$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: 0pEcOBEMc01ptwNcU81t7mPitQ2NrfcuOZh1tpJVZnA= Subject key identifier: CB:9C:CE:5C:DD:A7:92:86:7E:12:15:9D:F2:C2:33:F7:66:B6:95:08 Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 07E9 Signing time: Thu 24 Apr 2025 20:50:40 +0000 Manifest this update: Thu 24 Apr 2025 20:50:40 +0000 Manifest next update: Thu 01 May 2025 20:50:40 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: itL/UaCZtHMDDJn0N7V1PWY2+sochYIYY8mPB8SNbJc=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: L4B2evBW9dTHQXVqbxeQ4CNrkuNZaT5qA9O5a+LAGeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Apr 24 20:50:40 2025 GMT Not After : May 1 20:50:40 2025 GMT Subject: CN=680aa420-7fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:65:d9:b8:0c:5f:b4:fd:b3:4a:e7:b9:a7:72: 95:62:1a:91:b1:09:7d:40:31:7c:ed:fa:c7:f3:a9: e9:85:dd:99:ab:48:c0:eb:d3:92:b1:20:db:8e:0a: 0c:4e:4e:20:af:98:99:c0:28:17:fc:16:2a:15:b3: 31:e4:e0:52:76:b0:a6:67:da:2f:d0:09:2b:b2:d2: 3f:fd:f2:29:8f:ad:02:67:29:06:0a:e3:69:ad:4e: 2d:8e:3a:df:b7:f6:a6:00:55:d8:79:8f:66:0c:62: fe:2d:45:6e:f9:1e:bb:2e:b9:cf:f7:b5:50:35:8d: d7:12:98:01:70:5f:ca:9d:95:d1:76:c7:fb:8d:fc: d3:2e:1f:9f:6d:36:a9:97:29:64:74:1a:cf:97:5b: 42:7d:0e:20:d1:63:7a:f3:31:df:f3:91:c6:6c:1b: 9d:90:da:54:29:c3:cd:b1:26:b5:f6:5f:91:c5:fd: 57:3e:88:48:02:72:1d:d7:75:5a:69:5f:b2:fe:a1: 75:67:fb:04:16:de:7c:5c:e9:00:77:2b:3b:d1:60: ad:22:e4:a7:f8:df:cc:71:6d:70:a7:58:ed:db:8b: 50:ef:b3:06:91:07:3d:c1:9f:da:97:74:df:44:4a: 71:d6:3f:3d:c1:a5:be:dd:9a:98:48:24:88:4a:bf: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:CE:5C:DD:A7:92:86:7E:12:15:9D:F2:C2:33:F7:66:B6:95:08 X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d0:7f:b0:d5:82:e6:45:eb:09:66:6e:bb:bc:af:47:ec:b9: cd:cf:53:9c:7f:79:1f:94:87:c1:0a:a3:58:7c:a4:54:4a:ad: c6:31:8e:43:e5:b4:2b:45:cc:ef:95:dc:c2:ca:99:01:9b:16: 11:61:b8:2e:04:46:b6:49:de:46:c4:16:ec:94:35:33:2a:1e: 4c:b3:a8:f1:61:b4:2e:4d:62:bd:d2:eb:b9:4d:99:97:fe:1b: 6f:43:16:ee:13:e3:4b:f3:5f:d8:7a:b3:cb:c9:78:56:16:5a: 16:ef:e7:c1:b8:97:90:0f:0c:e2:5a:78:39:67:ad:6f:e7:79: 25:f6:6d:15:69:65:de:c5:c8:d3:25:df:bc:64:d4:85:94:41: cb:a0:aa:32:fd:de:f8:ef:20:43:1b:93:fe:5f:c4:7d:2e:21: 6d:4d:35:c8:c2:f6:b6:f9:57:a9:6e:50:a2:25:09:ad:14:bb: 59:93:a7:f9:1d:d3:9e:28:c6:d5:5a:1a:61:30:0d:dd:0c:1d: 87:c8:9b:c0:ea:69:37:5d:f0:26:07:db:b0:19:c7:7f:24:16: 1d:ed:7d:25:c2:e7:11:6f:b9:9d:5f:6d:73:42:f2:96:b0:d3: 85:22:18:b8:2e:af:7e:89:28:2e:10:bf:de:25:b7:7e:cc:9e: 69:6c:7a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUwNDI0MjA1MDQwWhcNMjUwNTAxMjA1MDQwWjAYMRYwFAYD VQQDEw02ODBhYTQyMC03ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mXZuAxftP2zSue5p3KVYhqRsQl9QDF87frH86nphd2Zq0jA69OSsSDbjgoM Tk4gr5iZwCgX/BYqFbMx5OBSdrCmZ9ov0AkrstI//fIpj60CZykGCuNprU4tjjrf t/amAFXYeY9mDGL+LUVu+R67LrnP97VQNY3XEpgBcF/KnZXRdsf7jfzTLh+fbTap lylkdBrPl1tCfQ4g0WN68zHf85HGbBudkNpUKcPNsSa19l+Rxf1XPohIAnId13Va aV+y/qF1Z/sEFt58XOkAdys70WCtIuSn+N/McW1wp1jt24tQ77MGkQc9wZ/al3Tf REpx1j89waW+3ZqYSCSISr8QHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuczlzd p5KGfhIVnfLCM/dmtpUIMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi0H+w1YLmResJZm67vK9H7LnNz1Ocf3kflIfBCqNYfKRUSq3GMY5D 5bQrRczvldzCypkBmxYRYbguBEa2Sd5GxBbslDUzKh5Ms6jxYbQuTWK90uu5TZmX /htvQxbuE+NL81/YerPLyXhWFloW7+fBuJeQDwziWng5Z61v53kl9m0VaWXexcjT Jd+8ZNSFlEHLoKoy/d747yBDG5P+X8R9LiFtTTXIwva2+VepblCiJQmtFLtZk6f5 HdOeKMbVWhphMA3dDB2HyJvA6mk3XfAmB9uwGcd/JBYd7X0lwucRb7mdX21zQvKW sNOFIhi4Lq9+iSguEL/eJbd+zJ5pbHri -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:31 2025 by rpki-client