$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: 9fZEYjxYNZeh+K+mUMtLLlCUMmdgZq3k9/sixv/6C3o= Subject key identifier: F2:86:3E:26:79:58:1E:21:14:02:05:08:E2:1D:4C:28:61:E0:D5:06 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0868 Signing time: Fri 30 May 2025 20:55:10 +0000 Manifest this update: Fri 30 May 2025 20:55:10 +0000 Manifest next update: Fri 06 Jun 2025 20:55:10 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: nLUmfZjtJ1MRcK7sIbb7g3T074AkjG5n8rAXEBMZcAs=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: May 30 20:55:10 2025 GMT Not After : Jun 6 20:55:10 2025 GMT Subject: CN=683a1b2e-a584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:02:b8:18:db:c2:9a:6b:9d:b2:e4:95:42: 96:0b:d9:3b:99:b2:17:ff:03:52:50:c5:6c:3b:8d: e3:e6:e2:ff:f8:9c:46:58:bb:7c:71:15:c7:d4:34: 79:ed:51:c3:29:11:8e:64:0d:cd:33:54:7f:d7:ec: f9:66:95:33:4e:a1:44:ee:b5:7e:19:a7:da:60:f3: 8f:9c:3c:80:b1:a0:34:48:03:28:1a:0f:e3:c2:ce: dc:84:12:84:b0:b8:71:61:b8:fe:41:3a:2c:a0:d1: 1a:da:ec:dc:7e:3d:10:83:ad:fd:ee:68:9c:2e:a1: 4a:d5:a1:e4:56:9e:d9:19:87:cf:e2:f0:35:39:aa: cd:21:03:71:f2:ff:43:29:51:10:42:ca:e6:0b:f2: 62:48:7a:03:11:97:20:97:76:8d:7a:31:1c:29:9d: 05:c1:98:d9:71:20:d6:4f:23:23:14:45:46:2f:eb: a6:2e:96:23:7d:be:69:01:4d:ef:03:01:0b:4f:62: c1:a5:47:00:6c:56:32:6c:74:7a:4b:41:6b:d3:88: a8:28:e8:7b:38:5d:85:49:07:fb:1d:21:d0:3d:e8: 9b:91:04:03:ce:cb:4e:78:e9:40:13:d1:b2:0a:60: a9:f1:a0:35:f1:90:5d:9b:80:33:fa:c4:91:fc:c2: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:86:3E:26:79:58:1E:21:14:02:05:08:E2:1D:4C:28:61:E0:D5:06 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b4:72:ff:24:40:01:f4:9f:64:44:d3:ce:a0:1a:33:d2:4c: c9:21:80:43:fd:40:a3:42:39:3d:14:13:83:03:f7:b9:75:70: a7:11:f9:b1:ad:ad:ee:fb:c6:d4:19:44:7b:25:c6:e5:7a:87: 24:0e:78:26:a6:69:35:8f:ec:19:fd:0a:f9:05:ba:a7:62:24: 50:44:14:96:c4:b3:c9:67:87:26:c1:ea:67:27:21:a3:4a:5b: d3:1f:21:37:60:26:d9:7b:92:d6:01:94:0d:55:4f:f1:c6:b8: 74:ce:02:6e:60:11:32:38:7e:43:4d:cf:ce:2e:14:de:b4:84: d5:fb:7e:a3:98:18:a5:2d:b9:9d:78:b7:0a:6e:5c:35:37:63: 9b:84:9c:40:18:e4:c3:94:7f:ab:f5:1a:9c:54:19:15:ec:12: bc:39:e1:d2:1f:cb:0d:37:31:3f:ae:66:ba:d4:75:e6:e8:30: 9a:67:70:7f:2a:a7:09:a5:ac:e2:d8:09:c7:2a:75:f9:a5:04: 25:b5:a4:46:67:92:7b:f2:0c:12:49:3b:54:a3:32:1e:79:9e: 7a:92:53:3a:fa:95:a3:35:6d:54:f3:0e:4d:21:7a:28:7c:7d: 77:88:68:49:eb:6c:12:c0:65:56:d8:01:01:bb:f9:ed:5f:32: 1e:a2:be:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUwNTMwMjA1NTEwWhcNMjUwNjA2MjA1NTEwWjAYMRYwFAYD VQQDEw02ODNhMWIyZS1hNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovICuBjbwpprnbLklUKWC9k7mbIX/wNSUMVsO43j5uL/+JxGWLt8cRXH1DR5 7VHDKRGOZA3NM1R/1+z5ZpUzTqFE7rV+GafaYPOPnDyAsaA0SAMoGg/jws7chBKE sLhxYbj+QTosoNEa2uzcfj0Qg6397micLqFK1aHkVp7ZGYfP4vA1OarNIQNx8v9D KVEQQsrmC/JiSHoDEZcgl3aNejEcKZ0FwZjZcSDWTyMjFEVGL+umLpYjfb5pAU3v AwELT2LBpUcAbFYybHR6S0Fr04ioKOh7OF2FSQf7HSHQPeibkQQDzstOeOlAE9Gy CmCp8aA18ZBdm4Az+sSR/MJqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKGPiZ5 WB4hFAIFCOIdTChh4NUGMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCstHL/JEAB9J9kRNPOoBoz0kzJIYBD/UCjQjk9FBODA/e5dXCnEfmx ra3u+8bUGUR7JcbleockDngmpmk1j+wZ/Qr5BbqnYiRQRBSWxLPJZ4cmwepnJyGj SlvTHyE3YCbZe5LWAZQNVU/xxrh0zgJuYBEyOH5DTc/OLhTetITV+36jmBilLbmd eLcKblw1N2ObhJxAGOTDlH+r9RqcVBkV7BK8OeHSH8sNNzE/rma61HXm6DCaZ3B/ KqcJpazi2AnHKnX5pQQltaRGZ5J78gwSSTtUozIeeZ56klM6+pWjNW1U8w5NIXoo fH13iGhJ62wSwGVW2AEBu/ntXzIeor5a -----END CERTIFICATE-----Generated at Sat May 31 17:57:48 2025 by rpki-client