$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: 1+VDNtICQxF8jtAWn2WCq7sqn6B50Ec738krHCrDBd0= Subject key identifier: 60:96:E5:EC:AE:7F:2C:6A:7E:F0:D6:5D:46:2F:E3:BD:4C:FD:47:5C Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 012D Signing time: Sat 31 May 2025 04:17:38 +0000 Manifest this update: Sat 31 May 2025 04:17:37 +0000 Manifest next update: Sat 07 Jun 2025 04:17:37 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: 68G9WZhZrELy3k4RWELYI9KFcXBpEZK4m8MqzJVM0Sw=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: May 31 04:17:37 2025 GMT Not After : Jun 7 04:17:37 2025 GMT Subject: CN=683a82e2-a248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:71:9c:7b:cd:71:49:8e:c7:a6:41:4a:90: c0:43:32:dd:89:90:15:62:06:8b:45:9f:df:de:3d: 1b:73:5a:70:8f:17:3b:d4:71:11:e6:a5:3a:98:ee: ed:63:82:c5:a5:83:d9:29:79:01:7c:c1:75:fb:62: 09:bd:31:d3:b3:c5:a0:1e:4f:7d:63:65:14:47:65: c1:12:a8:39:56:1f:9f:01:92:f9:44:ad:8f:49:08: 74:72:17:92:7f:78:28:41:33:29:16:c8:20:ad:a9: e2:f0:b3:f0:96:ee:55:e4:76:12:94:c2:62:fe:59: 09:dc:8b:45:52:ac:74:9d:29:e8:ab:42:40:e9:a3: f4:cf:1f:6e:36:05:9f:04:32:fc:78:f7:c1:19:72: b1:dc:e4:12:b5:cb:b4:6b:32:c8:ac:59:86:ed:1b: 75:c1:bb:7f:12:4d:21:87:5f:48:fa:6e:8d:32:f0: 1f:1b:81:8c:51:3b:2d:bc:c7:95:95:dd:1d:df:12: 3a:3b:fb:da:51:37:6b:d7:d8:cf:ef:a9:25:e8:75: 39:63:c9:c6:78:ec:b1:75:a9:6e:84:a8:75:fd:b0: 66:f9:8b:77:a9:0b:ca:7c:d7:38:75:b9:60:e6:c1: 49:fb:b9:c0:1c:bb:04:b0:ae:0f:ae:63:e3:7e:8e: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:96:E5:EC:AE:7F:2C:6A:7E:F0:D6:5D:46:2F:E3:BD:4C:FD:47:5C X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9c:3f:c6:06:04:bf:03:a4:c4:fc:34:1c:b0:60:14:e7:7f: ca:57:8a:5f:e5:3c:70:10:66:50:05:16:7d:63:5f:0e:a9:b2: b4:d3:14:e2:df:5d:ef:a2:28:09:a4:09:53:0e:e4:e2:c8:ea: fd:ec:07:fe:1c:2b:5c:55:e5:cf:b2:d7:2c:7b:e3:db:f5:d0: be:89:d9:b9:a9:99:a6:9d:e4:34:4f:8b:07:11:cd:2b:d1:81: bc:7b:99:8f:55:f6:c2:ac:45:52:54:fd:01:58:96:26:df:9c: 03:f7:2b:41:a3:a6:e0:75:75:bb:f3:09:da:6b:cf:11:0d:45: 4b:75:42:1c:0f:58:d9:2c:e9:89:e1:f4:dc:e1:f3:3d:2c:e2: c1:e8:fb:c1:88:c6:90:e9:3c:04:37:4b:96:d9:4f:75:d8:e9: 6c:97:1e:eb:0d:95:bc:a8:19:f6:cf:31:53:90:2d:52:95:cc: 92:5f:aa:7b:f5:c5:30:ae:b9:ea:a7:71:a0:a3:9d:88:e7:a6: 3b:51:1a:58:75:9b:91:51:57:21:81:4a:ee:6e:04:78:d9:a7: 9a:af:05:a8:0b:7f:e9:a3:b7:ad:4e:45:77:87:be:8d:29:11: 46:9a:a9:39:95:e9:7f:2a:21:58:02:7f:18:8c:6a:3e:a8:b0: c9:d5:c8:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwNTMxMDQxNzM3WhcNMjUwNjA3MDQxNzM3WjAYMRYwFAYD VQQDEw02ODNhODJlMi1hMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoRxnHvNcUmOx6ZBSpDAQzLdiZAVYgaLRZ/f3j0bc1pwjxc71HER5qU6mO7t Y4LFpYPZKXkBfMF1+2IJvTHTs8WgHk99Y2UUR2XBEqg5Vh+fAZL5RK2PSQh0cheS f3goQTMpFsggrani8LPwlu5V5HYSlMJi/lkJ3ItFUqx0nSnoq0JA6aP0zx9uNgWf BDL8ePfBGXKx3OQStcu0azLIrFmG7Rt1wbt/Ek0hh19I+m6NMvAfG4GMUTstvMeV ld0d3xI6O/vaUTdr19jP76kl6HU5Y8nGeOyxdaluhKh1/bBm+Yt3qQvKfNc4dblg 5sFJ+7nAHLsEsK4PrmPjfo4XsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCW5eyu fyxqfvDWXUYv471M/UdcMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlnD/GBgS/A6TE/DQcsGAU53/KV4pf5TxwEGZQBRZ9Y18OqbK00xTi 313voigJpAlTDuTiyOr97Af+HCtcVeXPstcse+Pb9dC+idm5qZmmneQ0T4sHEc0r 0YG8e5mPVfbCrEVSVP0BWJYm35wD9ytBo6bgdXW78wnaa88RDUVLdUIcD1jZLOmJ 4fTc4fM9LOLB6PvBiMaQ6TwEN0uW2U912Olslx7rDZW8qBn2zzFTkC1SlcySX6p7 9cUwrrnqp3Ggo52I56Y7URpYdZuRUVchgUrubgR42aearwWoC3/po7etTkV3h76N KRFGmqk5lel/KiFYAn8YjGo+qLDJ1cjm -----END CERTIFICATE-----Generated at Sat May 31 17:24:50 2025 by rpki-client