$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: OJrQ0qRgKbhKJrGBA8rnnDk9kKJynTdbw1BXpr0ftGQ= Subject key identifier: F8:B9:6B:BB:F8:11:85:16:D0:AF:3C:22:A8:23:D9:35:30:3F:8F:2D Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 044C Signing time: Sat 31 May 2025 00:26:22 +0000 Manifest this update: Sat 31 May 2025 00:26:21 +0000 Manifest next update: Sat 07 Jun 2025 00:26:21 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: xWs03qSaVz7RmaULnbjTo4z4I1N26RC0BIWdoc4K4YU=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: May 31 00:26:21 2025 GMT Not After : Jun 7 00:26:21 2025 GMT Subject: CN=683a4cae-1171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:48:0d:42:5b:7a:99:84:69:54:35:84:cb: 48:66:81:15:2d:61:08:52:61:c3:4e:60:fa:71:1e: 2f:80:f2:9b:6d:83:a6:a2:8e:e3:bd:10:53:88:9d: 8d:31:f7:3c:a2:f8:d3:ff:01:17:e6:3c:f0:59:db: fe:e7:a2:3f:d0:e3:9a:ce:92:8a:a0:b9:58:af:96: dd:2c:7a:ce:d7:df:be:42:18:12:f8:fe:14:da:68: a4:6c:fe:9c:70:5e:13:c7:27:1f:b9:3c:ef:48:6d: db:11:5d:ff:89:c8:ee:f3:50:44:e0:44:00:94:65: 1c:88:16:9d:59:2e:57:9a:40:1b:e2:99:28:d1:ae: dd:1b:69:e8:e2:01:91:01:4b:c0:2a:fb:23:b8:c4: 61:4f:b7:f5:55:15:90:7b:0b:7f:43:b0:c3:93:33: 83:3c:7a:21:25:3a:f6:e3:a8:c6:86:ab:74:45:2a: a4:c0:de:59:81:7b:bf:28:1f:99:02:44:60:4c:77: 07:40:69:7d:53:37:25:a7:1b:63:d3:9c:44:85:ec: cb:00:a0:61:67:43:1e:43:6f:aa:f2:a4:f2:d6:cc: f1:48:51:ca:bd:bc:1c:28:c4:73:70:c2:8e:b6:48: 70:c4:2d:47:bb:83:73:19:45:fd:0f:64:f2:7d:1c: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B9:6B:BB:F8:11:85:16:D0:AF:3C:22:A8:23:D9:35:30:3F:8F:2D X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:39:4e:af:5b:da:f3:35:78:26:59:61:ae:4b:aa:97:14:61: 09:0b:db:79:3d:ad:b0:26:f2:d7:34:37:6a:7d:e7:df:3e:d1: fb:ba:23:c5:52:ab:f1:82:c2:52:25:77:88:c4:c6:98:37:a8: 37:41:b8:9c:63:45:fb:5b:e2:bf:32:0d:b2:f4:4d:d2:7e:01: 10:2a:af:3a:5a:df:6d:76:f2:07:8e:6b:9f:a0:e2:b3:37:3d: 6e:78:27:60:ff:78:f3:65:f6:60:a7:17:90:45:68:de:ae:ba: de:95:cf:23:a0:3b:81:bc:8f:ff:36:23:81:a5:bf:55:77:c5: 90:5f:5c:8f:29:50:33:12:52:e2:8f:31:6d:61:ab:5a:35:6c: ee:64:35:97:09:e0:d5:65:9a:ab:a8:25:1f:90:a5:10:2a:b7: 39:90:3f:82:7a:26:19:2f:cc:6c:0f:75:b0:fd:5a:3e:e2:35: f4:a7:92:cf:c4:df:72:e4:ca:e1:d4:2f:4b:25:f4:1b:a5:45: d1:12:41:21:94:f2:f2:b1:e7:8d:84:86:4b:83:b8:1e:b2:3a: 98:b7:1e:25:ca:46:9a:8b:04:3a:6f:61:a9:8f:ab:11:7e:11: 5a:dc:17:8a:05:cb:25:5a:d8:e2:6c:d3:99:86:92:be:b7:13: 68:48:fc:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUwNTMxMDAyNjIxWhcNMjUwNjA3MDAyNjIxWjAYMRYwFAYD VQQDEw02ODNhNGNhZS0xMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw85IDUJbepmEaVQ1hMtIZoEVLWEIUmHDTmD6cR4vgPKbbYOmoo7jvRBTiJ2N Mfc8ovjT/wEX5jzwWdv+56I/0OOazpKKoLlYr5bdLHrO19++QhgS+P4U2mikbP6c cF4TxycfuTzvSG3bEV3/icju81BE4EQAlGUciBadWS5XmkAb4pko0a7dG2no4gGR AUvAKvsjuMRhT7f1VRWQewt/Q7DDkzODPHohJTr246jGhqt0RSqkwN5ZgXu/KB+Z AkRgTHcHQGl9Uzclpxtj05xEhezLAKBhZ0MeQ2+q8qTy1szxSFHKvbwcKMRzcMKO tkhwxC1Hu4NzGUX9D2TyfRwHDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi5a7v4 EYUW0K88Iqgj2TUwP48tMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwOU6vW9rzNXgmWWGuS6qXFGEJC9t5Pa2wJvLXNDdqfeffPtH7uiPF UqvxgsJSJXeIxMaYN6g3QbicY0X7W+K/Mg2y9E3SfgEQKq86Wt9tdvIHjmufoOKz Nz1ueCdg/3jzZfZgpxeQRWjerrrelc8joDuBvI//NiOBpb9Vd8WQX1yPKVAzElLi jzFtYataNWzuZDWXCeDVZZqrqCUfkKUQKrc5kD+CeiYZL8xsD3Ww/Vo+4jX0p5LP xN9y5Mrh1C9LJfQbpUXREkEhlPLyseeNhIZLg7gesjqYtx4lykaaiwQ6b2Gpj6sR fhFa3BeKBcslWtjibNOZhpK+txNoSPyM -----END CERTIFICATE-----Generated at Sat May 31 17:40:59 2025 by rpki-client