$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: SPsQ7ID+ptmhnmP2n4F9k8z8mW44JgPAtkTGODGih48= Subject key identifier: 3E:06:B6:82:D6:17:0E:82:1E:C0:61:AF:F2:4D:7B:A2:49:C8:3E:9E Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 0506 Signing time: Sun 08 Jun 2025 23:16:15 +0000 Manifest this update: Sun 08 Jun 2025 23:16:14 +0000 Manifest next update: Sun 15 Jun 2025 23:16:14 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: JXb9sMXi1uNvQ7wxusJ9gmQuYL2tVZmqQcRwz+bwrjM=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: Jun 8 23:16:14 2025 GMT Not After : Jun 15 23:16:14 2025 GMT Subject: CN=684619be-94a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f2:23:36:15:16:ec:25:99:28:7a:92:02:01: 84:fc:ab:1a:c4:72:61:49:91:51:c6:82:51:03:bc: 75:18:c5:a5:7a:91:96:01:51:a5:45:6f:40:e3:01: a1:1d:ae:94:96:1a:17:d7:27:b0:fa:08:3a:cc:f8: 14:fb:b7:2e:31:0e:b2:78:76:ff:93:5e:a5:de:dd: 24:83:c9:0f:5d:98:ae:29:93:75:51:a3:aa:e3:df: b9:57:76:d5:da:b3:d2:e3:20:e6:ba:19:45:0c:46: 6d:55:06:db:d6:13:e6:3f:ff:f6:fa:e0:b7:56:9b: 19:82:ec:86:f8:d0:47:32:33:50:1c:ef:e2:05:94: ff:ae:55:b3:11:b7:f0:79:3d:c1:c1:09:d4:bf:85: 8a:8d:91:42:97:88:49:b5:70:9e:32:3d:71:0d:d6: 17:29:aa:46:ee:9e:08:39:03:65:b9:81:01:ca:b7: ba:46:2f:24:b4:65:c2:4a:26:16:2f:31:6b:4f:f7: a3:b0:b0:31:60:48:f0:0f:b0:5f:3f:88:7a:06:c7: c3:6c:dd:a0:77:31:f0:79:a5:a3:8f:a4:ca:ba:27: 9b:7f:db:14:6c:b5:c6:1f:6f:f4:63:7a:44:22:1e: 75:14:a2:c8:9c:ec:fb:87:50:3d:3f:a0:12:1b:46: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:06:B6:82:D6:17:0E:82:1E:C0:61:AF:F2:4D:7B:A2:49:C8:3E:9E X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:58:e3:26:c8:19:15:0a:a2:4c:f7:2b:a2:b2:d0:aa:c1:80: f6:92:04:77:da:02:cd:ff:67:22:85:92:b7:50:7b:b3:d0:24: 5b:56:71:97:3e:a8:29:f2:e8:a4:d0:99:8c:37:37:6d:87:47: dc:07:7a:fc:a0:21:f2:de:f3:73:26:6c:7a:e0:2f:43:42:c9: 09:c2:2c:b8:f8:8c:14:07:11:fa:c8:96:0f:2b:ef:d2:f4:a7: cc:f7:22:86:27:dc:c8:39:9c:0a:52:66:c5:85:a2:e0:e2:42: 07:b6:b1:33:8c:dd:f0:30:16:dd:3f:b8:9d:c1:aa:35:8e:ab: 56:9b:fb:35:da:71:df:bc:e5:ea:5c:01:23:8f:d3:61:58:48: 79:d0:a0:7d:88:e2:8f:e6:79:1c:93:ae:e9:e3:cd:f5:bd:75: 1d:bb:b5:a3:39:19:08:df:c7:19:e3:80:8b:3b:cf:23:1c:40: 97:4c:a1:5f:42:b6:cc:c7:64:79:f0:12:f3:c2:0a:69:c4:32: 6e:e9:2f:fb:e6:1e:31:eb:c0:00:bf:a6:7b:66:21:79:94:1e: 41:60:11:ff:7f:25:bb:df:f6:12:11:75:7c:ae:6b:27:9b:b8: ae:d0:5c:8f:b4:b2:2b:d1:2f:45:47:85:07:a7:b1:fd:f5:21: 51:c8:ad:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUwNjA4MjMxNjE0WhcNMjUwNjE1MjMxNjE0WjAYMRYwFAYD VQQDEw02ODQ2MTliZS05NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PIjNhUW7CWZKHqSAgGE/KsaxHJhSZFRxoJRA7x1GMWlepGWAVGlRW9A4wGh Ha6UlhoX1yew+gg6zPgU+7cuMQ6yeHb/k16l3t0kg8kPXZiuKZN1UaOq49+5V3bV 2rPS4yDmuhlFDEZtVQbb1hPmP//2+uC3VpsZguyG+NBHMjNQHO/iBZT/rlWzEbfw eT3BwQnUv4WKjZFCl4hJtXCeMj1xDdYXKapG7p4IOQNluYEByre6Ri8ktGXCSiYW LzFrT/ejsLAxYEjwD7BfP4h6BsfDbN2gdzHweaWjj6TKuiebf9sUbLXGH2/0Y3pE Ih51FKLInOz7h1A9P6ASG0bcwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4GtoLW Fw6CHsBhr/JNe6JJyD6eMB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgWOMmyBkVCqJM9yuistCqwYD2kgR32gLN/2cihZK3UHuz0CRbVnGX Pqgp8uik0JmMNzdth0fcB3r8oCHy3vNzJmx64C9DQskJwiy4+IwUBxH6yJYPK+/S 9KfM9yKGJ9zIOZwKUmbFhaLg4kIHtrEzjN3wMBbdP7idwao1jqtWm/s12nHfvOXq XAEjj9NhWEh50KB9iOKP5nkck67p4831vXUdu7WjORkI38cZ44CLO88jHECXTKFf QrbMx2R58BLzwgppxDJu6S/75h4x68AAv6Z7ZiF5lB5BYBH/fyW73/YSEXV8rmsn m7iu0FyPtLIr0S9FR4UHp7H99SFRyK2j -----END CERTIFICATE-----Generated at Mon Jun 9 16:55:00 2025 by rpki-client