$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: pSecSk9RrbOPiP34pdJhfhiY7M/4rWJjFOX60fF2rME= Subject key identifier: 21:16:67:E4:7E:8E:43:1A:AA:FC:E8:AA:9F:5F:4B:A6:8F:A2:CA:0F Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 105C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 1056 Signing time: Mon 02 Jun 2025 17:35:19 +0000 Manifest this update: Mon 02 Jun 2025 17:35:19 +0000 Manifest next update: Mon 09 Jun 2025 17:35:19 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: blV3AzJLtGHiafsNhZZ6V1dgE3w2khwEvM1sJtpkaKs=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 8EmwRqTTi0D6Jqb1QQoQFecB/Y41qpXK3rVqh44z4W0=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: 7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4188 (0x105c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Jun 2 17:35:19 2025 GMT Not After : Jun 9 17:35:19 2025 GMT Subject: CN=683de0d7-3427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:05:2b:33:06:72:57:bf:11:e3:d9:86:f6: d1:cd:a7:f0:c9:79:2e:42:86:07:c3:df:38:33:d9: 2b:8b:b6:b2:40:9c:00:16:16:69:65:a8:73:eb:f6: 71:8f:21:94:5d:cd:44:b6:e0:3a:ef:dc:bf:76:79: 67:fa:12:7b:ce:28:55:41:a1:23:4d:ca:17:76:79: b9:60:10:47:e1:c4:ad:38:be:5b:6b:36:3d:a3:a4: 30:da:4b:0e:3c:91:b8:a8:57:f3:9b:19:92:2f:57: ce:cb:91:ac:4e:92:6c:96:c3:93:f0:4f:22:6b:09: 65:62:a9:3b:59:81:53:17:01:20:c0:80:41:5e:01: e4:c5:a8:98:b8:b0:4b:ce:fb:f3:21:0b:57:a4:9c: 67:f4:d2:32:a7:2f:12:12:b0:04:36:31:5b:c8:9a: 7c:6a:63:ec:44:ff:73:2b:d7:67:ac:37:1e:a3:23: 35:69:2c:48:49:4f:ba:4f:f4:fe:7c:d8:1f:5c:95: 83:41:cb:d7:0f:cc:d6:ee:b2:c9:c8:b2:e2:bc:e6: e3:53:5c:d7:0c:8f:41:e3:ba:d2:b5:26:56:53:45: 4f:65:2c:74:e0:95:84:7b:d6:31:d1:b7:04:16:5f: 5f:ca:60:92:2d:49:9e:7b:3d:32:0e:a0:e4:00:8b: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:67:E4:7E:8E:43:1A:AA:FC:E8:AA:9F:5F:4B:A6:8F:A2:CA:0F X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:75:78:a4:b7:3b:88:54:b9:1b:1b:79:7f:0b:46:6f:f5:07: f5:b1:74:c1:12:02:9e:7f:6f:22:e4:fc:d1:70:fa:c9:4c:d7: 67:6b:7d:8b:a1:bb:a7:c4:89:1b:0e:b1:92:72:f2:75:9f:a4: ff:9b:6d:f2:6f:05:15:f3:a5:a4:af:d0:21:98:f7:49:22:08: 76:40:a0:70:74:c9:f1:52:77:57:24:6b:1b:b8:ff:c8:bb:ce: be:25:a3:ae:24:c6:69:b4:87:ae:8d:1c:4e:39:59:00:3a:a1: d1:f7:ec:eb:1c:b2:42:c1:40:73:fe:cf:d5:a0:62:08:3d:45: a0:0d:cb:70:ab:5a:0a:74:f3:8f:16:03:b5:a1:f8:88:2f:54: b1:d3:09:98:1b:1e:13:be:b7:37:ca:89:7c:e8:de:ec:82:7b: 62:fb:77:2a:20:54:e5:e0:72:21:33:4a:dd:6d:02:87:c4:6d: 6f:97:cc:5d:81:7b:ca:bb:84:28:54:66:50:f7:38:0c:25:f9: f0:de:81:46:af:96:a3:6c:15:9d:6c:ad:8b:20:b4:39:44:07: 97:f9:35:53:2c:e8:07:a1:b6:67:6c:d7:29:60:b8:59:40:69: af:78:a2:0c:8d:25:43:7e:31:0a:d2:95:95:06:06:3a:9e:43: 9d:76:c5:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUwNjAyMTczNTE5WhcNMjUwNjA5MTczNTE5WjAYMRYwFAYD VQQDEw02ODNkZTBkNy0zNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/wFKzMGcle/EePZhvbRzafwyXkuQoYHw984M9kri7ayQJwAFhZpZahz6/Zx jyGUXc1EtuA679y/dnln+hJ7zihVQaEjTcoXdnm5YBBH4cStOL5bazY9o6Qw2ksO PJG4qFfzmxmSL1fOy5GsTpJslsOT8E8iawllYqk7WYFTFwEgwIBBXgHkxaiYuLBL zvvzIQtXpJxn9NIypy8SErAENjFbyJp8amPsRP9zK9dnrDceoyM1aSxISU+6T/T+ fNgfXJWDQcvXD8zW7rLJyLLivObjU1zXDI9B47rStSZWU0VPZSx04JWEe9Yx0bcE Fl9fymCSLUmeez0yDqDkAIvx9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEWZ+R+ jkMaqvzoqp9fS6aPosoPMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9dXiktzuIVLkbG3l/C0Zv9Qf1sXTBEgKef28i5PzRcPrJTNdna32L obunxIkbDrGScvJ1n6T/m23ybwUV86Wkr9AhmPdJIgh2QKBwdMnxUndXJGsbuP/I u86+JaOuJMZptIeujRxOOVkAOqHR9+zrHLJCwUBz/s/VoGIIPUWgDctwq1oKdPOP FgO1ofiIL1Sx0wmYGx4Tvrc3yol86N7sgnti+3cqIFTl4HIhM0rdbQKHxG1vl8xd gXvKu4QoVGZQ9zgMJfnw3oFGr5ajbBWdbK2LILQ5RAeX+TVTLOgHobZnbNcpYLhZ QGmveKIMjSVDfjEK0pWVBgY6nkOddsVz -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:57 2025 by rpki-client