$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: zluAclEHuk7hQGQI85pviwRldeJfzRqY+jQwRRWpbxo= Subject key identifier: BB:E5:4D:C5:95:E4:FE:2A:55:31:3A:11:6C:65:0B:4D:BD:8C:4A:2C Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0947 Signing time: Fri 30 May 2025 20:58:09 +0000 Manifest this update: Fri 30 May 2025 20:58:09 +0000 Manifest next update: Fri 06 Jun 2025 20:58:09 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: /kzOrQ0MeIyK0z9FerFOPjwOuKmsVXgpKRrBr/bmT+Y=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: X3WvsIakOYYYh6qQ/CNrPJ4rysF4m1jhkYS0mLUaZBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: May 30 20:58:09 2025 GMT Not After : Jun 6 20:58:09 2025 GMT Subject: CN=683a1be1-7219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:11:38:af:4f:70:be:9c:2e:0b:12:7f:72: 37:73:08:92:47:14:81:a3:9b:29:86:85:19:ae:1b: e1:37:71:d1:10:5c:6e:0e:3f:0a:a4:3d:ca:24:e6: b5:e9:64:80:0a:51:81:9e:d9:c2:5e:d0:bb:d1:aa: b3:d9:26:6d:92:0a:e9:90:32:9b:54:c2:55:ec:ef: 76:a8:0f:f1:c7:f8:ee:41:43:47:c0:e9:36:2c:b5: 8b:d7:7f:a9:74:04:08:bb:ae:d6:51:9e:b3:97:66: ea:8e:0f:0e:dd:16:3d:6b:b0:71:ae:4e:3f:92:c7: 85:23:a1:c9:fe:35:66:a3:a2:62:8f:69:1b:db:ec: e9:33:74:15:a2:1a:c8:45:b0:e7:8c:71:17:1b:65: 2f:8d:cb:2b:ca:03:e1:8f:f2:6c:6e:cb:68:7b:21: 93:42:00:39:18:9b:eb:2f:15:b5:c2:86:c8:12:43: 4a:7f:48:9c:33:d5:bd:06:65:9d:f3:ee:dd:2f:cf: d3:f5:d0:ff:85:03:ce:aa:e6:c8:9b:f2:c1:d2:40: c5:fa:ce:26:81:48:52:6a:bf:da:4a:af:45:18:ee: 6f:50:50:d8:86:9a:e9:1a:4e:16:17:be:46:6c:06: 5a:87:a4:05:05:9c:ce:e9:e3:52:36:65:c6:5a:bd: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E5:4D:C5:95:E4:FE:2A:55:31:3A:11:6C:65:0B:4D:BD:8C:4A:2C X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fd:21:90:03:b8:12:2c:e1:9e:ea:62:ac:53:08:07:68:a2: 56:ea:74:9f:93:3b:2c:97:a0:24:01:7c:fa:e8:42:f6:f8:53: c6:15:96:65:02:61:45:98:36:14:71:5b:43:ad:1d:c5:86:be: 42:52:59:15:eb:fb:89:f2:36:7d:70:2d:6f:d8:eb:fd:82:9b: c5:11:b4:8d:2d:ed:49:1a:34:84:37:a8:ba:d9:90:54:4f:bc: ed:5e:74:78:ff:c0:32:30:9d:d8:da:0c:b7:ce:43:6b:ee:2c: f6:4b:1b:4e:ec:d2:0e:30:b2:ea:a0:1a:9d:c7:00:37:d9:43: 43:b8:f0:14:81:48:12:4f:37:04:42:b5:6e:75:42:e7:e4:d6: 80:cc:a9:23:7f:0e:cd:a2:63:1a:40:59:10:1a:fe:14:03:a8: 54:85:12:43:97:cc:bd:c5:63:08:89:9d:4e:ce:99:2c:d9:76: 5e:be:91:e3:b0:f1:dc:ff:3a:c2:ba:e6:90:22:61:fb:1c:bf: 35:97:21:c4:7d:2b:6d:7d:42:9f:2f:f1:b0:5b:93:ef:c7:b8: 67:b1:28:89:57:9f:71:9c:2a:60:39:28:cb:ce:4e:e9:0b:35: 98:9d:c2:92:c2:9c:9e:c0:9a:b4:24:5b:05:b4:66:8b:78:8f: 1a:b6:c3:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUwNTMwMjA1ODA5WhcNMjUwNjA2MjA1ODA5WjAYMRYwFAYD VQQDEw02ODNhMWJlMS03MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrwROK9PcL6cLgsSf3I3cwiSRxSBo5sphoUZrhvhN3HREFxuDj8KpD3KJOa1 6WSAClGBntnCXtC70aqz2SZtkgrpkDKbVMJV7O92qA/xx/juQUNHwOk2LLWL13+p dAQIu67WUZ6zl2bqjg8O3RY9a7Bxrk4/kseFI6HJ/jVmo6Jij2kb2+zpM3QVohrI RbDnjHEXG2UvjcsrygPhj/JsbstoeyGTQgA5GJvrLxW1wobIEkNKf0icM9W9BmWd 8+7dL8/T9dD/hQPOqubIm/LB0kDF+s4mgUhSar/aSq9FGO5vUFDYhprpGk4WF75G bAZah6QFBZzO6eNSNmXGWr2eEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvlTcWV 5P4qVTE6EWxlC029jEosMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4/SGQA7gSLOGe6mKsUwgHaKJW6nSfkzssl6AkAXz66EL2+FPGFZZl AmFFmDYUcVtDrR3Fhr5CUlkV6/uJ8jZ9cC1v2Ov9gpvFEbSNLe1JGjSEN6i62ZBU T7ztXnR4/8AyMJ3Y2gy3zkNr7iz2SxtO7NIOMLLqoBqdxwA32UNDuPAUgUgSTzcE QrVudULn5NaAzKkjfw7NomMaQFkQGv4UA6hUhRJDl8y9xWMIiZ1Ozpks2XZevpHj sPHc/zrCuuaQImH7HL81lyHEfSttfUKfL/GwW5Pvx7hnsSiJV59xnCpgOSjLzk7p CzWYncKSwpyewJq0JFsFtGaLeI8atsN1 -----END CERTIFICATE-----Generated at Sat May 31 17:46:31 2025 by rpki-client