$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json) Hash identifier: yaYs8Gs8k6siraznr+RVOfxkdabU1Kvz63CKOF+S2G8= Subject key identifier: BF:63:88:46:C9:27:02:86:97:15:8D:2A:08:A0:4E:D6:B5:9E:C8:FF Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft Manifest number: C5 Signing time: Sat 31 May 2025 05:35:25 +0000 Manifest this update: Sat 31 May 2025 05:35:25 +0000 Manifest next update: Sat 07 Jun 2025 05:35:25 +0000 Files and hashes: 1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: dKHoq/MSu4zSy6XLIR7HPFrvP/1hxt2jkk5Tzwh8hxI=) 2: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (hash: uDkiek+amCMP5fz1my7MuUAYfCGn2cBLkm1ORj4ta5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Validity Not Before: May 31 05:35:25 2025 GMT Not After : Jun 7 05:35:25 2025 GMT Subject: CN=683a951d-368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:eb:12:0e:90:55:56:d3:40:22:4f:4e:98: 96:be:f3:ce:b2:69:3c:9a:c2:a6:2c:6d:ae:9a:26: 59:f3:cd:0f:67:2d:03:8c:58:13:ba:fb:8a:9e:f6: 15:ba:08:3c:8a:6f:91:02:41:3d:03:3b:5b:00:cd: 7f:e6:33:36:a1:0e:52:e1:46:67:a1:4f:0f:44:94: 23:9c:ec:90:da:d4:cb:e7:7f:09:f5:4e:ac:b5:91: 2e:66:9a:6d:fd:9d:a2:20:21:4a:48:46:71:bf:b6: fb:a4:ab:76:db:9e:96:40:29:68:3b:ad:23:2d:e8: da:8d:11:d3:db:cc:1d:55:1d:33:d5:27:e5:e9:79: 0c:0c:95:6b:fb:19:20:2c:5f:6d:fc:39:b4:df:63: 16:97:e6:5b:93:93:8b:ca:98:e4:25:89:2e:b8:86: 00:28:d8:b7:38:cc:80:ad:f9:4b:31:d7:03:f5:4c: 64:65:0d:95:86:dd:fd:88:ee:3b:b8:f1:15:a0:61: aa:c8:f4:69:08:58:34:77:0c:92:98:4c:62:52:29: a8:bc:3f:47:b6:02:d8:53:08:a7:b3:96:53:58:57: 41:cb:ac:b0:7b:f4:44:d3:63:27:6d:0b:f0:db:3c: 3d:19:f8:62:62:2d:d1:3c:32:52:cd:f5:45:97:8a: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:63:88:46:C9:27:02:86:97:15:8D:2A:08:A0:4E:D6:B5:9E:C8:FF X509v3 Authority Key Identifier: keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7a:08:1f:7b:bb:19:62:f9:40:43:64:42:c6:03:84:90:01: 7f:6b:b4:c6:6c:de:07:0b:51:38:a7:5e:88:56:4a:49:7b:50: 27:45:58:93:97:00:03:0f:5b:13:65:35:6e:2e:02:e9:0c:5c: 84:a6:63:a7:d0:b2:de:20:91:97:46:3d:40:17:a2:32:42:76: 3c:19:bf:6a:dc:c3:7f:1d:41:09:4d:7f:8d:b7:4c:fd:65:3f: de:3d:a5:7a:84:c8:f0:69:f2:55:05:3b:23:da:4d:18:02:82: 3c:38:93:21:e6:56:e6:2f:64:25:18:9f:ef:40:f3:8d:99:39: 5d:e4:ca:2a:10:70:09:53:bb:9d:36:97:40:53:ad:46:b6:e5: cf:d5:12:ea:fe:5f:69:57:82:c2:64:3c:94:4f:be:28:1a:a5: db:f7:ec:b7:75:38:ec:6a:74:04:df:74:37:26:09:7b:02:a1: 0f:39:08:13:67:77:b2:70:84:65:ce:76:79:66:46:d0:6d:10: 40:c9:d9:0b:ae:13:0d:65:7e:56:e6:77:c4:ec:8a:91:4c:93: 7b:a6:f6:57:9a:16:d8:5a:6b:82:9f:1a:92:a0:a5:c0:44:1d: 60:6d:a7:98:34:8e:92:74:4e:10:67:e0:b5:25:1b:1c:88:14: 78:b1:35:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKEFDQ0JGMjZBMTlEOUUxNEMzMUY1RjM3RTFCOTY2RDg2 QTUwNEI0NkIwHhcNMjUwNTMxMDUzNTI1WhcNMjUwNjA3MDUzNTI1WjAYMRYwFAYD VQQDEw02ODNhOTUxZC0zNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9rrEg6QVVbTQCJPTpiWvvPOsmk8msKmLG2umiZZ880PZy0DjFgTuvuKnvYV ugg8im+RAkE9AztbAM1/5jM2oQ5S4UZnoU8PRJQjnOyQ2tTL538J9U6stZEuZppt /Z2iICFKSEZxv7b7pKt2256WQCloO60jLejajRHT28wdVR0z1Sfl6XkMDJVr+xkg LF9t/Dm032MWl+Zbk5OLypjkJYkuuIYAKNi3OMyArflLMdcD9UxkZQ2Vht39iO47 uPEVoGGqyPRpCFg0dwySmExiUimovD9HtgLYUwins5ZTWFdBy6ywe/RE02MnbQvw 2zw9GfhiYi3RPDJSzfVFl4pHZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9jiEbJ JwKGlxWNKgigTta1nsj/MB8GA1UdIwQYMBaAFKzL8moZ2eFMMfXzfhuWbYalBLRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FQjM5M0Q0RTJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRVd3g5Zk4tRzVadGhxVUV0 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNdnlhaG5aNFV3eDlmTi1HNVp0aHFVRXRHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FQjM5M0Q0RTJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRV d3g5Zk4tRzVadGhxVUV0R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEeggfe7sZYvlAQ2RCxgOEkAF/a7TGbN4HC1E4p16IVkpJe1AnRViT lwADD1sTZTVuLgLpDFyEpmOn0LLeIJGXRj1AF6IyQnY8Gb9q3MN/HUEJTX+Nt0z9 ZT/ePaV6hMjwafJVBTsj2k0YAoI8OJMh5lbmL2QlGJ/vQPONmTld5MoqEHAJU7ud NpdAU61GtuXP1RLq/l9pV4LCZDyUT74oGqXb9+y3dTjsanQE33Q3Jgl7AqEPOQgT Z3eycIRlznZ5ZkbQbRBAydkLrhMNZX5W5nfE7IqRTJN7pvZXmhbYWmuCnxqSoKXA RB1gbaeYNI6SdE4QZ+C1JRsciBR4sTUi -----END CERTIFICATE-----Generated at Sat May 31 17:16:13 2025 by rpki-client