$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft File: _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json) Hash identifier: spnB5TBDCbCFzlrHIpWffovlcKLTKGm97XiBqYDuYs0= Subject key identifier: 71:58:7A:E5:34:50:11:57:6D:C1:1F:64:5B:34:2D:5A:A2:FC:8D:36 Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft Manifest number: 0121 Signing time: Sat 31 May 2025 04:26:20 +0000 Manifest this update: Sat 31 May 2025 04:26:20 +0000 Manifest next update: Sat 07 Jun 2025 04:26:20 +0000 Files and hashes: 1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: ZYB4QtFSsOQqoSxYXY/GKbnZIGZJfk1LH/eMGVjnls0=) 2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=) 3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: mRLPSGz3fDg54l8MXzyosEq3sw4/imNOjGKPzEwZfwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Validity Not Before: May 31 04:26:20 2025 GMT Not After : Jun 7 04:26:20 2025 GMT Subject: CN=683a84ec-36eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:52:2d:43:ad:53:ec:e9:bd:99:33:2f:c6:77: b9:6f:f5:06:db:ec:65:98:8b:ec:d8:83:d3:ba:b6: 99:8d:23:5b:d6:e8:b9:f6:97:e7:23:80:91:6a:83: af:cc:d9:c2:dc:aa:22:a0:5f:bf:7c:04:aa:65:47: a7:22:ce:08:69:ca:53:46:66:00:0c:9b:15:18:50: 5f:fd:67:8f:71:08:a6:5b:7f:b1:63:cb:14:30:64: 01:df:22:1d:47:ec:f3:97:ab:75:d4:4d:9d:05:56: a5:01:04:3e:cb:50:18:1e:34:3c:43:48:1e:fe:d4: 78:f5:b5:48:24:75:05:52:22:3e:5f:c7:34:20:b0: 55:41:7e:c1:c9:b4:be:e7:62:81:24:9d:37:35:d0: 3b:5e:ad:7b:3b:24:47:35:99:71:de:5b:36:86:7e: 0b:14:77:28:5d:62:e4:cd:9b:3c:75:b7:81:76:ca: e9:21:97:85:06:38:ef:e8:99:06:da:a2:bf:10:b6: 42:e4:57:19:37:27:e1:cb:34:e6:cb:50:05:6a:74: 75:c8:5a:2f:56:df:87:44:1d:bc:62:1a:99:69:1a: 3b:77:b2:a6:50:33:9f:ba:c4:6a:19:f8:0f:2f:b4: 21:b4:5b:56:76:0c:2f:73:1a:a8:16:eb:e6:7b:ba: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:58:7A:E5:34:50:11:57:6D:C1:1F:64:5B:34:2D:5A:A2:FC:8D:36 X509v3 Authority Key Identifier: keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:9b:27:a5:6b:f7:d8:7b:d8:0c:fa:c1:a0:9a:de:c0:65:e0: 8e:77:d8:63:63:42:4f:91:7a:51:da:cb:2f:ac:4f:01:b0:c9: d8:91:b8:09:33:9e:8a:63:aa:88:ab:29:4e:94:16:5f:af:29: d2:71:c1:e9:a5:00:3a:24:c3:1c:66:2b:9f:2c:65:40:a5:a5: a8:d4:86:72:63:12:cc:43:dd:ee:54:4f:73:6d:6e:89:64:f5: 79:2a:62:d6:44:e0:42:bf:f0:68:65:c5:af:11:4e:4f:8a:b4: 0d:f4:d7:8d:78:fe:6f:ab:bf:e8:bd:49:3c:96:f8:9d:87:b0: f5:6b:a1:80:6e:c6:a2:dc:ce:d0:02:c9:6b:59:71:ee:00:ea: c0:69:52:7f:c5:d6:7a:7c:fd:86:24:08:1e:55:82:a1:4b:fc: cf:b0:96:67:f6:24:95:00:fb:9f:46:3d:34:01:ba:69:64:1b: ac:39:d9:e5:f4:80:2c:42:31:04:f0:c1:85:29:1c:e9:7b:f9: 28:01:b7:ab:38:fe:f0:c8:b6:e1:4b:c6:d4:da:43:f8:b4:de: 65:95:e7:10:ff:ea:17:0d:8e:c2:25:5a:94:62:77:83:76:54: 93:83:8e:f4:a2:94:63:48:b3:96:3b:fb:85:b5:ff:d5:5e:92: 50:dc:5d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx M0Y4MEZCQkIwHhcNMjUwNTMxMDQyNjIwWhcNMjUwNjA3MDQyNjIwWjAYMRYwFAYD VQQDEw02ODNhODRlYy0zNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VItQ61T7Om9mTMvxne5b/UG2+xlmIvs2IPTuraZjSNb1ui59pfnI4CRaoOv zNnC3KoioF+/fASqZUenIs4IacpTRmYADJsVGFBf/WePcQimW3+xY8sUMGQB3yId R+zzl6t11E2dBValAQQ+y1AYHjQ8Q0ge/tR49bVIJHUFUiI+X8c0ILBVQX7BybS+ 52KBJJ03NdA7Xq17OyRHNZlx3ls2hn4LFHcoXWLkzZs8dbeBdsrpIZeFBjjv6JkG 2qK/ELZC5FcZNyfhyzTmy1AFanR1yFovVt+HRB28YhqZaRo7d7KmUDOfusRqGfgP L7QhtFtWdgwvcxqoFuvme7oehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFYeuU0 UBFXbcEfZFs0LVqi/I02MB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUYyMi9DRjlCRjVGRThGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1 V3JGTVltZFJYTjhULUEtN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwmyela/fYe9gM+sGgmt7AZeCOd9hjY0JPkXpR2ssvrE8BsMnYkbgJ M56KY6qIqylOlBZfrynSccHppQA6JMMcZiufLGVApaWo1IZyYxLMQ93uVE9zbW6J ZPV5KmLWROBCv/BoZcWvEU5PirQN9NeNeP5vq7/ovUk8lvidh7D1a6GAbsai3M7Q AslrWXHuAOrAaVJ/xdZ6fP2GJAgeVYKhS/zPsJZn9iSVAPufRj00AbppZBusOdnl 9IAsQjEE8MGFKRzpe/koAberOP7wyLbhS8bU2kP4tN5llecQ/+oXDY7CJVqUYneD dlSTg470opRjSLOWO/uFtf/VXpJQ3F3G -----END CERTIFICATE-----Generated at Sat May 31 17:17:27 2025 by rpki-client