$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json) Hash identifier: 0H7CjhhEZbJwKz/WvPJkRfrJ7myAitNdVJHmFS7DFkA= Subject key identifier: 5C:B4:97:B3:11:E6:2E:BD:BD:0B:85:61:4D:53:DF:C1:2E:BC:5E:07 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft Manifest number: 0119 Signing time: Sat 31 May 2025 04:30:40 +0000 Manifest this update: Sat 31 May 2025 04:30:39 +0000 Manifest next update: Sat 07 Jun 2025 04:30:39 +0000 Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: qV6gSL6G8dA6rHa3HZ82QUijJ/2YoV03Tp6gF5ro0Bs=) 2: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: 8E473KkpiKjZKNroBEhCbINIeIwzAWwWEuJqRVf36nY=) 3: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: UV3XO65spY2KLBvMTAJ4CDMAZHABDW2pouUNViGYZzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: May 31 04:30:39 2025 GMT Not After : Jun 7 04:30:39 2025 GMT Subject: CN=683a85ef-8a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:b2:17:06:bf:94:a8:4d:91:bb:ab:d0:5b: 19:ff:5b:31:b3:e5:cf:8c:f6:5e:e6:f8:40:38:0a: e6:a3:ea:00:cc:fc:78:c5:1e:70:5c:fe:ea:88:48: 26:43:38:b4:e3:ce:35:e5:a2:69:75:44:57:41:de: 54:0e:db:5b:d6:7f:67:2d:aa:c5:12:77:3d:87:e7: 7c:86:7c:0a:ee:b6:70:b2:dd:cc:61:29:71:f7:8a: 4d:44:b4:c6:a1:f8:05:6d:45:50:0c:a9:65:28:33: 49:aa:20:31:15:80:c5:12:33:28:be:0f:4f:0a:43: 3f:0c:e9:05:b6:37:2e:c3:d9:f9:be:6b:78:d3:b2: 1f:75:74:47:61:27:fd:39:86:bf:04:70:f3:63:9a: 51:5b:38:6a:39:14:d5:eb:e7:24:a4:52:0c:17:06: cf:19:10:cb:19:34:a0:aa:45:78:59:c0:80:f7:f2: 6a:9c:b7:c3:48:b0:f2:67:10:10:70:27:9a:67:b1: fa:08:12:f0:ae:73:83:0f:3e:67:fb:f8:ed:17:75: a6:40:e9:e0:6d:4b:bd:e4:11:f2:58:81:6c:3d:5b: 89:2f:9d:ff:92:2b:11:60:61:9d:df:8a:38:7c:ce: 18:82:a6:71:75:dc:a9:9c:f3:2e:c9:7e:ca:3f:7b: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B4:97:B3:11:E6:2E:BD:BD:0B:85:61:4D:53:DF:C1:2E:BC:5E:07 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:a4:dd:a1:69:bf:02:25:6f:e0:24:2f:f4:d4:1e:dc:de:1a: fd:0d:2f:f0:64:50:4f:7c:c6:92:54:34:c5:99:4e:a3:e4:3e: 5e:ff:03:5c:9a:35:71:c8:2e:b6:6c:4b:2b:be:86:2d:a2:6a: 72:5d:3c:b1:55:06:0b:0c:9b:fe:56:ae:55:a3:0c:a0:0f:7a: d7:d7:e7:69:4c:fa:4b:9c:75:82:98:02:c1:b6:51:08:b1:69: 01:9e:bf:71:e0:bb:47:9b:5a:5d:f4:d7:91:00:fe:70:ca:1d: ec:e1:68:49:4e:43:30:7d:e8:09:6a:76:4a:f5:fe:1c:49:03: dc:62:9c:2e:ef:11:90:5a:a4:d2:2b:ad:fe:99:b3:53:d0:da: 03:9e:80:95:23:5a:2f:7c:0f:ab:b2:21:7c:33:f2:17:df:85: ef:d7:a2:87:44:e0:cb:c3:26:29:e4:3a:a7:a7:0a:32:84:f4: d6:f4:40:c5:28:3e:2c:94:74:94:f5:49:67:39:51:ba:13:67: cf:ea:c4:b9:35:22:cd:1b:18:ff:f2:1c:c3:3e:d6:6f:04:7e: 3e:9e:7f:88:0d:23:e4:6a:55:64:ce:85:03:46:be:8c:0f:fd: 0d:13:e6:de:c7:2d:27:29:8d:15:c9:be:1c:1d:b9:be:70:a6: a2:70:58:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRDAxMTAvBgNVBAUTKDdBNUM0REQwQTNCQjlDRDgxNEIyMTc0QUY2OTNFM0Y3 NDE0Qjk5NUIwHhcNMjUwNTMxMDQzMDM5WhcNMjUwNjA3MDQzMDM5WjAYMRYwFAYD VQQDEw02ODNhODVlZi04YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts+yFwa/lKhNkbur0FsZ/1sxs+XPjPZe5vhAOArmo+oAzPx4xR5wXP7qiEgm Qzi048415aJpdURXQd5UDttb1n9nLarFEnc9h+d8hnwK7rZwst3MYSlx94pNRLTG ofgFbUVQDKllKDNJqiAxFYDFEjMovg9PCkM/DOkFtjcuw9n5vmt407IfdXRHYSf9 OYa/BHDzY5pRWzhqORTV6+ckpFIMFwbPGRDLGTSgqkV4WcCA9/JqnLfDSLDyZxAQ cCeaZ7H6CBLwrnODDz5n+/jtF3WmQOngbUu95BHyWIFsPVuJL53/kisRYGGd34o4 fM4YgqZxddypnPMuyX7KP3sPVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy0l7MR 5i69vQuFYU1T38EuvF4HMB8GA1UdIwQYMBaAFHpcTdCju5zYFLIXSvaT4/dBS5lb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZEMC8yQzlBQTMxQzk1 NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25OZ1VzaGRLOXBQajkwRkxt VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZEMC8yQzlBQTMxQzk1NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25O Z1VzaGRLOXBQajkwRkxtVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbpN2hab8CJW/gJC/01B7c3hr9DS/wZFBPfMaSVDTFmU6j5D5e/wNc mjVxyC62bEsrvoYtompyXTyxVQYLDJv+Vq5VowygD3rX1+dpTPpLnHWCmALBtlEI sWkBnr9x4LtHm1pd9NeRAP5wyh3s4WhJTkMwfegJanZK9f4cSQPcYpwu7xGQWqTS K63+mbNT0NoDnoCVI1ovfA+rsiF8M/IX34Xv16KHRODLwyYp5DqnpwoyhPTW9EDF KD4slHSU9UlnOVG6E2fP6sS5NSLNGxj/8hzDPtZvBH4+nn+IDSPkalVkzoUDRr6M D/0NE+bexy0nKY0Vyb4cHbm+cKaicFib -----END CERTIFICATE-----Generated at Sat May 31 16:46:51 2025 by rpki-client