$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: a5EnVIim42jFdISFiNSSEQsq3jgWcPulsx7S+33XXn0= Subject key identifier: 10:12:C0:CD:83:3F:A6:E9:41:0C:93:D2:43:39:BB:3A:AC:4B:9F:EB Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 042B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 0427 Signing time: Sat 31 May 2025 00:34:53 +0000 Manifest this update: Sat 31 May 2025 00:34:53 +0000 Manifest next update: Sat 07 Jun 2025 00:34:53 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: n4nBIv/T8IcK11MHTXlkvEIbnHGrjbHx24CJgqCry7Q=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: x1o/7SXGT/4CedCgS5u41onm9GYNi5PSdU5ws280Sfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: May 31 00:34:53 2025 GMT Not After : Jun 7 00:34:53 2025 GMT Subject: CN=683a4ead-8f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:cd:41:c2:2c:35:a9:65:6c:1e:3d:19:aa: 70:b9:93:a8:d2:3b:c9:e9:c4:38:cc:42:ad:fa:05: ee:d0:f5:41:d4:b1:ec:7d:18:77:11:04:7c:7b:27: 71:2b:15:3e:8b:7f:de:14:d0:13:06:57:0d:b3:75: a2:d3:c5:3d:a6:b8:fd:9d:fa:45:40:90:87:6b:f0: 38:9d:99:5d:b2:30:52:98:82:bf:09:da:87:13:70: 7e:9f:50:56:10:22:5b:a7:21:09:f5:32:c9:15:fc: 41:9f:b3:63:03:e4:42:f4:64:bf:04:81:82:2b:da: 0f:45:b5:7f:53:9b:ba:b6:9e:13:cb:65:e8:18:f1: 89:bd:78:33:2f:7c:7c:02:8f:aa:e1:8b:bf:98:4b: d8:03:a7:ea:7b:81:c2:94:24:35:a1:44:6f:e9:63: ed:6b:15:33:62:2e:5b:74:a8:64:c3:5e:95:28:c4: 43:95:9c:fc:f6:59:84:1d:e1:72:aa:cf:fd:b6:4e: 9a:45:b2:9e:62:63:f6:b9:57:d7:50:9b:a6:ec:8c: 5a:f5:3a:b5:a8:e6:9a:9a:76:61:d5:18:d3:1b:99: 05:8a:92:25:b2:60:55:89:67:87:d3:3d:05:b5:f5: e4:e1:b9:a2:34:1a:33:25:e4:41:69:7e:23:40:70: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:C0:CD:83:3F:A6:E9:41:0C:93:D2:43:39:BB:3A:AC:4B:9F:EB X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4c:04:b8:49:5c:8f:c1:09:ae:13:1f:fc:36:01:17:f7:ff: 50:56:c0:04:a2:22:58:b3:7b:7b:ad:07:db:e6:43:5d:81:2e: b2:23:75:7c:7d:1c:66:ee:a1:ba:d3:3c:c7:c9:b2:e6:21:4e: 6d:33:0e:18:d2:fe:80:24:c8:eb:4c:11:24:0c:7d:97:2d:3e: fe:53:00:8c:f5:04:d1:a9:5a:01:b2:87:f7:fb:76:16:1a:f3: 59:46:c9:99:69:bf:ae:3d:d3:cd:ae:83:b7:d8:b8:bf:17:e7: d8:69:c1:8d:16:79:a2:7a:ef:20:cf:47:a5:36:85:0d:30:27: cc:bf:3d:ed:59:72:78:57:ef:db:a1:e9:fe:5f:69:d3:1f:f7: 79:2b:d0:de:d1:85:81:18:de:17:02:d7:04:d6:e6:ff:60:20: 43:aa:ba:6c:14:0f:59:40:81:39:40:72:6c:7c:10:63:21:87: ac:49:a8:2e:5e:33:dd:08:5c:9e:da:fe:e4:2c:6e:38:8e:be: a2:d7:7c:cc:9d:5d:63:72:c5:f1:ed:6b:e7:45:f6:45:1e:fb: dd:cd:eb:94:9e:02:09:04:83:fa:4f:ca:c7:53:b2:51:58:b9: 91:3f:44:57:bf:f7:2e:ed:4b:b5:f9:2e:c7:6a:10:c3:09:3a: f9:ce:12:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjUwNTMxMDAzNDUzWhcNMjUwNjA3MDAzNDUzWjAYMRYwFAYD VQQDEw02ODNhNGVhZC04ZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06rNQcIsNallbB49GapwuZOo0jvJ6cQ4zEKt+gXu0PVB1LHsfRh3EQR8eydx KxU+i3/eFNATBlcNs3Wi08U9prj9nfpFQJCHa/A4nZldsjBSmIK/CdqHE3B+n1BW ECJbpyEJ9TLJFfxBn7NjA+RC9GS/BIGCK9oPRbV/U5u6tp4Ty2XoGPGJvXgzL3x8 Ao+q4Yu/mEvYA6fqe4HClCQ1oURv6WPtaxUzYi5bdKhkw16VKMRDlZz89lmEHeFy qs/9tk6aRbKeYmP2uVfXUJum7Ixa9Tq1qOaamnZh1RjTG5kFipIlsmBViWeH0z0F tfXk4bmiNBozJeRBaX4jQHD57QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBASwM2D P6bpQQyT0kM5uzqsS5/rMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4TAS4SVyPwQmuEx/8NgEX9/9QVsAEoiJYs3t7rQfb5kNdgS6yI3V8 fRxm7qG60zzHybLmIU5tMw4Y0v6AJMjrTBEkDH2XLT7+UwCM9QTRqVoBsof3+3YW GvNZRsmZab+uPdPNroO32Li/F+fYacGNFnmieu8gz0elNoUNMCfMvz3tWXJ4V+/b oen+X2nTH/d5K9De0YWBGN4XAtcE1ub/YCBDqrpsFA9ZQIE5QHJsfBBjIYesSagu XjPdCFye2v7kLG44jr6i13zMnV1jcsXx7WvnRfZFHvvdzeuUngIJBIP6T8rHU7JR WLmRP0RXv/cu7Uu1+S7HahDDCTr5zhI4 -----END CERTIFICATE-----Generated at Sat May 31 16:40:41 2025 by rpki-client