$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft File: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json) Hash identifier: FOctNyVZKwdC6dyj1r0MoYSe7Uj/D7tzU2xHdZN1IrY= Subject key identifier: 1C:F1:5F:C2:B1:8F:72:2D:11:E7:EB:CB:51:35:51:30:06:DB:C8:0E Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF Certificate issuer: /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft Manifest number: 9A Signing time: Sat 31 May 2025 05:51:36 +0000 Manifest this update: Sat 31 May 2025 05:51:36 +0000 Manifest next update: Sat 07 Jun 2025 05:51:36 +0000 Files and hashes: 1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: Opp9RkWR4C26qAfoOV6JQcJ/3InMxvz4cEHQzW+bnYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Validity Not Before: May 31 05:51:36 2025 GMT Not After : Jun 7 05:51:36 2025 GMT Subject: CN=683a98e8-1e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:05:03:23:cc:4d:c3:48:7c:f6:2b:78:94: 2c:ff:96:ee:9e:99:f5:c3:68:49:fc:3b:78:92:fa: ae:58:a8:1b:18:36:63:7a:a6:f3:c5:34:b4:54:9b: 01:12:53:ec:ea:a9:70:58:c7:39:04:57:fd:7e:6f: 2f:25:83:e4:0f:4f:0c:7a:a5:6b:63:e5:a6:3c:d0: 2a:e9:c9:ba:a8:e7:dc:bc:8e:6a:6c:f0:f1:1f:47: db:e3:90:5f:a5:83:50:ec:bc:3d:03:d4:10:04:69: 4a:02:1e:40:a3:72:1d:86:03:d0:41:51:e5:f3:9e: 02:3f:88:24:b2:85:ad:d7:09:c7:1e:ae:58:13:65: 3d:7e:55:e1:23:af:d6:38:79:38:7c:ae:e6:c2:7d: 3e:4e:6e:25:4e:ac:62:a6:74:ad:6e:05:30:87:fb: d5:56:cd:df:4b:19:e4:5c:89:8e:3c:10:75:f5:68: f1:b2:f5:11:c6:74:a9:f1:6f:82:26:2b:62:33:cd: 4e:24:84:6c:ac:ad:c2:db:61:16:2a:36:ab:4d:2a: 8c:4e:5c:14:40:36:ca:36:81:96:20:f3:6b:42:b0: 03:fa:82:f8:42:c5:e2:eb:5f:e2:14:09:14:53:d4: 03:cb:aa:08:d3:ec:e6:e6:dc:29:3b:fe:30:9f:3d: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:5F:C2:B1:8F:72:2D:11:E7:EB:CB:51:35:51:30:06:DB:C8:0E X509v3 Authority Key Identifier: keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:28:11:14:71:27:55:20:53:4c:a9:22:26:49:5c:56:b1:7b: 9c:2d:d2:bd:44:4d:8b:fb:b4:ee:b5:bb:fb:cd:ed:d7:2b:44: e7:a1:4c:bc:d1:bf:d9:45:ea:3e:63:41:6f:76:5d:b2:de:a0: 1a:0f:94:93:d7:89:cd:07:27:43:41:f8:1b:c7:32:9b:56:2b: 7b:55:51:0e:a7:8d:2d:95:da:73:46:1f:bc:1a:c3:3a:79:d4: fb:6d:2b:14:d2:f2:aa:dc:b4:ee:8e:41:4f:9f:6c:11:c6:b0: 5e:7f:48:5b:b8:f5:39:de:a7:da:47:83:74:da:a0:0e:bb:03: 3f:20:7d:6b:d9:9e:13:01:84:22:ea:f8:4a:ef:15:42:6e:95: ff:fe:5a:cd:c3:9c:0e:95:6a:07:a8:fa:eb:01:0b:01:e6:1b: 5a:4d:14:66:a0:47:b5:55:c1:39:14:ff:09:2a:bf:c8:47:7b: 2d:6c:9a:0b:98:16:b0:99:01:fe:69:8d:4d:0d:b7:a6:82:63: 8c:02:41:97:2f:df:64:19:7a:13:86:cb:bc:cb:2d:10:97:ff: 28:90:71:fa:7f:2b:2c:bb:49:b0:60:63:a9:59:97:10:59:2b: 86:67:7a:95:ba:76:df:89:7b:91:c4:2d:d3:13:33:92:bc:f2: b0:ce:11:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBFNjUxMTAvBgNVBAUTKEUxRDMzMDMxNkMzQTI2ODQyNEQ3MTk3QUJGMzQxMkY3 MjMxMTQxREYwHhcNMjUwNTMxMDU1MTM2WhcNMjUwNjA3MDU1MTM2WjAYMRYwFAYD VQQDEw02ODNhOThlOC0xZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1UgFAyPMTcNIfPYreJQs/5bunpn1w2hJ/Dt4kvquWKgbGDZjeqbzxTS0VJsB ElPs6qlwWMc5BFf9fm8vJYPkD08MeqVrY+WmPNAq6cm6qOfcvI5qbPDxH0fb45Bf pYNQ7Lw9A9QQBGlKAh5Ao3IdhgPQQVHl854CP4gksoWt1wnHHq5YE2U9flXhI6/W OHk4fK7mwn0+Tm4lTqxipnStbgUwh/vVVs3fSxnkXImOPBB19WjxsvURxnSp8W+C JitiM81OJIRsrK3C22EWKjarTSqMTlwUQDbKNoGWIPNrQrAD+oL4QsXi61/iFAkU U9QDy6oI0+zm5twpO/4wnz0vnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzxX8Kx j3ItEefry1E1UTAG28gOMB8GA1UdIwQYMBaAFOHTMDFsOiaEJNcZer80EvcjEUHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEU2NS9DRTIxNkY4NjUz ODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3NkpvUWsxeGw2dnpRUzl5TVJR ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkTXdNV3c2Sm9RazF4bDZ2elFTOXlNUlFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEU2NS9DRTIxNkY4NjUzODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3Nkpv UWsxeGw2dnpRUzl5TVJRZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANKBEUcSdVIFNMqSImSVxWsXucLdK9RE2L+7Tutbv7ze3XK0TnoUy8 0b/ZReo+Y0Fvdl2y3qAaD5ST14nNBydDQfgbxzKbVit7VVEOp40tldpzRh+8GsM6 edT7bSsU0vKq3LTujkFPn2wRxrBef0hbuPU53qfaR4N02qAOuwM/IH1r2Z4TAYQi 6vhK7xVCbpX//lrNw5wOlWoHqPrrAQsB5htaTRRmoEe1VcE5FP8JKr/IR3stbJoL mBawmQH+aY1NDbemgmOMAkGXL99kGXoThsu8yy0Ql/8okHH6fyssu0mwYGOpWZcQ WSuGZ3qVunbfiXuRxC3TEzOSvPKwzhHA -----END CERTIFICATE-----Generated at Sat May 31 17:46:24 2025 by rpki-client