$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: /KcTkScrDotS4nVtg+7Or/GnWUyCehXm82hZlEmjCgY= Subject key identifier: A5:03:77:A6:6C:D4:F1:2E:E1:0C:96:79:BD:FB:50:66:E6:31:DD:E7 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 07EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 18EF Signing time: Fri 30 May 2025 17:27:53 +0000 Manifest this update: Fri 30 May 2025 17:27:52 +0000 Manifest next update: Fri 06 Jun 2025 17:27:52 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: aKpSVTSuXSY+zfOTCsfLOLtjB0Rt283UDfbXwV7NF5E=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: Fb8k8+AedY7WXxvThRoDU2Yv91zXaAiC2+Ql7v0J/eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2030 (0x7ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: May 30 17:27:52 2025 GMT Not After : Jun 6 17:27:52 2025 GMT Subject: CN=6839ea99-8a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:15:e2:41:62:64:b0:3c:9f:c5:67:0f:16: d4:bc:c9:1d:79:0e:83:86:9f:8b:80:ae:92:36:c0: 8c:10:8d:58:20:fb:1c:fe:29:a1:ea:fc:17:21:4e: e3:39:18:5d:3c:01:b5:79:d8:27:ee:27:a3:29:1c: 0a:3d:26:03:37:8e:b8:c5:96:33:ed:75:da:19:4e: 97:6d:40:71:d4:81:10:30:98:94:d4:7f:cd:36:39: 34:5d:3a:83:49:12:a2:4b:53:4f:ed:ee:19:e5:01: 01:21:ac:44:16:48:d9:13:38:45:08:a2:4e:7c:12: 4e:5b:c8:00:42:99:ff:0e:88:ac:83:1e:c4:5e:67: 7b:ef:50:7a:44:af:41:cc:ae:0d:24:b0:58:65:ac: f8:b4:22:1c:22:1b:50:69:e4:77:02:c3:c9:23:2a: f2:2b:c0:70:1c:cc:19:b6:b3:d7:3b:e2:58:0b:e3: a4:05:d0:84:6e:a3:5c:df:53:f8:8b:b1:7b:d1:e0: 58:5d:a3:ce:67:3a:35:88:a5:a0:4f:ef:96:d5:ac: e2:be:39:db:b0:8f:80:5e:fe:4d:80:28:d2:50:44: e1:03:e3:82:c5:cc:c9:56:29:57:a1:cc:a4:64:74: 90:d0:16:65:a8:57:eb:66:95:53:13:55:10:ae:0a: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:03:77:A6:6C:D4:F1:2E:E1:0C:96:79:BD:FB:50:66:E6:31:DD:E7 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5a:5a:e3:f2:b5:1d:7c:fb:ba:b9:81:6b:ba:52:73:d1:68: 75:67:b7:f9:ed:1f:7e:b9:a1:bd:94:46:83:8f:5a:10:66:9e: 9e:72:41:45:f4:bf:4f:28:a1:2a:0a:1b:c5:82:96:e5:e4:00: b5:f6:54:10:73:31:88:7f:c9:1f:7d:f1:51:6c:8a:a8:ad:7c: 21:d7:13:87:19:0a:f0:a3:ae:d2:81:d7:9e:36:93:e5:1e:ea: ed:13:0a:c8:d8:78:76:92:3e:8d:28:29:85:45:96:ce:7f:50: ce:5a:c7:f0:1b:b2:85:3f:3f:3d:df:01:53:5c:0b:04:fb:97: 90:30:89:8d:da:58:75:7e:15:1e:07:0e:89:e6:8f:e1:b2:3d: 80:2c:d6:66:f2:f8:80:fb:1c:35:b6:40:b6:02:d3:e0:dd:6b: d8:39:21:0b:af:d3:63:63:30:4d:ea:60:b1:07:79:12:68:4f: c7:1b:bd:9f:fd:18:35:73:b7:36:7e:2a:e8:e6:bb:1b:9c:85: 83:36:3b:3d:33:25:ea:fa:54:0e:86:4a:26:80:e1:63:ec:24: 44:61:aa:6b:79:b2:7f:5a:f7:d2:b1:9e:02:9a:31:a8:46:d8: 91:6c:73:94:ac:31:37:a3:e3:8d:63:60:f0:c4:2a:ea:ac:8f: 7d:48:83:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwNTMwMTcyNzUyWhcNMjUwNjA2MTcyNzUyWjAYMRYwFAYD VQQDEw02ODM5ZWE5OS04YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLQV4kFiZLA8n8VnDxbUvMkdeQ6Dhp+LgK6SNsCMEI1YIPsc/imh6vwXIU7j ORhdPAG1edgn7iejKRwKPSYDN464xZYz7XXaGU6XbUBx1IEQMJiU1H/NNjk0XTqD SRKiS1NP7e4Z5QEBIaxEFkjZEzhFCKJOfBJOW8gAQpn/Doisgx7EXmd771B6RK9B zK4NJLBYZaz4tCIcIhtQaeR3AsPJIyryK8BwHMwZtrPXO+JYC+OkBdCEbqNc31P4 i7F70eBYXaPOZzo1iKWgT++W1azivjnbsI+AXv5NgCjSUEThA+OCxczJVilXocyk ZHSQ0BZlqFfrZpVTE1UQrgpl6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUDd6Zs 1PEu4QyWeb37UGbmMd3nMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Wlrj8rUdfPu6uYFrulJz0Wh1Z7f57R9+uaG9lEaDj1oQZp6eckFF 9L9PKKEqChvFgpbl5AC19lQQczGIf8kfffFRbIqorXwh1xOHGQrwo67SgdeeNpPl HurtEwrI2Hh2kj6NKCmFRZbOf1DOWsfwG7KFPz893wFTXAsE+5eQMImN2lh1fhUe Bw6J5o/hsj2ALNZm8viA+xw1tkC2AtPg3WvYOSELr9NjYzBN6mCxB3kSaE/HG72f /Rg1c7c2firo5rsbnIWDNjs9MyXq+lQOhkomgOFj7CREYaprebJ/WvfSsZ4CmjGo RtiRbHOUrDE3o+ONY2DwxCrqrI99SINR -----END CERTIFICATE-----Generated at Sat May 31 15:38:33 2025 by rpki-client