$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: nQzg5f+cASEAuaQPFsF3O2d0GuegAXLwvagr/KxNFwY= Subject key identifier: 87:CC:7F:74:97:9C:2D:AD:C3:E6:48:2F:32:C6:B6:7F:43:0E:70:70 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 023E Signing time: Tue 17 Jun 2025 01:30:15 +0000 Manifest this update: Tue 17 Jun 2025 01:30:15 +0000 Manifest next update: Tue 24 Jun 2025 01:30:15 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: vcYSwerXKFsIWh4xJ4Km/+lPG6JMxQ+FsrSt/NiiX94=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Jun 17 01:30:15 2025 GMT Not After : Jun 24 01:30:15 2025 GMT Subject: CN=6850c527-904b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:53:77:79:cb:fa:71:25:e0:82:f0:42:8c: fb:c0:54:b5:a7:f0:5f:07:19:45:d7:0c:0c:0d:dd: 4c:da:fb:9d:9f:51:14:0a:5f:f6:92:a0:b5:af:1f: e3:f4:9d:a1:70:ad:2f:59:ec:d9:8e:d5:e6:63:eb: ad:ef:24:5c:0c:52:ea:ec:95:3a:0a:ca:80:af:b9: 2c:f6:a8:6b:8d:25:26:54:10:0f:23:49:fb:40:3b: f5:77:fe:33:0f:e0:f1:04:c3:79:f7:99:dc:d0:0a: 36:e7:13:8d:80:9e:3f:c0:ab:35:d9:e4:2a:d0:0c: 82:56:5b:d2:e4:6d:24:16:2c:02:dd:0d:93:ee:53: c3:91:6e:f7:3e:07:e5:c1:99:54:0a:76:20:df:e0: 9d:bd:da:1b:96:88:4a:25:b2:c0:8e:71:25:26:38: ec:3a:22:05:52:2a:39:e4:a7:99:06:e5:4b:a8:71: 26:2a:39:46:9d:cd:3f:4c:73:b3:04:bb:dc:35:ce: 56:e4:16:88:1f:b2:35:35:ce:66:e2:fb:ce:8d:15: 54:59:27:2b:f5:1e:cb:ae:3d:3e:fb:e3:c3:7f:60: ca:1e:e8:ce:a0:51:05:1d:5d:03:aa:66:0c:b9:97: d6:51:74:12:73:8a:e4:15:e1:0c:47:70:93:ec:95: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CC:7F:74:97:9C:2D:AD:C3:E6:48:2F:32:C6:B6:7F:43:0E:70:70 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:6a:ec:0f:b1:b3:c8:5f:9d:d1:41:85:50:60:89:0e:28:37: fa:89:e8:d4:37:20:e5:bd:fb:a4:8e:8a:9f:9e:13:c5:bb:90: bc:f9:1f:b7:e0:33:63:eb:af:94:08:41:bf:34:cd:a5:71:4c: a8:be:e4:b6:05:ca:bc:5b:70:4c:ef:5f:ee:ed:c8:81:2f:bf: 4a:7b:13:aa:95:02:6d:ba:1b:df:7e:66:33:fe:c9:c1:0d:5d: f8:ea:cd:a7:1c:b3:2f:78:20:4a:1a:43:bd:d2:73:80:7a:c7: 5e:dc:37:eb:42:cb:6b:ff:bc:aa:21:15:fe:48:f4:6c:6e:50: 5d:5a:05:cf:ac:21:71:b9:34:40:dc:0f:a8:fe:48:10:56:50: ce:c1:8b:c3:bb:07:47:30:3d:93:36:33:f8:b5:a9:46:26:88: b0:f5:5d:07:14:25:0f:fb:6a:f9:4d:93:d2:f4:de:3c:3b:4e: a7:35:d1:52:2a:8c:a7:10:d5:11:59:99:ce:37:1a:95:80:da: 65:50:c5:86:3a:7d:5b:be:c9:7d:ae:db:6f:42:81:aa:c0:83: 24:2e:a5:49:d9:01:4b:07:ca:1c:75:b4:0f:48:4c:d7:81:fc: a8:46:40:99:4c:7d:30:c5:ff:b4:64:9e:df:af:44:cb:e3:84: eb:8d:3d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUwNjE3MDEzMDE1WhcNMjUwNjI0MDEzMDE1WjAYMRYwFAYD VQQDEw02ODUwYzUyNy05MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb9Td3nL+nEl4ILwQoz7wFS1p/BfBxlF1wwMDd1M2vudn1EUCl/2kqC1rx/j 9J2hcK0vWezZjtXmY+ut7yRcDFLq7JU6CsqAr7ks9qhrjSUmVBAPI0n7QDv1d/4z D+DxBMN595nc0Ao25xONgJ4/wKs12eQq0AyCVlvS5G0kFiwC3Q2T7lPDkW73Pgfl wZlUCnYg3+CdvdoblohKJbLAjnElJjjsOiIFUio55KeZBuVLqHEmKjlGnc0/THOz BLvcNc5W5BaIH7I1Nc5m4vvOjRVUWScr9R7Lrj0+++PDf2DKHujOoFEFHV0DqmYM uZfWUXQSc4rkFeEMR3CT7JVpJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfMf3SX nC2tw+ZILzLGtn9DDnBwMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwauwPsbPIX53RQYVQYIkOKDf6iejUNyDlvfukjoqfnhPFu5C8+R+3 4DNj66+UCEG/NM2lcUyovuS2Bcq8W3BM71/u7ciBL79KexOqlQJtuhvffmYz/snB DV346s2nHLMveCBKGkO90nOAesde3DfrQstr/7yqIRX+SPRsblBdWgXPrCFxuTRA 3A+o/kgQVlDOwYvDuwdHMD2TNjP4talGJoiw9V0HFCUP+2r5TZPS9N48O06nNdFS KoynENURWZnONxqVgNplUMWGOn1bvsl9rttvQoGqwIMkLqVJ2QFLB8ocdbQPSEzX gfyoRkCZTH0wxf+0ZJ7fr0TL44TrjT2I -----END CERTIFICATE-----Generated at Thu Jun 19 03:00:09 2025 by rpki-client