$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: g2Y0uIdWficW2U26E+fbWTUC6aim3htzUXwgzdx9n6Q= Subject key identifier: 93:B9:25:39:97:DA:EC:38:7C:0C:4E:86:2B:A2:D3:89:D7:8D:B2:E3 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 9A Signing time: Sat 31 May 2025 05:52:18 +0000 Manifest this update: Sat 31 May 2025 05:52:17 +0000 Manifest next update: Sat 07 Jun 2025 05:52:17 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: wd6UrYZtoUBet44AGygGErgoc6voWm1sfvdcuHC3/NI=) 2: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: E5suk2cFemWvaevEKzcTmHU5tWd+iiNDKFUohuI1SXE=) 3: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: spLMbb3mjNqo3JOAdT4XdnGINqr0/vPrWt9FF24zq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: May 31 05:52:17 2025 GMT Not After : Jun 7 05:52:17 2025 GMT Subject: CN=683a9911-55ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:b7:f8:a1:8d:9e:0f:49:af:4c:85:18:fe: ae:f3:50:ad:dc:6b:cc:41:ee:9f:3a:47:99:c5:33: d3:3e:1f:b6:97:b6:11:98:3d:15:bd:2f:48:f2:8c: 74:85:4c:04:6b:48:0a:76:b6:1c:e7:52:06:c4:c0: 6c:8e:ee:2c:5d:cb:75:92:72:62:35:dc:76:ef:af: 6b:33:20:de:db:60:ac:63:06:98:e6:34:b5:c6:b4: 62:d2:fd:90:16:7b:e7:80:66:9c:e4:d2:70:4e:8d: 3e:ad:bc:ce:4c:17:77:f0:a5:02:75:5a:0a:b1:21: fb:53:06:15:eb:d9:a7:48:ac:b2:81:b3:e0:92:5a: d0:a2:4c:1a:6b:29:9a:a4:42:05:bb:4a:aa:83:b9: 0b:11:5b:a0:a8:fb:b8:e6:8c:32:75:76:a5:81:59: 86:27:bf:d1:50:1c:a3:6a:1d:9b:51:e6:97:37:14: d9:8a:4a:e0:4e:fc:4c:25:f8:61:ec:77:47:11:d1: 46:4d:a3:e5:66:15:a9:8d:64:74:b5:98:a0:a1:d0: 6d:d9:cc:3f:67:9d:64:86:cb:07:18:0d:6e:ae:4e: 9a:6d:ae:ec:48:56:36:6b:90:34:92:ae:df:81:be: 92:83:55:8d:d0:e5:38:d3:de:98:28:85:f1:e1:1f: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:25:39:97:DA:EC:38:7C:0C:4E:86:2B:A2:D3:89:D7:8D:B2:E3 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7f:01:02:56:06:4f:f8:3f:e9:62:e7:ab:cf:6f:f7:f6:ba: e6:80:40:09:82:50:6a:95:12:09:dc:eb:49:93:c8:01:27:f2: ea:39:e8:40:13:47:87:c2:80:60:76:5d:ce:6b:11:cc:e9:17: 04:66:33:3e:d4:eb:be:cb:7b:5e:d5:74:c7:40:b7:ba:52:2f: 7e:f3:9f:4b:c5:cf:20:c4:62:f3:50:4d:0a:e6:10:7f:45:94: 52:b1:8a:26:e1:97:0d:a4:84:02:90:38:63:f7:64:14:0d:85: 6b:e5:8d:1e:94:63:45:3e:b5:87:23:f3:2e:51:f7:77:89:3b: 6e:9c:c6:a5:2e:f6:19:ea:8f:42:45:07:a3:aa:65:01:2f:50: 93:be:0f:2f:ad:65:6d:11:89:34:be:d6:57:d5:9a:be:91:34: 82:4c:7b:e3:a9:7f:fc:11:1f:54:46:4b:99:43:d6:7c:e7:2d: 9d:c3:0f:9e:0a:c1:a2:bf:41:9c:7b:76:8a:30:5a:33:f9:13: 9b:5b:32:3a:9c:db:51:bf:dc:47:59:42:ec:a3:7e:6b:59:e6: 7b:18:7b:7a:42:93:6f:2b:ce:1b:f4:4b:d8:7a:ce:b1:61:52: e7:2e:13:a9:b8:7b:7d:3b:20:1b:9b:ac:5c:34:de:c9:a7:2c: 6e:51:3e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjUwNTMxMDU1MjE3WhcNMjUwNjA3MDU1MjE3WjAYMRYwFAYD VQQDEw02ODNhOTkxMS01NWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38q3+KGNng9Jr0yFGP6u81Ct3GvMQe6fOkeZxTPTPh+2l7YRmD0VvS9I8ox0 hUwEa0gKdrYc51IGxMBsju4sXct1knJiNdx2769rMyDe22CsYwaY5jS1xrRi0v2Q FnvngGac5NJwTo0+rbzOTBd38KUCdVoKsSH7UwYV69mnSKyygbPgklrQokwaayma pEIFu0qqg7kLEVugqPu45owydXalgVmGJ7/RUByjah2bUeaXNxTZikrgTvxMJfhh 7HdHEdFGTaPlZhWpjWR0tZigodBt2cw/Z51khssHGA1urk6aba7sSFY2a5A0kq7f gb6Sg1WN0OU4096YKIXx4R/3owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO5JTmX 2uw4fAxOhiui04nXjbLjMB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLfwECVgZP+D/pYuerz2/39rrmgEAJglBqlRIJ3OtJk8gBJ/LqOehA E0eHwoBgdl3OaxHM6RcEZjM+1Ou+y3te1XTHQLe6Ui9+859Lxc8gxGLzUE0K5hB/ RZRSsYom4ZcNpIQCkDhj92QUDYVr5Y0elGNFPrWHI/MuUfd3iTtunMalLvYZ6o9C RQejqmUBL1CTvg8vrWVtEYk0vtZX1Zq+kTSCTHvjqX/8ER9URkuZQ9Z85y2dww+e CsGiv0Gce3aKMFoz+RObWzI6nNtRv9xHWULso35rWeZ7GHt6QpNvK84b9EvYes6x YVLnLhOpuHt9OyAbm6xcNN7JpyxuUT7i -----END CERTIFICATE-----Generated at Sat May 31 17:28:57 2025 by rpki-client