f+/Kie77EXl4WMo7G6ltgGGnARDYJyCPW3pxdaSMSweu+ZfTvWmrLVlEWAF IW7u2ryP5zl0uxptrs34AdchW9bk5rMreDUJ/RtDREVuJZMNeuywZP0Q5BCI8IMY xDj3IQzZoIpXYSxA5jyEqaJ0RFZI/2mCdR3RrOxPROBrx9wD7qm2KUr8X+OXSdbc M52YcCaZcox9uo0rURKzn/a1nrpE55pPHQcmuTuu9kpkvNgNswONyQlm+BuMztLO ZSgiqqpY0UHm9WoigybV85IzPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1DE0/E C32pf9Qu66Z496yyUdrxMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtepz5quWermmQ4zArBJZE3O5Tgip+E5oMtCnHh8MVp1ilk8W+Oe0F gIb+10kOx0hXqchddV7p5LyUem9rx20s5ltKVH6KsLvmIIJB63Qxco+1/K4yIz5t O9bX8c8RwYBykfHeO5FpUlyBNs5gcjzQkV2XkFK/jv4/FIyDCEqkxHtXiDMm5rjh 6menLGjnFUZNGt/QRJml/cssJBJniDqjy2Qlk2Ar+PGd7u0o7FDQipkaJAWDMyjh QhJD9C4GRQpScprs+6Tit4e3Vns0W0JgohC7ZoyKgm+8GVYI0y+2DIj2GAj+0olg At0oJG5EjyUzc0OwTtj8Se5tEeXrgUJL -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:04 2025 by rpki-client