$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: +B/+ZTjfA/WAhKY+UVFevUpprt6m0kURglsRKvg04eo= Subject key identifier: 0F:38:D4:DA:26:01:CE:77:49:5B:A4:F2:65:F3:D6:87:36:28:1C:D4 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 019B Signing time: Sat 31 May 2025 03:08:08 +0000 Manifest this update: Sat 31 May 2025 03:08:08 +0000 Manifest next update: Sat 07 Jun 2025 03:08:08 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: a/5Y1B7juCPKewq9jB05VzQA2Wpti7/vUAVpLJaF9Tg=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: oLct614lxULJnPg0Rxvnf0inRuQaFav2PCBlzJPAse0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: May 31 03:08:08 2025 GMT Not After : Jun 7 03:08:08 2025 GMT Subject: CN=683a7298-1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:30:af:26:80:3c:12:0a:29:9f:e0:f1:77: 52:6e:cc:54:06:0f:a1:4a:d4:0c:c4:6e:d7:a9:3f: 90:54:d5:57:16:9b:4e:88:28:15:b5:bf:3e:0a:e0: 99:d2:1f:5c:32:b1:c4:64:ff:ee:f1:86:ce:5a:66: ad:51:9c:16:be:07:89:0f:6f:51:96:1f:21:f9:ea: 0d:c0:a5:fb:27:c7:f8:43:64:77:50:d9:a9:68:f5: 28:01:33:12:c9:70:46:b0:ad:6c:73:e7:14:c8:0f: 1e:a4:72:2f:58:91:2e:4e:3f:60:80:31:db:43:1f: 4d:cb:28:d5:71:e2:41:5f:c3:0a:75:74:85:e5:8b: 31:d6:5e:e2:48:9c:81:55:35:80:8f:28:77:40:19: 28:6b:de:af:a0:ff:ec:18:a2:8c:25:09:6d:67:67: 12:86:13:f9:13:80:ed:17:a4:a2:29:d2:d4:04:d1: 24:95:6a:f8:10:99:ad:d8:8a:39:10:7c:5a:c8:fd: 78:95:a1:71:c6:ae:a2:de:e4:e1:9e:9d:04:7c:98: 30:3b:42:35:32:eb:5e:de:55:da:69:b8:2b:07:8d: 96:a9:da:0e:e5:83:cd:cf:d1:6a:2b:01:22:28:73: 4b:d1:b6:64:2e:e6:e4:66:2c:d7:02:75:23:76:42: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:D4:DA:26:01:CE:77:49:5B:A4:F2:65:F3:D6:87:36:28:1C:D4 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a1:e8:79:01:90:53:16:5e:be:6a:ee:58:ce:6f:b1:c1:ae: 7c:ef:cb:eb:f6:bf:dd:80:87:ea:6d:97:0c:44:34:d9:dc:96: 3f:f0:50:6e:4e:ac:b3:24:9c:7b:9a:b1:75:81:4a:6f:38:c7: 79:9c:ba:98:39:99:01:e8:bb:f7:4f:79:43:79:5e:27:6d:b1: 6d:27:a8:46:7e:f6:5b:b4:0a:1c:d9:c1:30:94:b0:9d:43:a6: 92:fa:25:f4:97:85:1c:e0:db:c3:64:fb:ac:3d:41:80:19:ff: 85:b2:b2:97:af:66:f4:31:75:90:83:64:29:d1:10:f9:ff:eb: b2:58:5f:1b:ef:15:e9:22:bd:b6:d0:47:20:87:d9:02:32:b0: bc:8a:72:53:9e:89:e8:ef:da:d5:5f:c4:22:3b:2f:9a:89:c5: 78:1a:7a:e5:ff:05:96:2d:7c:8d:19:f7:73:e6:e1:5b:ab:95: 18:ac:a0:58:c0:9e:cb:61:90:68:c4:6b:db:f1:01:11:f7:99: 1e:e3:3a:a2:21:67:d3:19:21:5a:ba:e9:1e:87:32:c9:72:bb: 69:65:11:f6:11:0e:87:f1:28:48:50:85:46:7a:34:a7:fa:8e: 30:e6:d9:cc:21:06:3b:fc:05:4c:9f:05:25:c2:54:91:77:ad: 15:ae:cc:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwNTMxMDMwODA4WhcNMjUwNjA3MDMwODA4WjAYMRYwFAYD VQQDEw02ODNhNzI5OC0xOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlQwryaAPBIKKZ/g8XdSbsxUBg+hStQMxG7XqT+QVNVXFptOiCgVtb8+CuCZ 0h9cMrHEZP/u8YbOWmatUZwWvgeJD29Rlh8h+eoNwKX7J8f4Q2R3UNmpaPUoATMS yXBGsK1sc+cUyA8epHIvWJEuTj9ggDHbQx9NyyjVceJBX8MKdXSF5Ysx1l7iSJyB VTWAjyh3QBkoa96voP/sGKKMJQltZ2cShhP5E4DtF6SiKdLUBNEklWr4EJmt2Io5 EHxayP14laFxxq6i3uThnp0EfJgwO0I1Mute3lXaabgrB42WqdoO5YPNz9FqKwEi KHNL0bZkLubkZizXAnUjdkJaEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA841Nom Ac53SVuk8mXz1oc2KBzUMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBToeh5AZBTFl6+au5Yzm+xwa5878vr9r/dgIfqbZcMRDTZ3JY/8FBu TqyzJJx7mrF1gUpvOMd5nLqYOZkB6Lv3T3lDeV4nbbFtJ6hGfvZbtAoc2cEwlLCd Q6aS+iX0l4Uc4NvDZPusPUGAGf+FsrKXr2b0MXWQg2Qp0RD5/+uyWF8b7xXpIr22 0Ecgh9kCMrC8inJTnono79rVX8QiOy+aicV4Gnrl/wWWLXyNGfdz5uFbq5UYrKBY wJ7LYZBoxGvb8QER95ke4zqiIWfTGSFauukehzLJcrtpZRH2EQ6H8ShIUIVGejSn +o4w5tnMIQY7/AVMnwUlwlSRd60Vrszp -----END CERTIFICATE-----Generated at Sat May 31 17:10:14 2025 by rpki-client