$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: CLu8iAgPmQtRxYB6z0mkmE2UNeAnA/WaZDgVKwzh0Ls= Subject key identifier: E6:C6:94:D7:30:AF:95:50:DB:17:70:75:82:99:7E:14:C1:80:BF:A7 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2BB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2BA5 Signing time: Sat 31 May 2025 15:31:28 +0000 Manifest this update: Sat 31 May 2025 15:31:28 +0000 Manifest next update: Sat 07 Jun 2025 15:31:28 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: pKqRXeRoz+v2sdx7G28mmNfdRd+qyfpPsiHC3eQVyp4=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: Y+UHiw8c3eNlA0cJzRblwugtoQFPbU8OnmXnd1yx0dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11189 (0x2bb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: May 31 15:31:28 2025 GMT Not After : Jun 7 15:31:28 2025 GMT Subject: CN=683b20d0-7772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:da:da:15:42:45:8c:9f:f1:5d:3e:48:50: d9:80:2b:8c:19:7d:b2:c4:b8:11:6c:ec:01:a2:7e: 14:dd:79:7b:9a:5d:f3:56:e0:32:35:0a:3b:16:98: ab:39:d8:fa:4f:74:d4:63:a9:a7:12:3d:db:df:ab: 3c:fd:a2:fb:61:07:33:96:8a:58:e5:3a:96:cc:38: 20:38:bf:51:b5:97:77:97:95:6d:0e:e3:26:4e:2f: e3:5e:09:54:67:5c:00:7b:fd:0e:4f:3c:5d:e6:3f: 58:62:c9:a5:05:fb:59:fe:fe:97:70:13:e3:1f:68: 95:75:79:b2:ec:93:48:f5:61:fe:e7:2f:8d:b3:f4: 6c:7d:b4:45:36:f1:14:9f:9f:21:53:bd:16:07:62: 43:2f:a1:f7:19:0f:f5:7f:1d:20:b2:40:c8:62:7e: a8:1e:57:9c:2d:99:1a:75:c6:93:24:a8:57:bc:14: 78:12:0b:ea:e7:d4:b0:56:4f:49:25:0f:ca:ec:ce: fa:1b:18:ad:29:85:ed:0a:7f:da:35:d1:29:10:c7: a2:0c:7b:df:6e:7c:f2:11:1b:87:6d:a5:aa:03:49: 2c:ea:03:7a:62:bb:01:f1:16:51:66:6e:af:aa:a9: 02:58:11:a2:bd:dd:09:f0:9f:e9:53:00:0a:2b:21: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C6:94:D7:30:AF:95:50:DB:17:70:75:82:99:7E:14:C1:80:BF:A7 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fe:1a:12:a5:a0:6a:d7:dd:25:bb:d0:58:fc:d2:fe:94:24: f6:06:48:60:ce:3f:d9:66:b9:87:36:fe:5f:0f:82:b6:c7:08: c4:92:f4:a1:ed:fa:81:cf:6a:29:76:0e:8f:1b:28:65:28:3b: fa:6c:a5:3d:44:e9:91:a0:20:92:dc:d7:9d:b3:cf:73:3f:7b: f2:3e:6f:7f:5c:d3:90:38:3b:25:8e:6b:e5:2e:17:bd:04:54: 7e:c5:51:dc:05:64:4f:d8:1d:6f:af:95:25:9e:7d:22:53:df: 2e:70:36:02:97:a2:89:32:cc:d6:19:23:6d:ce:6c:ce:0b:c7: df:9f:5e:2e:b1:02:ac:2a:65:75:a7:9f:35:94:64:55:6c:c4: 49:14:2c:58:ea:96:b9:a1:f0:02:bb:c4:1a:70:04:c0:1b:e0: 3f:1b:d3:7f:95:4a:49:49:46:ea:27:a3:ba:21:1c:c9:ba:bb: 38:10:fa:7b:b6:a7:82:a6:ae:ea:88:dc:f1:40:4d:ed:99:c5: a0:2d:62:2e:9c:ee:68:da:ec:be:15:e0:6a:e2:e1:8e:85:fe: b2:b4:58:d2:c0:d6:5f:95:c9:30:d2:26:28:a8:3a:d4:1d:db: 5c:94:23:cb:56:1b:68:cc:47:7e:f9:59:f2:9a:6e:e1:79:2e: 79:12:82:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUwNTMxMTUzMTI4WhcNMjUwNjA3MTUzMTI4WjAYMRYwFAYD VQQDEw02ODNiMjBkMC03NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JXa2hVCRYyf8V0+SFDZgCuMGX2yxLgRbOwBon4U3Xl7ml3zVuAyNQo7Fpir Odj6T3TUY6mnEj3b36s8/aL7YQczlopY5TqWzDggOL9RtZd3l5VtDuMmTi/jXglU Z1wAe/0OTzxd5j9YYsmlBftZ/v6XcBPjH2iVdXmy7JNI9WH+5y+Ns/RsfbRFNvEU n58hU70WB2JDL6H3GQ/1fx0gskDIYn6oHlecLZkadcaTJKhXvBR4Egvq59SwVk9J JQ/K7M76GxitKYXtCn/aNdEpEMeiDHvfbnzyERuHbaWqA0ks6gN6YrsB8RZRZm6v qqkCWBGivd0J8J/pUwAKKyG++wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObGlNcw r5VQ2xdwdYKZfhTBgL+nMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf/hoSpaBq190lu9BY/NL+lCT2Bkhgzj/ZZrmHNv5fD4K2xwjEkvSh 7fqBz2opdg6PGyhlKDv6bKU9ROmRoCCS3Neds89zP3vyPm9/XNOQODsljmvlLhe9 BFR+xVHcBWRP2B1vr5Ulnn0iU98ucDYCl6KJMszWGSNtzmzOC8ffn14usQKsKmV1 p581lGRVbMRJFCxY6pa5ofACu8QacATAG+A/G9N/lUpJSUbqJ6O6IRzJurs4EPp7 tqeCpq7qiNzxQE3tmcWgLWIunO5o2uy+FeBq4uGOhf6ytFjSwNZflckw0iYoqDrU HdtclCPLVhtozEd++Vnymm7heS55EoK6 -----END CERTIFICATE-----Generated at Sat May 31 17:02:21 2025 by rpki-client