$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: gaB08PZ9KUXotlNrBpl5hCeI8h667Ny0GPyyRkJdNwk= Subject key identifier: 5E:96:7C:CB:3C:3C:2C:5D:6F:66:83:3C:0A:27:27:7E:82:65:FF:3E Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 05F0 Signing time: Thu 24 Apr 2025 22:43:25 +0000 Manifest this update: Thu 24 Apr 2025 22:43:24 +0000 Manifest next update: Thu 01 May 2025 22:43:24 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: bTEdpfeiKwRpYi+UqfrwKxYfmNsmYygSu2kV8D1dOPs=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: g0yk2bIJuIxlslA37+MYT7bVXA+9AB9etIi570IlrAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: Apr 24 22:43:24 2025 GMT Not After : May 1 22:43:24 2025 GMT Subject: CN=680abe8c-4851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:86:0a:c8:f8:6b:62:63:af:f8:64:06:be: 16:1b:79:cd:bb:07:d1:70:0a:00:c6:84:3b:ea:ef: 71:2c:ef:2e:80:b9:72:8e:ac:2f:0f:4f:aa:b8:8e: 80:60:f6:ec:05:99:88:4c:a6:08:25:f7:1e:77:73: ac:08:ec:ab:18:6e:1d:b6:1e:eb:58:96:7a:9d:4a: 9b:87:bd:e2:67:f0:51:58:9f:15:da:1a:aa:96:a0: 83:15:8f:69:81:2d:d9:20:e8:6d:15:83:2f:e7:6f: 44:5b:93:85:17:24:2e:4a:97:ec:c4:70:70:4b:76: 76:24:40:11:aa:d7:4d:27:d0:96:5e:be:68:33:f8: 86:ab:98:f3:65:e8:8c:41:70:9a:87:15:88:31:d3: 86:f4:b3:9f:ab:d3:4c:ee:e7:52:10:91:88:39:4a: ab:99:73:34:de:9c:31:f4:80:e7:c8:dc:b4:e5:0c: d7:dd:d2:d5:4b:f8:98:ea:d6:5a:8f:11:41:2c:77: 80:d4:b7:a0:ae:aa:0f:00:6d:6c:df:61:18:51:1e: 82:e9:21:e5:6d:62:46:2a:3a:40:26:13:df:00:a2: 7e:a9:3f:53:05:d6:5b:28:b9:7b:ad:7c:6b:93:57: 3b:4b:be:a0:42:16:49:25:6a:09:93:77:b7:12:24: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:96:7C:CB:3C:3C:2C:5D:6F:66:83:3C:0A:27:27:7E:82:65:FF:3E X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b7:55:a3:91:83:a0:c8:dc:dd:e0:f0:16:21:84:79:a8:3b: 3a:1f:26:b7:0e:99:84:1b:f9:4f:bb:3d:c3:3e:05:81:72:db: 5f:78:a6:2e:ac:42:58:08:3b:28:8f:a6:c3:75:8c:6b:b0:80: e4:38:ad:8b:f4:7a:09:10:24:36:76:d4:a7:76:84:18:44:26: 4f:43:cf:9d:24:b6:94:39:cb:4e:3e:8a:8d:31:29:35:14:d5: 53:2b:db:d4:2d:bd:18:ab:bd:d0:64:d5:7f:97:1d:7f:c1:de: 2d:2c:1d:0b:29:b7:cf:46:1a:70:78:9e:e5:7b:fc:93:f4:92: c6:0a:43:b8:de:a2:b6:86:0e:3b:2c:be:14:38:db:0a:58:7a: c5:4f:91:88:d4:c9:0d:78:33:95:34:f3:de:d3:a7:55:d5:3f: 33:de:3a:c4:e1:97:cf:a1:e7:49:3e:40:11:72:f5:d4:cf:c5: c2:25:f4:1b:d7:d5:76:92:c2:59:46:fb:71:63:7a:ec:9f:f7: a4:55:e8:d0:61:ba:d3:64:a3:7c:9c:87:53:42:49:29:58:ca: 68:13:6f:16:02:48:c7:80:52:e3:99:09:41:ed:15:d1:6a:71: 48:0a:ad:8d:7c:6d:1a:dc:a4:5a:e1:ec:6a:c1:30:c7:ba:07: aa:8d:53:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUwNDI0MjI0MzI0WhcNMjUwNTAxMjI0MzI0WjAYMRYwFAYD VQQDEw02ODBhYmU4Yy00ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ+GCsj4a2Jjr/hkBr4WG3nNuwfRcAoAxoQ76u9xLO8ugLlyjqwvD0+quI6A YPbsBZmITKYIJfced3OsCOyrGG4dth7rWJZ6nUqbh73iZ/BRWJ8V2hqqlqCDFY9p gS3ZIOhtFYMv529EW5OFFyQuSpfsxHBwS3Z2JEARqtdNJ9CWXr5oM/iGq5jzZeiM QXCahxWIMdOG9LOfq9NM7udSEJGIOUqrmXM03pwx9IDnyNy05QzX3dLVS/iY6tZa jxFBLHeA1LegrqoPAG1s32EYUR6C6SHlbWJGKjpAJhPfAKJ+qT9TBdZbKLl7rXxr k1c7S76gQhZJJWoJk3e3EiQ4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6WfMs8 PCxdb2aDPAonJ36CZf8+MB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdt1WjkYOgyNzd4PAWIYR5qDs6Hya3DpmEG/lPuz3DPgWBcttfeKYu rEJYCDsoj6bDdYxrsIDkOK2L9HoJECQ2dtSndoQYRCZPQ8+dJLaUOctOPoqNMSk1 FNVTK9vULb0Yq73QZNV/lx1/wd4tLB0LKbfPRhpweJ7le/yT9JLGCkO43qK2hg47 LL4UONsKWHrFT5GI1MkNeDOVNPPe06dV1T8z3jrE4ZfPoedJPkARcvXUz8XCJfQb 19V2ksJZRvtxY3rsn/ekVejQYbrTZKN8nIdTQkkpWMpoE28WAkjHgFLjmQlB7RXR anFICq2NfG0a3KRa4exqwTDHugeqjVPL -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:50 2025 by rpki-client