$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: +J5sGj96B8y/8KBtVk4doTlCgfKxJrF2L2EeaZKw1HQ= Subject key identifier: 86:22:84:FF:DF:96:F3:9F:2E:FC:BE:B6:68:85:72:15:3F:38:DC:9B Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0117 Signing time: Sat 31 May 2025 04:29:49 +0000 Manifest this update: Sat 31 May 2025 04:29:48 +0000 Manifest next update: Sat 07 Jun 2025 04:29:48 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: uQGz7zGdFYswIWQww7+pEpwQULoA8CY4a3m+6XsqizQ=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: May 31 04:29:48 2025 GMT Not After : Jun 7 04:29:48 2025 GMT Subject: CN=683a85bc-3089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:5a:d3:53:df:5a:02:6a:94:d3:94:b8:71: 0d:00:b1:25:4c:e0:8c:c2:81:6a:9b:2e:65:db:c2: ff:51:4d:a5:a9:45:52:4f:55:8b:19:42:7c:6c:32: e4:68:a8:93:07:be:dc:9d:fd:4e:c0:e0:b5:87:82: 82:c8:47:36:2d:f7:f0:dd:d3:5c:32:b1:5b:ce:f1: de:f0:1c:a6:30:77:f0:21:37:e9:71:c6:cb:9d:ec: 70:22:94:83:ca:6c:cf:6e:ce:72:40:09:2c:0f:fd: 58:c2:8a:41:a5:9c:cb:62:66:2a:f2:85:83:97:f2: ec:01:1f:24:7c:85:ae:21:3e:e0:78:15:f8:46:b4: 00:23:80:7a:e6:5c:d3:7c:91:bd:98:92:0d:9c:f9: ec:e3:ef:99:91:e0:c3:c5:e9:da:98:62:fd:f6:5b: ec:14:10:03:3f:5a:69:d9:ba:c5:ba:7d:ca:e6:cf: a0:c4:2b:8e:98:e8:c5:1e:8f:56:a4:94:6d:86:46: 43:1d:6e:61:15:b3:aa:3a:eb:41:9f:73:d3:2d:aa: a3:2f:e8:3c:f3:1d:16:0b:d2:3f:38:ad:9f:73:1e: 33:6f:d3:d2:79:5c:8a:f4:1c:af:55:23:a8:0b:ad: a9:50:2d:f2:3c:0c:0e:48:e2:41:da:0a:14:95:4e: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:22:84:FF:DF:96:F3:9F:2E:FC:BE:B6:68:85:72:15:3F:38:DC:9B X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d1:64:90:d1:ac:e5:28:40:36:52:4d:a1:8f:a8:ce:40:f1: 9b:0b:d7:3a:6f:23:fd:36:7a:33:66:63:0b:6c:28:d2:4f:dc: 1d:a9:75:3b:cb:4a:00:f0:ab:0c:f4:53:8d:a8:2f:c4:b1:42: ba:1e:6e:c3:b7:50:fd:9c:9e:ca:51:9b:00:17:bd:c0:d6:d3: 11:f4:47:25:6a:dd:90:22:e2:5e:1e:29:ce:5d:5d:a4:65:c9: a5:a5:97:c8:fb:8a:29:66:df:55:97:13:27:a0:61:ff:f8:fd: e2:35:b3:e8:93:87:3b:b1:c5:25:b4:49:d7:08:43:14:40:ea: db:41:e2:7a:a3:e9:d6:b9:83:e5:2c:32:a7:32:56:79:f9:d1: a9:7b:4c:c3:3b:ce:74:f6:fa:e8:85:62:10:23:8c:5e:92:25: 3e:cc:35:b9:4a:11:7c:65:34:ef:f0:e5:0c:a7:23:76:94:50: af:79:e6:7a:40:11:17:dd:2b:06:51:30:31:69:f3:5d:c1:71: c9:59:74:a5:17:6d:fa:77:11:ff:fd:8c:c8:bb:ec:c6:35:d3: 97:74:a1:99:05:6b:75:95:8d:c1:b5:e6:19:f7:72:07:26:9b: 36:9b:3b:76:ab:e4:35:71:ca:fb:56:42:02:ef:cc:c3:a8:5a: 09:dc:9e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwNTMxMDQyOTQ4WhcNMjUwNjA3MDQyOTQ4WjAYMRYwFAYD VQQDEw02ODNhODViYy0zMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIta01PfWgJqlNOUuHENALElTOCMwoFqmy5l28L/UU2lqUVST1WLGUJ8bDLk aKiTB77cnf1OwOC1h4KCyEc2Lffw3dNcMrFbzvHe8BymMHfwITfpccbLnexwIpSD ymzPbs5yQAksD/1YwopBpZzLYmYq8oWDl/LsAR8kfIWuIT7geBX4RrQAI4B65lzT fJG9mJINnPns4++ZkeDDxenamGL99lvsFBADP1pp2brFun3K5s+gxCuOmOjFHo9W pJRthkZDHW5hFbOqOutBn3PTLaqjL+g88x0WC9I/OK2fcx4zb9PSeVyK9ByvVSOo C62pUC3yPAwOSOJB2goUlU6hKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYihP/f lvOfLvy+tmiFchU/ONybMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT0WSQ0azlKEA2Uk2hj6jOQPGbC9c6byP9NnozZmMLbCjST9wdqXU7 y0oA8KsM9FONqC/EsUK6Hm7Dt1D9nJ7KUZsAF73A1tMR9Eclat2QIuJeHinOXV2k ZcmlpZfI+4opZt9VlxMnoGH/+P3iNbPok4c7scUltEnXCEMUQOrbQeJ6o+nWuYPl LDKnMlZ5+dGpe0zDO8509vrohWIQI4xekiU+zDW5ShF8ZTTv8OUMpyN2lFCveeZ6 QBEX3SsGUTAxafNdwXHJWXSlF236dxH//YzIu+zGNdOXdKGZBWt1lY3BteYZ93IH Jps2mzt2q+Q1ccr7VkIC78zDqFoJ3J6A -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client