$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: gPNAhg+qUHVkcPXL6fr310LvfgwQc5W+G9qtrvNFcrk= Subject key identifier: 57:2D:6C:D6:FD:AD:7D:64:9E:48:AF:90:24:FF:C5:DE:FD:48:A7:3B Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 0711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 070C Signing time: Fri 30 May 2025 22:06:25 +0000 Manifest this update: Fri 30 May 2025 22:06:25 +0000 Manifest next update: Fri 06 Jun 2025 22:06:25 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: 5asRnyjUM7zIUZiISG4i9tqo4IA6D0ocpf2UByID7GE=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: H0kHP8pBoH+bwHmlcJ0nDAtlDVRXDuWl/zy2MYQJc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: May 30 22:06:25 2025 GMT Not After : Jun 6 22:06:25 2025 GMT Subject: CN=683a2be1-40d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:20:69:12:7b:70:7f:7e:19:c1:2e:83:2f: 1e:36:9d:e2:11:4e:c2:33:ec:3e:13:cf:0d:f7:06: 23:1f:b2:33:97:a1:48:f3:d2:35:89:73:77:db:41: 3c:fa:af:8a:46:93:15:e6:9b:c1:83:bb:14:a9:80: 9d:b4:74:fe:e3:6e:36:1d:04:9d:70:13:29:f4:31: 71:3c:e5:0c:a9:0a:b3:39:03:2b:2b:01:49:56:63: c0:a2:0c:38:e6:ab:51:a9:3c:4c:55:16:42:1b:ca: 67:fc:4c:51:b7:64:57:cd:48:f7:16:21:62:95:0a: 06:57:91:f2:d8:49:99:77:f0:0a:dc:d5:f1:68:b9: 14:99:34:00:34:36:43:77:22:13:c7:a0:28:9a:52: 3f:0d:5c:d4:d4:a1:52:4f:72:1c:9d:58:57:31:53: 24:d0:65:47:d4:5c:29:a5:5d:7d:01:c1:f9:1e:8f: 6b:0b:9b:b4:2d:cd:68:48:d5:c9:b5:4f:5c:d2:ae: 85:22:82:28:a7:61:ed:68:02:73:fe:69:22:aa:bd: d0:ef:2e:41:a9:e1:e6:cd:29:95:c6:e6:2f:fe:3a: 9e:79:ec:c9:71:6c:b7:55:0c:e5:e8:18:f0:2a:76: 7a:b8:6f:ba:c1:61:fb:1a:42:58:74:e1:ba:37:fb: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:6C:D6:FD:AD:7D:64:9E:48:AF:90:24:FF:C5:DE:FD:48:A7:3B X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9a:83:52:34:9c:2d:70:1d:ee:a6:7b:29:67:4f:74:c6:33: ba:f3:04:9b:6f:cc:3b:71:f5:dd:95:fe:65:74:52:ee:a1:ce: 9f:0c:08:3c:c2:ea:d0:fc:b6:d7:83:f4:94:52:56:32:0d:28: d1:30:d3:d6:39:ff:a8:b8:78:4d:06:74:92:1b:3e:d7:a1:ec: ab:8f:74:a2:42:b1:0e:94:94:6b:20:ca:32:eb:5b:b8:b2:da: 30:4e:99:7b:04:8e:7a:ad:26:07:23:90:1c:f6:b5:ad:1d:f5: 18:b5:aa:8e:7a:8d:27:7c:bf:45:d6:55:f1:ec:9e:52:a0:3d: 11:38:e1:5a:0a:35:68:00:e2:9b:ff:9c:68:f9:48:67:72:25: 83:18:6f:2f:4a:16:28:b7:4e:e3:d8:da:ba:08:82:f8:98:c7: ac:84:f3:bc:1c:83:ed:65:69:06:5f:9a:fe:02:4d:ab:8e:3f: da:69:1b:c4:d5:7e:f0:65:26:03:60:8b:3e:b0:51:26:ee:d8: d1:6f:58:14:f6:de:28:71:e3:3b:53:04:0a:12:a1:9c:72:57: 28:9d:93:6d:94:e8:73:52:42:38:4f:b1:43:06:c6:48:14:ad: 74:ff:bd:70:79:d8:f0:53:34:5b:26:af:d5:7c:98:c6:dc:87: f9:e9:79:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjUwNTMwMjIwNjI1WhcNMjUwNjA2MjIwNjI1WjAYMRYwFAYD VQQDEw02ODNhMmJlMS00MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TogaRJ7cH9+GcEugy8eNp3iEU7CM+w+E88N9wYjH7Izl6FI89I1iXN320E8 +q+KRpMV5pvBg7sUqYCdtHT+4242HQSdcBMp9DFxPOUMqQqzOQMrKwFJVmPAogw4 5qtRqTxMVRZCG8pn/ExRt2RXzUj3FiFilQoGV5Hy2EmZd/AK3NXxaLkUmTQANDZD dyITx6AomlI/DVzU1KFST3IcnVhXMVMk0GVH1FwppV19AcH5Ho9rC5u0Lc1oSNXJ tU9c0q6FIoIop2HtaAJz/mkiqr3Q7y5BqeHmzSmVxuYv/jqeeezJcWy3VQzl6Bjw KnZ6uG+6wWH7GkJYdOG6N/trIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFctbNb9 rX1knkivkCT/xd79SKc7MB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRmoNSNJwtcB3upnspZ090xjO68wSbb8w7cfXdlf5ldFLuoc6fDAg8 wurQ/LbXg/SUUlYyDSjRMNPWOf+ouHhNBnSSGz7Xoeyrj3SiQrEOlJRrIMoy61u4 stowTpl7BI56rSYHI5Ac9rWtHfUYtaqOeo0nfL9F1lXx7J5SoD0ROOFaCjVoAOKb /5xo+UhnciWDGG8vShYot07j2Nq6CIL4mMeshPO8HIPtZWkGX5r+Ak2rjj/aaRvE 1X7wZSYDYIs+sFEm7tjRb1gU9t4oceM7UwQKEqGcclconZNtlOhzUkI4T7FDBsZI FK10/71wedjwUzRbJq/VfJjG3If56Xk6 -----END CERTIFICATE-----Generated at Sat May 31 17:08:55 2025 by rpki-client