$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: tSCm2+ML9nhNOY9Y4f+e02Nn2ypfauJaxBfPLUOGzoE= Subject key identifier: 4D:5E:00:9E:31:15:35:C8:80:5C:49:44:C9:69:F6:B2:D6:D2:BE:34 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 110E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 1106 Signing time: Fri 30 May 2025 17:28:09 +0000 Manifest this update: Fri 30 May 2025 17:28:08 +0000 Manifest next update: Fri 06 Jun 2025 17:28:08 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: M+dRwEJpo0+GSThlZYhqvqm+y0gBBfdV9go17TVIsfk=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4366 (0x110e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: May 30 17:28:08 2025 GMT Not After : Jun 6 17:28:08 2025 GMT Subject: CN=6839eaa8-bea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:2a:b2:b0:40:40:97:e2:b6:54:62:17:55: 23:93:24:00:2e:ef:d8:b2:79:b2:7d:a7:a8:b2:44: 0f:67:36:1a:38:30:ab:2f:cd:fe:f1:31:a4:1e:d9: 83:0d:dc:8f:df:50:6c:55:da:d7:7e:d1:e7:f6:09: 40:c3:64:1c:48:47:11:11:9b:6f:45:16:1d:0d:62: 13:eb:bf:7c:de:66:72:ff:2c:12:a8:8f:ae:80:c9: 3c:59:a7:e4:76:00:37:60:4e:5b:fd:ae:52:b0:78: ac:58:71:ad:86:1a:13:a6:dd:9f:a0:c9:16:8c:fb: 58:91:fe:93:78:f9:c4:77:db:b7:7f:68:0f:ae:9f: b8:40:b8:e8:cd:39:26:82:25:3e:b0:76:99:85:91: 86:48:df:ad:d3:b7:93:02:cb:ea:39:f5:b6:87:a1: 92:e1:3b:25:c2:d2:49:eb:23:71:57:e5:dd:f6:39: 38:63:4b:ee:74:8e:03:aa:7b:bc:b8:2f:06:e3:47: ba:56:97:56:84:62:1c:bf:3a:91:92:75:59:0e:e4: 79:8b:38:8e:64:27:f6:2b:60:ca:3c:eb:b2:22:01: 59:95:0b:96:93:11:98:0a:d8:7a:72:6b:eb:55:40: 70:83:f4:fa:e3:ec:69:4d:fc:f0:ec:24:17:23:62: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5E:00:9E:31:15:35:C8:80:5C:49:44:C9:69:F6:B2:D6:D2:BE:34 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c0:09:23:fd:6a:d0:9e:f4:0c:1c:c8:c9:70:7c:5d:69:1c: 8c:12:3c:45:10:8c:06:b7:22:05:90:87:c0:bd:bb:c2:20:30: 72:7e:f7:8f:3b:19:ff:11:dc:69:75:1e:b1:b4:d6:c9:1e:f3: e1:b0:19:c8:8f:65:3b:79:ff:df:12:b5:8c:33:95:c1:88:6d: 09:73:68:f8:50:7e:ee:9c:e5:40:ea:39:62:05:2e:ae:9f:66: 28:03:60:12:2d:e5:57:aa:8b:8c:bd:b5:5a:68:20:d0:ef:e0: 30:dc:0e:2d:e0:96:ee:fd:33:b7:d3:4d:36:d6:6c:c4:6c:b7: 10:fd:0c:92:92:ff:20:5e:84:70:6a:fd:05:4f:2d:79:17:eb: 0a:23:42:06:4d:d2:82:ba:cb:88:d2:76:c9:67:2f:f8:ac:71: d8:0b:e9:82:54:b3:43:8e:48:96:98:18:64:81:bc:3c:1b:2e: 51:72:1a:d8:cb:a1:0e:6b:9e:dd:67:91:63:43:ee:4a:87:a5: 72:6e:aa:d5:d3:c7:7e:15:38:da:cd:55:56:53:0f:63:c2:29: 28:11:eb:fd:a0:58:1a:6c:dc:b1:b7:b2:8a:f3:19:ab:7d:77: b6:84:78:9f:cf:7b:e9:7e:ed:34:f7:14:42:db:c0:a4:60:a4: 0e:e5:e5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwNTMwMTcyODA4WhcNMjUwNjA2MTcyODA4WjAYMRYwFAYD VQQDEw02ODM5ZWFhOC1iZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8sqsrBAQJfitlRiF1UjkyQALu/YsnmyfaeoskQPZzYaODCrL83+8TGkHtmD DdyP31BsVdrXftHn9glAw2QcSEcREZtvRRYdDWIT67983mZy/ywSqI+ugMk8Wafk dgA3YE5b/a5SsHisWHGthhoTpt2foMkWjPtYkf6TePnEd9u3f2gPrp+4QLjozTkm giU+sHaZhZGGSN+t07eTAsvqOfW2h6GS4TslwtJJ6yNxV+Xd9jk4Y0vudI4Dqnu8 uC8G40e6VpdWhGIcvzqRknVZDuR5iziOZCf2K2DKPOuyIgFZlQuWkxGYCth6cmvr VUBwg/T64+xpTfzw7CQXI2JBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1eAJ4x FTXIgFxJRMlp9rLW0r40MB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCwAkj/WrQnvQMHMjJcHxdaRyMEjxFEIwGtyIFkIfAvbvCIDByfveP Oxn/EdxpdR6xtNbJHvPhsBnIj2U7ef/fErWMM5XBiG0Jc2j4UH7unOVA6jliBS6u n2YoA2ASLeVXqouMvbVaaCDQ7+Aw3A4t4Jbu/TO300021mzEbLcQ/QySkv8gXoRw av0FTy15F+sKI0IGTdKCusuI0nbJZy/4rHHYC+mCVLNDjkiWmBhkgbw8Gy5RchrY y6EOa57dZ5FjQ+5Kh6VybqrV08d+FTjazVVWUw9jwikoEev9oFgabNyxt7KK8xmr fXe2hHifz3vpfu009xRC28CkYKQO5eXU -----END CERTIFICATE-----Generated at Sat May 31 17:42:35 2025 by rpki-client