$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: 5UtE4g2E7ylBX5U1oA4Xqc8csvzOhSFBw+QSSZ4fpPM= Subject key identifier: 22:93:AE:43:CE:99:57:24:C5:C2:EA:14:B2:DC:56:FB:FB:C5:C7:A6 Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 012B Signing time: Sat 31 May 2025 04:14:27 +0000 Manifest this update: Sat 31 May 2025 04:14:26 +0000 Manifest next update: Sat 07 Jun 2025 04:14:26 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: 8MuwfiPOBOU75Pd/p48zcDMhDcvY+ru7ONk18yg2X50=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: May 31 04:14:26 2025 GMT Not After : Jun 7 04:14:26 2025 GMT Subject: CN=683a8222-e6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:07:9f:ad:cd:65:42:9d:39:2c:eb:40:dc: d0:21:82:40:cb:f7:69:bc:54:04:ca:f6:d5:cc:5e: 0e:0d:ca:6c:eb:82:18:79:41:b7:b7:93:7c:70:65: 99:65:f4:c0:45:52:a5:f4:a0:35:3d:7c:ad:77:df: f3:39:34:af:92:ae:dd:ea:7d:3a:63:d6:b2:4d:af: 1b:75:9a:8c:62:b1:04:f9:93:ec:7e:78:23:14:0e: d7:9b:22:b2:09:a9:33:92:d6:a7:32:bb:2a:94:35: 4f:3d:d2:48:38:29:04:cf:90:d0:84:ab:c0:d5:5e: 73:7b:8d:dd:54:0c:5e:73:b3:77:d1:ca:ef:9f:ff: c0:f3:df:09:88:47:a6:70:38:f0:1e:e8:de:53:43: 97:8a:c4:a8:03:35:8a:5b:6c:9d:82:7b:2c:22:12: 99:d4:30:12:58:2e:f4:3a:c5:92:99:b9:7d:25:63: ce:f1:bc:9c:b4:fc:f6:2d:b2:7a:1b:e3:86:c0:a9: 93:a1:59:ff:f4:b3:72:94:66:ce:20:85:de:7e:8e: 47:be:80:b9:72:6c:a6:6a:a4:fd:c1:05:f2:30:24: 56:b4:d6:4f:5c:21:6f:11:b8:3d:af:da:da:36:c0: 56:97:78:f3:53:23:ad:bf:1c:6a:08:f1:a5:d4:08: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:AE:43:CE:99:57:24:C5:C2:EA:14:B2:DC:56:FB:FB:C5:C7:A6 X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:75:60:af:9c:54:e3:b3:02:95:2e:a5:96:99:da:ab:84:93: bd:aa:45:1a:22:b9:f4:b3:d6:ad:f0:86:86:7a:f5:a8:d4:b3: f5:b9:72:26:fa:4e:53:99:4a:0a:1b:ee:aa:a2:a1:46:74:92: d1:7c:e5:ce:59:6f:f7:77:13:a0:8f:29:84:76:99:f8:99:67: 5a:dd:7c:93:7c:cc:83:1b:31:8f:d9:86:02:e6:1d:9f:55:f0: ca:d6:2b:ee:e8:ec:dd:b5:ed:20:c9:d9:9c:76:b7:68:2e:6c: ce:83:13:8c:88:33:c1:0b:4b:9a:8e:06:25:f0:ce:0e:23:65: 42:fd:d0:3f:66:de:aa:e2:8f:5a:0b:3d:bc:e8:9a:49:89:92: 44:2b:b6:3c:7d:d7:d4:5d:ff:ce:a5:49:f5:7e:e2:83:76:24: 0c:a7:ff:43:34:12:13:2d:ae:d4:c0:05:8c:7d:57:97:04:aa: c7:a2:05:dd:ca:64:9e:9e:3f:cc:bb:ea:b4:85:da:76:87:bc: 1d:15:6b:14:0b:9d:94:85:49:81:a6:99:0b:99:d2:15:96:46: 29:64:27:a6:22:92:59:52:38:41:75:9f:28:b6:1b:81:a7:8d: 71:d6:33:27:2e:24:50:44:77:cc:a9:ed:b4:cc:3f:ba:e8:d3: 5b:36:6a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwNTMxMDQxNDI2WhcNMjUwNjA3MDQxNDI2WjAYMRYwFAYD VQQDEw02ODNhODIyMi1lNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvIHn63NZUKdOSzrQNzQIYJAy/dpvFQEyvbVzF4ODcps64IYeUG3t5N8cGWZ ZfTARVKl9KA1PXytd9/zOTSvkq7d6n06Y9ayTa8bdZqMYrEE+ZPsfngjFA7XmyKy CakzktanMrsqlDVPPdJIOCkEz5DQhKvA1V5ze43dVAxec7N30crvn//A898JiEem cDjwHujeU0OXisSoAzWKW2ydgnssIhKZ1DASWC70OsWSmbl9JWPO8byctPz2LbJ6 G+OGwKmToVn/9LNylGbOIIXefo5HvoC5cmymaqT9wQXyMCRWtNZPXCFvEbg9r9ra NsBWl3jzUyOtvxxqCPGl1Agp1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKTrkPO mVckxcLqFLLcVvv7xcemMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDdWCvnFTjswKVLqWWmdqrhJO9qkUaIrn0s9at8IaGevWo1LP1uXIm +k5TmUoKG+6qoqFGdJLRfOXOWW/3dxOgjymEdpn4mWda3XyTfMyDGzGP2YYC5h2f VfDK1ivu6Ozdte0gydmcdrdoLmzOgxOMiDPBC0uajgYl8M4OI2VC/dA/Zt6q4o9a Cz286JpJiZJEK7Y8fdfUXf/OpUn1fuKDdiQMp/9DNBITLa7UwAWMfVeXBKrHogXd ymSenj/Mu+q0hdp2h7wdFWsUC52UhUmBppkLmdIVlkYpZCemIpJZUjhBdZ8othuB p41x1jMnLiRQRHfMqe20zD+66NNbNmrD -----END CERTIFICATE-----Generated at Sat May 31 16:57:43 2025 by rpki-client