$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: xn45zp1VOUmvAKTky45f97T6T8r7fq1HT3TAZj5xdYY= Subject key identifier: FF:C4:E5:A3:B6:D1:7E:5D:87:A9:23:B4:3F:12:93:CD:6D:E8:D8:69 Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 0139 Signing time: Sat 31 May 2025 04:04:08 +0000 Manifest this update: Sat 31 May 2025 04:04:08 +0000 Manifest next update: Sat 07 Jun 2025 04:04:08 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: F0oWD/A6Lk291LWsCz1AgAXSLHR+XG0rJ+kiriPBX6M=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: 9QttLF7HMnJDx+HbQAXC0YtWXOJ+pz+cgouITeRm1GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: May 31 04:04:08 2025 GMT Not After : Jun 7 04:04:08 2025 GMT Subject: CN=683a7fb8-f80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:62:84:48:b6:a2:d0:f8:10:e1:af:11:b2: ea:d9:3b:ff:33:9b:dc:a5:d8:04:c8:8e:98:58:15: c1:f1:d0:49:be:a4:11:17:7f:a4:42:e3:f5:40:9c: 07:90:9c:2f:12:4c:93:2f:ba:ee:e2:0d:95:5a:eb: 4e:77:c7:61:a7:fa:ea:de:ff:58:d1:e2:07:b4:51: 9b:e8:2a:30:cd:97:2b:44:f0:cc:f3:7f:66:85:5b: 4c:dc:4e:53:ad:fa:b4:23:c9:cd:7e:bd:36:3e:df: fb:92:61:77:93:ff:3c:ae:a1:be:76:fb:cf:7d:39: ed:d1:0d:dc:94:7a:af:9e:c5:46:f0:01:68:3d:4a: f5:1c:6a:cb:03:a2:1b:c4:55:73:eb:d0:93:9e:48: 93:79:9c:55:99:fa:e8:d9:cd:a4:44:ab:78:06:90: 69:ae:19:36:5d:6b:75:8e:da:48:30:3f:db:cb:a2: c4:4c:64:c0:71:47:48:b5:e8:c2:f5:26:6d:d7:40: b3:bc:09:93:7f:04:46:5c:c4:7d:e3:89:3e:bf:93: 07:7e:1d:4d:b2:9a:71:2a:0d:62:15:65:0c:3c:2e: 60:f6:9e:fc:69:28:49:3c:af:54:3a:7f:96:46:ce: 63:7f:72:1d:c9:36:81:bd:07:db:18:41:30:5e:74: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C4:E5:A3:B6:D1:7E:5D:87:A9:23:B4:3F:12:93:CD:6D:E8:D8:69 X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d1:4d:03:c0:8e:83:47:c5:8f:5c:b2:7f:01:85:ec:6b:70: 59:6c:28:d9:4d:ab:a4:7d:58:a0:b3:03:a4:d1:fc:72:15:72: 6b:91:d0:7f:4e:19:65:80:ed:d3:a5:34:04:3e:7b:98:d2:e8: 85:db:04:e6:9c:3c:bc:e3:1e:81:b7:dc:9f:ff:3b:58:48:3c: d8:52:88:fa:79:94:f6:44:be:30:f8:62:58:eb:78:47:3b:f2: 5e:6a:ea:f8:b0:c8:17:f8:c0:57:20:9a:c1:57:5f:91:5d:04: 52:21:a4:50:1f:84:d6:32:03:0c:30:d9:5a:e3:35:4b:57:a7: 55:4b:34:b2:b3:ea:d0:c7:29:6c:10:56:f0:0b:0c:1f:82:d3: db:b4:69:bf:99:6d:ac:7c:2c:33:02:a0:bd:39:19:44:23:1c: 25:7b:da:0d:51:0e:51:45:b4:fa:ae:bb:93:9e:48:35:e0:de: 16:3b:d4:e4:67:e3:98:60:0b:f0:bf:46:6e:b6:0b:0c:9d:bb: e3:95:9c:55:61:0a:5a:52:e6:80:a7:ea:d1:56:f2:98:97:a6: 76:e5:5a:0f:cd:3d:06:ea:34:98:67:07:c7:40:0f:73:6d:34: 86:f3:c6:c8:03:e4:c4:1c:4c:46:c6:93:9a:5d:f7:f4:90:6f: a0:a2:ef:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjUwNTMxMDQwNDA4WhcNMjUwNjA3MDQwNDA4WjAYMRYwFAYD VQQDEw02ODNhN2ZiOC1mODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4xihEi2otD4EOGvEbLq2Tv/M5vcpdgEyI6YWBXB8dBJvqQRF3+kQuP1QJwH kJwvEkyTL7ru4g2VWutOd8dhp/rq3v9Y0eIHtFGb6CowzZcrRPDM839mhVtM3E5T rfq0I8nNfr02Pt/7kmF3k/88rqG+dvvPfTnt0Q3clHqvnsVG8AFoPUr1HGrLA6Ib xFVz69CTnkiTeZxVmfro2c2kRKt4BpBprhk2XWt1jtpIMD/by6LETGTAcUdItejC 9SZt10CzvAmTfwRGXMR944k+v5MHfh1NsppxKg1iFWUMPC5g9p78aShJPK9UOn+W Rs5jf3IdyTaBvQfbGEEwXnR2mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/E5aO2 0X5dh6kjtD8Sk81t6NhpMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw0U0DwI6DR8WPXLJ/AYXsa3BZbCjZTaukfVigswOk0fxyFXJrkdB/ ThllgO3TpTQEPnuY0uiF2wTmnDy84x6Bt9yf/ztYSDzYUoj6eZT2RL4w+GJY63hH O/Jeaur4sMgX+MBXIJrBV1+RXQRSIaRQH4TWMgMMMNla4zVLV6dVSzSys+rQxyls EFbwCwwfgtPbtGm/mW2sfCwzAqC9ORlEIxwle9oNUQ5RRbT6rruTnkg14N4WO9Tk Z+OYYAvwv0ZutgsMnbvjlZxVYQpaUuaAp+rRVvKYl6Z25VoPzT0G6jSYZwfHQA9z bTSG88bIA+TEHExGxpOaXff0kG+gou+a -----END CERTIFICATE-----Generated at Sat May 31 17:24:42 2025 by rpki-client