$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: NaJA1D3YQlWvZ2OVN3yrMlkjPNPOJevBR2paNgGU3+I= Subject key identifier: B7:7A:72:52:00:DC:57:BE:A2:DA:79:26:00:F7:6E:BF:73:DA:63:BE Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0139 Signing time: Sat 31 May 2025 04:04:17 +0000 Manifest this update: Sat 31 May 2025 04:04:16 +0000 Manifest next update: Sat 07 Jun 2025 04:04:16 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: VeK6E1yOhsHynDjjdIIlhnG+BtHm3OvlHfVyNM/K1Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: May 31 04:04:16 2025 GMT Not After : Jun 7 04:04:16 2025 GMT Subject: CN=683a7fc1-e11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:4b:96:fc:7e:39:ef:e3:93:2d:80:01:c1: 1e:a6:e9:d8:e2:f7:da:e4:fb:0c:b0:a6:ec:df:e8: 00:ee:ec:6f:e8:09:56:03:7d:21:5e:75:b0:59:39: aa:6a:76:52:46:3d:83:c7:93:9a:e4:c3:18:a9:6c: f1:f5:c5:fb:23:76:1a:0f:9f:ad:a0:b9:f2:ab:89: 4b:d8:93:76:c8:32:4c:26:0d:f7:72:91:67:9d:1b: 79:00:68:b4:6e:6a:a7:ee:e0:94:17:57:57:ea:80: 96:f0:b3:49:59:bb:82:95:85:42:6b:a4:f3:d8:e3: 44:de:1c:4d:97:af:84:80:d5:b2:2d:80:52:ab:6c: b2:ac:ce:e1:01:86:fd:1c:92:4a:69:33:99:76:44: 54:70:b9:06:ab:f9:55:fc:15:29:f6:ce:dc:00:70: 09:0c:32:b2:1b:60:fd:79:6d:2a:7e:fd:9c:09:e0: a9:fe:1e:bb:89:72:a4:c2:72:d0:3c:03:b8:b4:41: e6:f0:58:b7:e6:a1:c8:68:6e:39:af:18:a5:69:55: 45:06:51:a5:55:34:8e:1d:75:9d:3d:25:eb:f0:3c: 47:41:41:f9:c9:79:1e:8a:63:88:4e:2d:62:2c:ae: 80:44:7f:be:e9:84:c0:16:4a:0f:61:2b:7c:8f:a2: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7A:72:52:00:DC:57:BE:A2:DA:79:26:00:F7:6E:BF:73:DA:63:BE X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fb:83:c4:bb:3d:32:00:0c:c6:46:29:5c:27:c3:83:ae:a3: dc:f2:24:82:15:6e:6d:84:1f:64:26:4e:83:5d:22:6e:86:e4: b6:69:30:41:ef:75:a1:ad:af:98:51:39:a6:df:39:a2:ad:df: e5:98:dd:eb:43:99:f7:b7:42:88:17:5f:8f:2b:4a:6f:e3:a6: 3f:74:0a:76:77:11:b6:b0:6e:da:61:92:2e:d3:47:c8:5f:2d: ce:ec:17:19:c5:64:4d:3d:00:f3:e7:9c:df:da:95:25:2f:01: a8:7a:f3:3a:70:c2:c6:0b:e6:9c:df:cd:87:cb:a4:a0:00:f9: 71:bd:29:8f:8c:26:fe:f3:99:1d:97:da:d7:1f:10:86:c9:9c: 9d:0c:d5:6c:aa:35:81:8e:ca:c4:70:15:57:2b:6b:f3:86:58: cf:eb:13:6d:c6:d1:89:f1:52:17:a1:39:0b:96:34:85:82:f7: b3:19:79:ce:bb:01:35:1f:37:4d:f5:5e:c9:31:e6:51:84:b7: 4d:76:b9:23:25:60:5d:ec:af:68:17:dd:f7:56:92:8f:c7:9e: ac:9d:b6:0f:e2:a8:b9:e9:b1:1b:93:07:ae:0d:a9:34:26:ec: 48:80:86:16:bc:06:8a:7d:e1:2a:e0:f2:80:08:1d:7a:0b:90: 53:e7:ef:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUwNTMxMDQwNDE2WhcNMjUwNjA3MDQwNDE2WjAYMRYwFAYD VQQDEw02ODNhN2ZjMS1lMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xRLlvx+Oe/jky2AAcEepunY4vfa5PsMsKbs3+gA7uxv6AlWA30hXnWwWTmq anZSRj2Dx5Oa5MMYqWzx9cX7I3YaD5+toLnyq4lL2JN2yDJMJg33cpFnnRt5AGi0 bmqn7uCUF1dX6oCW8LNJWbuClYVCa6Tz2ONE3hxNl6+EgNWyLYBSq2yyrM7hAYb9 HJJKaTOZdkRUcLkGq/lV/BUp9s7cAHAJDDKyG2D9eW0qfv2cCeCp/h67iXKkwnLQ PAO4tEHm8Fi35qHIaG45rxilaVVFBlGlVTSOHXWdPSXr8DxHQUH5yXkeimOITi1i LK6ARH++6YTAFkoPYSt8j6LVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd6clIA 3Fe+otp5JgD3br9z2mO+MB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb+4PEuz0yAAzGRilcJ8ODrqPc8iSCFW5thB9kJk6DXSJuhuS2aTBB 73Whra+YUTmm3zmird/lmN3rQ5n3t0KIF1+PK0pv46Y/dAp2dxG2sG7aYZIu00fI Xy3O7BcZxWRNPQDz55zf2pUlLwGoevM6cMLGC+ac382Hy6SgAPlxvSmPjCb+85kd l9rXHxCGyZydDNVsqjWBjsrEcBVXK2vzhljP6xNtxtGJ8VIXoTkLljSFgvezGXnO uwE1HzdN9V7JMeZRhLdNdrkjJWBd7K9oF933VpKPx56snbYP4qi56bEbkweuDak0 JuxIgIYWvAaKfeEq4PKACB16C5BT5+/M -----END CERTIFICATE-----Generated at Sat May 31 16:56:18 2025 by rpki-client