$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: Bitg9jJHeq2RajVDhWo6cSxRHIPBhtIUR16Si21ACts= Subject key identifier: F9:16:06:4F:94:F5:B4:40:6C:21:7E:52:6C:E6:AF:E7:41:50:6D:B7 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0924 Signing time: Fri 30 May 2025 20:37:34 +0000 Manifest this update: Fri 30 May 2025 20:37:34 +0000 Manifest next update: Fri 06 Jun 2025 20:37:34 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: SBjABBlJ26hAxR+/XkF2SeX4wJRPdlRIxAfx7z6jpyg=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: D1MytX8PFSoPgxFDgyjmvW8kj3dmc3d5kXRVH2UDjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: May 30 20:37:34 2025 GMT Not After : Jun 6 20:37:34 2025 GMT Subject: CN=683a170e-b3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:6e:c8:28:43:cc:c9:18:15:08:0c:9b:7f: e5:06:29:f2:9a:2e:71:67:07:e5:dd:93:2e:16:a9: f2:66:64:87:69:d4:2f:e0:fb:cd:c5:82:54:58:44: 38:af:8f:39:fe:0b:93:06:fc:f0:de:93:0d:b1:0c: fe:5e:83:5f:ce:fb:fe:c2:25:98:e7:89:77:13:95: 18:38:4b:df:7d:81:5a:17:61:72:2d:14:e6:16:53: 37:0c:64:55:e2:99:3f:70:ee:6a:1f:18:fd:f3:05: 9b:18:75:78:27:a0:19:88:72:4b:3e:1c:ff:d0:03: c6:73:01:33:05:38:e3:d3:ba:7f:d8:d7:da:26:42: 16:d3:71:dd:e8:ce:ce:ed:79:14:d1:bc:38:52:1d: 93:83:06:25:d1:cc:e0:4b:05:4b:95:5e:b2:02:35: bf:06:b7:49:c8:77:e7:8a:41:e9:03:a7:12:3d:3c: 49:a6:ee:68:6e:d3:a8:c9:21:40:39:0c:69:01:43: 1b:cc:33:a4:c7:d5:75:04:dc:c2:9e:85:c8:6f:92: 0a:ab:ce:23:b5:31:83:75:a1:87:91:5e:7c:2a:9f: 15:74:98:ec:45:42:ec:9f:e8:ea:6d:4d:69:32:3b: 7a:8b:7a:aa:64:50:87:46:b9:7e:0d:7d:39:e3:76: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:16:06:4F:94:F5:B4:40:6C:21:7E:52:6C:E6:AF:E7:41:50:6D:B7 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:46:41:13:09:33:ff:59:89:25:7c:17:ca:93:76:3e:41:89: 51:8b:e4:09:c9:55:b5:62:67:d0:8a:5a:3f:a9:23:33:6b:1b: 53:6d:29:52:e2:67:ba:34:df:3c:75:7f:7a:31:76:1b:cd:07: 06:cf:53:95:0a:ff:2c:03:e2:cf:74:ba:17:5a:86:64:67:c7: 3b:cf:fb:d0:2a:06:6b:53:f7:8d:d1:7a:2c:8d:9d:b4:c5:6d: fb:9c:e3:56:90:bb:14:5a:55:6a:6a:e2:cb:ab:1f:96:4e:66: f6:91:68:69:af:ad:b2:f4:e6:93:b3:38:cf:b5:71:e7:37:4e: ac:f6:f9:39:ab:05:38:84:5f:6e:e9:ba:22:37:51:2a:08:2e: ff:b1:06:70:cc:3e:39:0e:a9:ec:74:b1:a1:15:26:bf:18:b8: 1b:08:eb:18:73:9c:d5:05:12:2b:a6:78:5a:12:3e:90:6d:f5: 8e:82:90:b8:1f:54:02:5b:b8:3c:e9:a8:2b:d4:92:8a:39:fc: f9:50:95:67:56:af:4d:f9:1d:48:5c:6f:36:3b:55:41:c0:de: 5c:84:84:07:67:b2:9c:4b:99:45:07:ef:9b:07:b5:86:1f:d9: f1:4c:1f:c4:5c:fa:4c:e3:e7:d5:7f:46:3e:af:ed:83:c7:5e: a5:f5:72:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUwNTMwMjAzNzM0WhcNMjUwNjA2MjAzNzM0WjAYMRYwFAYD VQQDEw02ODNhMTcwZS1iM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo9uyChDzMkYFQgMm3/lBinymi5xZwfl3ZMuFqnyZmSHadQv4PvNxYJUWEQ4 r485/guTBvzw3pMNsQz+XoNfzvv+wiWY54l3E5UYOEvffYFaF2FyLRTmFlM3DGRV 4pk/cO5qHxj98wWbGHV4J6AZiHJLPhz/0APGcwEzBTjj07p/2NfaJkIW03Hd6M7O 7XkU0bw4Uh2TgwYl0czgSwVLlV6yAjW/BrdJyHfnikHpA6cSPTxJpu5obtOoySFA OQxpAUMbzDOkx9V1BNzCnoXIb5IKq84jtTGDdaGHkV58Kp8VdJjsRULsn+jqbU1p Mjt6i3qqZFCHRrl+DX0543ZWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkWBk+U 9bRAbCF+Umzmr+dBUG23MB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+RkETCTP/WYklfBfKk3Y+QYlRi+QJyVW1YmfQilo/qSMzaxtTbSlS 4me6NN88dX96MXYbzQcGz1OVCv8sA+LPdLoXWoZkZ8c7z/vQKgZrU/eN0XosjZ20 xW37nONWkLsUWlVqauLLqx+WTmb2kWhpr62y9OaTszjPtXHnN06s9vk5qwU4hF9u 6boiN1EqCC7/sQZwzD45DqnsdLGhFSa/GLgbCOsYc5zVBRIrpnhaEj6QbfWOgpC4 H1QCW7g86agr1JKKOfz5UJVnVq9N+R1IXG82O1VBwN5chIQHZ7KcS5lFB++bB7WG H9nxTB/EXPpM4+fVf0Y+r+2Dx16l9XIp -----END CERTIFICATE-----Generated at Sat May 31 16:33:13 2025 by rpki-client