$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: rN6SuEHFAmEGV+X1aEin2aKpuaigiroXnsYa2pimvYc= Subject key identifier: AB:6C:F3:68:9A:10:99:49:12:42:B7:3B:D0:CC:95:05:BD:EC:EF:D7 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: C8 Signing time: Sat 31 May 2025 05:41:31 +0000 Manifest this update: Sat 31 May 2025 05:41:30 +0000 Manifest next update: Sat 07 Jun 2025 05:41:30 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: CDfJI/saZPssr6KRBZFrlMQkiD/JrNqICXkAEQHziQs=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: May 31 05:41:30 2025 GMT Not After : Jun 7 05:41:30 2025 GMT Subject: CN=683a968b-a79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:14:03:f3:45:b5:08:68:d4:24:f4:3b:38: 25:4e:b4:5d:ca:63:ad:bd:86:a7:3a:57:1e:89:da: 86:b6:0d:af:b3:f2:e9:60:1d:b3:0c:63:d5:11:29: 6f:6a:29:a3:39:1e:7a:7f:44:a7:a1:d0:6b:d6:a8: 71:81:a9:ef:1d:da:b7:bd:5f:c1:ab:1a:87:8e:78: 36:76:4d:9a:f4:4b:79:55:34:f7:e3:1a:bf:5a:e7: a4:7e:90:f4:0e:74:31:e3:91:5e:9d:64:84:14:e7: 57:10:2e:7d:48:ca:d9:e7:2d:4b:0a:f2:80:f0:3d: d5:2a:dc:a3:26:08:f6:17:8e:76:2d:d0:06:73:d0: b0:08:36:6e:da:4a:8a:af:5a:50:56:df:b3:5b:41: a5:fa:86:86:7d:96:ca:20:36:3c:f8:b0:20:ca:19: ab:7e:a0:87:fb:31:88:d4:8e:5f:0b:7e:37:0d:29: ea:ca:3c:ce:90:3e:41:80:db:f2:3c:5a:b9:de:33: bc:a7:07:cf:45:43:59:6e:ae:16:54:8b:02:d7:92: 15:ab:7a:c2:24:b1:7a:dd:5b:5f:7b:a0:ad:e0:c4: 0d:fc:a4:5e:4d:09:31:95:16:c7:f3:2c:78:18:89: 79:83:8d:68:ee:68:8d:b4:93:8d:ba:3e:3c:28:91: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:F3:68:9A:10:99:49:12:42:B7:3B:D0:CC:95:05:BD:EC:EF:D7 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:c6:94:7c:26:8e:76:2f:69:96:2c:dd:c1:21:c3:66:74:fe: 5a:89:bf:fb:9b:dd:38:ee:f9:95:3d:9b:98:60:b5:7f:83:f5: 61:06:f3:1e:08:9a:e5:b7:89:9f:35:90:fc:14:05:05:54:ba: 2b:f0:57:bb:70:48:c3:30:0a:5c:96:86:23:18:e9:e8:b5:dc: ac:7c:31:ae:30:9d:78:69:72:75:75:40:e1:4e:05:fa:b0:b5: a2:a2:ce:8e:9f:7f:44:8a:4a:6d:ee:7d:a3:5d:1e:bd:da:c5: 1a:07:20:4c:bb:21:f2:bf:69:6a:63:8d:34:8c:2c:6f:46:96: 37:a6:19:6c:34:85:f0:45:d7:57:c6:72:c2:77:4b:7d:52:37: e2:b7:e8:36:80:de:cb:52:97:f7:bd:90:1c:70:a4:fe:bf:9c: 06:46:61:b9:98:ff:03:36:c3:f7:91:b2:b7:d1:12:1e:1f:b6: ba:92:91:fc:df:92:08:d1:81:6b:86:88:42:a3:1d:e8:e8:a2: 4a:c7:07:e7:19:23:4a:12:93:de:25:e4:16:a3:75:ca:0f:f1: 9d:7a:5d:f4:48:58:ae:5d:f1:ed:6b:f4:e8:ed:5b:0e:30:be: 5b:6c:64:ff:10:8e:31:f9:87:85:4a:22:05:53:e3:8e:a8:0f: cb:1a:29:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUwNTMxMDU0MTMwWhcNMjUwNjA3MDU0MTMwWjAYMRYwFAYD VQQDEw02ODNhOTY4Yi1hNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquwUA/NFtQho1CT0OzglTrRdymOtvYanOlceidqGtg2vs/LpYB2zDGPVESlv aimjOR56f0SnodBr1qhxganvHdq3vV/BqxqHjng2dk2a9Et5VTT34xq/WuekfpD0 DnQx45FenWSEFOdXEC59SMrZ5y1LCvKA8D3VKtyjJgj2F452LdAGc9CwCDZu2kqK r1pQVt+zW0Gl+oaGfZbKIDY8+LAgyhmrfqCH+zGI1I5fC343DSnqyjzOkD5BgNvy PFq53jO8pwfPRUNZbq4WVIsC15IVq3rCJLF63Vtfe6Ct4MQN/KReTQkxlRbH8yx4 GIl5g41o7miNtJONuj48KJFzGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKts82ia EJlJEkK3O9DMlQW97O/XMB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNxpR8Jo52L2mWLN3BIcNmdP5aib/7m9047vmVPZuYYLV/g/VhBvMe CJrlt4mfNZD8FAUFVLor8Fe7cEjDMApcloYjGOnotdysfDGuMJ14aXJ1dUDhTgX6 sLWios6On39Eikpt7n2jXR692sUaByBMuyHyv2lqY400jCxvRpY3phlsNIXwRddX xnLCd0t9Ujfit+g2gN7LUpf3vZAccKT+v5wGRmG5mP8DNsP3kbK30RIeH7a6kpH8 35II0YFrhohCox3o6KJKxwfnGSNKEpPeJeQWo3XKD/Gdel30SFiuXfHta/To7VsO ML5bbGT/EI4x+YeFSiIFU+OOqA/LGila -----END CERTIFICATE-----Generated at Sat May 31 17:41:01 2025 by rpki-client