$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: BbLX/N6pQGd77Faap1wzStZpOSMZKj0+k5qUnPXvYQg= Subject key identifier: C7:CD:CB:49:F0:D0:B2:8F:9B:47:EE:85:E8:55:49:95:83:17:7F:3C Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0F06 Signing time: Sat 31 May 2025 21:28:59 +0000 Manifest this update: Sat 31 May 2025 21:28:59 +0000 Manifest next update: Sat 07 Jun 2025 21:28:59 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: QMfvCVWCAfVg7U36dToAGYiMwkeI1dsilAv0CcTUcIE=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: May 31 21:28:59 2025 GMT Not After : Jun 7 21:28:59 2025 GMT Subject: CN=683b749b-c4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:2e:c8:6a:96:cf:ec:b1:5d:ad:0f:a6:36: 3b:a5:90:f6:9b:60:cc:c3:c5:de:89:cf:f1:64:7f: f3:ef:1c:f9:c8:0e:d3:4a:71:4b:a3:66:86:84:05: b7:63:8f:51:23:a1:c5:e3:f9:d8:e0:6d:f2:a1:9c: 62:5a:22:1a:75:55:b0:df:bb:11:a2:94:46:c4:e6: ab:5e:b4:54:91:88:11:5f:6e:17:19:7c:97:d3:f8: 54:07:b5:65:83:82:f6:48:08:c0:59:b3:0a:c6:c4: 46:b9:9f:bd:86:4c:b6:b4:d5:80:c9:f6:38:0a:70: e6:fa:ee:04:d9:7e:47:e3:84:2d:b2:d0:06:aa:f1: b7:9a:fc:fa:8f:22:0a:81:49:03:be:48:cf:c7:3f: 1d:87:3c:23:9c:a4:7d:ef:af:40:36:e6:07:3f:13: 8c:cb:66:fa:2f:5d:36:2a:38:a0:6c:5f:09:e8:29: 2c:af:f1:f1:01:98:f4:cd:70:e4:50:3c:42:33:7d: 3e:97:66:b7:f2:34:c4:5b:10:72:28:4e:52:dd:57: bf:e5:e1:9e:87:8c:34:45:77:60:73:5b:00:eb:59: 0b:ff:04:e8:43:44:07:37:b6:38:2a:97:19:59:71: 78:55:ee:2d:6e:ba:03:43:13:19:a9:7f:3a:c3:fc: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CD:CB:49:F0:D0:B2:8F:9B:47:EE:85:E8:55:49:95:83:17:7F:3C X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:16:a7:8d:48:52:eb:cd:12:05:af:8f:6a:de:60:cb:f3:2f: cc:52:50:32:b3:7b:50:36:38:a9:de:44:28:ba:a3:09:66:8a: 48:a9:ab:00:1e:be:53:6f:8f:8f:b8:aa:96:69:4d:40:b3:e5: e7:3c:a4:5c:d3:bf:be:29:f7:8a:f6:e3:54:21:11:5d:a0:94: 4e:49:37:b9:e4:ad:9b:24:bc:1d:35:b7:a7:89:88:05:a2:f0: 02:7f:5a:ca:0f:82:04:9a:22:a8:66:23:a8:a3:be:81:11:55: 89:92:5d:de:64:74:f7:fa:f5:fd:0f:74:d1:71:5f:2b:ee:03: a7:ef:e1:14:2f:33:94:fa:08:00:71:57:a3:46:81:26:7e:f2: f3:ad:25:4d:60:b4:cf:a2:4f:d6:6b:73:8f:cb:52:42:e2:62: 1d:31:b5:65:2f:e4:c9:16:1a:74:bd:6d:88:52:e8:20:48:13: 94:8e:ff:de:2b:cc:69:cf:39:6f:90:1a:8e:11:87:61:96:e1: f0:25:89:43:bd:bc:30:5d:a9:c0:33:a1:0d:c4:8e:e8:80:b9: b3:65:72:d9:50:8e:e8:7c:e4:a0:a3:d4:67:45:e4:bc:44:35: 04:e7:4d:64:27:4d:d6:2a:50:81:37:97:72:a8:a6:a3:b5:94: 11:63:ca:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUwNTMxMjEyODU5WhcNMjUwNjA3MjEyODU5WjAYMRYwFAYD VQQDEw02ODNiNzQ5Yi1jNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleUuyGqWz+yxXa0PpjY7pZD2m2DMw8Xeic/xZH/z7xz5yA7TSnFLo2aGhAW3 Y49RI6HF4/nY4G3yoZxiWiIadVWw37sRopRGxOarXrRUkYgRX24XGXyX0/hUB7Vl g4L2SAjAWbMKxsRGuZ+9hky2tNWAyfY4CnDm+u4E2X5H44QtstAGqvG3mvz6jyIK gUkDvkjPxz8dhzwjnKR9769ANuYHPxOMy2b6L102KjigbF8J6Cksr/HxAZj0zXDk UDxCM30+l2a38jTEWxByKE5S3Ve/5eGeh4w0RXdgc1sA61kL/wToQ0QHN7Y4KpcZ WXF4Ve4tbroDQxMZqX86w/x8pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfNy0nw 0LKPm0fuhehVSZWDF388MB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATFqeNSFLrzRIFr49q3mDL8y/MUlAys3tQNjip3kQouqMJZopIqasA Hr5Tb4+PuKqWaU1As+XnPKRc07++KfeK9uNUIRFdoJROSTe55K2bJLwdNbeniYgF ovACf1rKD4IEmiKoZiOoo76BEVWJkl3eZHT3+vX9D3TRcV8r7gOn7+EULzOU+ggA cVejRoEmfvLzrSVNYLTPok/Wa3OPy1JC4mIdMbVlL+TJFhp0vW2IUuggSBOUjv/e K8xpzzlvkBqOEYdhluHwJYlDvbwwXanAM6ENxI7ogLmzZXLZUI7ofOSgo9RnReS8 RDUE501kJ03WKlCBN5dyqKajtZQRY8o3 -----END CERTIFICATE-----Generated at Mon Jun 2 06:33:26 2025 by rpki-client