$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: /Hd2cVQpw8cr8fcgXnsuqX8DE8zzVIq5OQYH9bkxIaw= Subject key identifier: 55:26:8E:9B:E5:5E:C6:B2:F9:52:5D:53:6C:16:B9:34:A2:9E:78:3D Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01C4 Signing time: Sat 31 May 2025 02:49:05 +0000 Manifest this update: Sat 31 May 2025 02:49:05 +0000 Manifest next update: Sat 07 Jun 2025 02:49:05 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: HQ9RAR2NdhwVvFZ0b+52wOGedygphTub1/2t4udVEaM=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 31 02:49:05 2025 GMT Not After : Jun 7 02:49:05 2025 GMT Subject: CN=683a6e21-15e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:1e:57:af:c2:ba:e4:81:07:3d:6c:ab:1b: df:62:8a:e6:0f:39:8a:d0:b2:38:65:75:2a:ab:a4: 26:87:c3:b1:b4:25:6f:81:af:ee:d6:b8:5e:5a:81: 3f:b3:6c:6f:dd:f4:c4:d0:4a:57:4e:b6:a6:12:02: f7:45:a0:76:c0:20:e4:12:d3:e0:aa:6c:33:57:e1: c1:4f:75:eb:c1:22:de:63:3f:1f:34:d3:6e:76:d3: 08:7e:cf:bc:d8:07:69:38:59:a2:e9:8a:83:36:d0: 92:d8:97:ee:95:ae:7a:05:9b:b2:fc:f5:1a:50:7e: e3:55:3f:48:f8:20:a0:1b:fd:94:19:69:b3:ba:a8: a5:b0:9a:94:a3:c9:08:d4:b9:57:ed:eb:21:1b:a4: 20:3a:40:8d:28:bb:dc:16:3b:83:fa:0b:ab:17:d6: 3a:c6:01:36:99:98:9e:6a:72:43:7d:9b:fd:e0:74: ea:67:8a:b8:e2:63:c3:e9:8b:5e:4f:2b:e9:84:03: fb:fb:d0:3c:1b:65:ad:c5:aa:b8:52:9d:4e:65:11: 99:44:40:28:ac:59:44:d2:c5:ba:ca:3d:2a:24:de: 51:bd:ef:65:be:bb:ac:ff:30:40:10:23:14:50:ea: 84:60:15:df:81:1d:9f:13:53:53:40:0e:9c:3f:92: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:8E:9B:E5:5E:C6:B2:F9:52:5D:53:6C:16:B9:34:A2:9E:78:3D X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8d:b9:90:06:ab:bd:60:c9:c9:b0:15:d3:1b:1e:df:96:d0: 4e:2f:9f:2e:7f:32:fb:f2:39:d0:fb:5c:ee:06:00:8d:bb:32: 78:15:60:27:2f:c7:3f:b3:6b:06:4d:1e:5f:bf:8a:7c:b1:0e: 7c:87:c2:75:13:b7:fc:6a:6c:71:48:98:1f:e3:7c:2d:d1:56: f8:10:f9:29:8b:8f:8e:3d:a9:ab:b8:ed:ee:49:71:30:83:31: 00:29:84:6d:98:24:3c:94:90:71:90:a8:75:7c:3d:24:60:86: 5f:72:28:a2:de:2d:8f:59:55:60:03:22:47:be:64:57:6a:c0: 34:81:19:28:64:02:77:ec:8e:29:9e:5c:8d:bb:3c:9b:53:7d: ee:34:8e:3b:6f:01:08:48:6d:f3:c0:ac:11:40:5e:c4:8e:6d: 48:20:22:64:57:6a:e4:e9:dd:ab:a4:8e:c0:06:1c:d2:79:13: 29:ca:6e:81:44:69:c9:d5:f7:fb:75:aa:5f:6c:ab:c9:80:06: a3:6f:f5:53:26:64:40:a8:19:6a:9a:4f:b0:c2:c5:a0:f8:6d: 31:9b:2d:0b:38:59:0b:a1:bb:ec:87:ac:8c:b9:d9:57:4e:97: d3:ae:d6:ce:72:0f:ce:d0:ab:03:41:23:be:1d:12:6b:09:14: ee:7b:94:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNTMxMDI0OTA1WhcNMjUwNjA3MDI0OTA1WjAYMRYwFAYD VQQDEw02ODNhNmUyMS0xNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkkeV6/CuuSBBz1sqxvfYormDzmK0LI4ZXUqq6Qmh8OxtCVvga/u1rheWoE/ s2xv3fTE0EpXTramEgL3RaB2wCDkEtPgqmwzV+HBT3XrwSLeYz8fNNNudtMIfs+8 2AdpOFmi6YqDNtCS2Jfula56BZuy/PUaUH7jVT9I+CCgG/2UGWmzuqilsJqUo8kI 1LlX7eshG6QgOkCNKLvcFjuD+gurF9Y6xgE2mZieanJDfZv94HTqZ4q44mPD6Yte TyvphAP7+9A8G2Wtxaq4Up1OZRGZREAorFlE0sW6yj0qJN5Rve9lvrus/zBAECMU UOqEYBXfgR2fE1NTQA6cP5KQMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUmjpvl Xsay+VJdU2wWuTSinng9MB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvjbmQBqu9YMnJsBXTGx7fltBOL58ufzL78jnQ+1zuBgCNuzJ4FWAn L8c/s2sGTR5fv4p8sQ58h8J1E7f8amxxSJgf43wt0Vb4EPkpi4+OPamruO3uSXEw gzEAKYRtmCQ8lJBxkKh1fD0kYIZfciii3i2PWVVgAyJHvmRXasA0gRkoZAJ37I4p nlyNuzybU33uNI47bwEISG3zwKwRQF7Ejm1IICJkV2rk6d2rpI7ABhzSeRMpym6B RGnJ1ff7dapfbKvJgAajb/VTJmRAqBlqmk+wwsWg+G0xmy0LOFkLobvsh6yMudlX TpfTrtbOcg/O0KsDQSO+HRJrCRTue5TO -----END CERTIFICATE-----Generated at Sat May 31 17:16:19 2025 by rpki-client