$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: oyeomfeG7XBVIsmX7JnYsbJBG/84gAYptAReeegcLrM= Subject key identifier: C9:FC:CD:07:E6:4C:41:15:DA:6A:14:29:AC:1E:0D:32:72:F5:74:12 Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 080A Signing time: Fri 30 May 2025 21:06:10 +0000 Manifest this update: Fri 30 May 2025 21:06:10 +0000 Manifest next update: Fri 06 Jun 2025 21:06:10 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: i6A3Pvn+PIUeoGIOj5HnycUlPfpDawjJAP5MJmUoLzQ=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: May 30 21:06:10 2025 GMT Not After : Jun 6 21:06:10 2025 GMT Subject: CN=683a1dc2-dcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:24:02:ca:17:af:61:de:fd:97:95:7f:c9: 3f:ab:2b:c6:97:21:86:42:62:ea:c9:34:98:11:b5: b9:88:70:1c:8e:34:8a:ea:4a:42:52:58:cc:bc:a9: 96:64:1a:b5:ac:c8:ec:39:a0:e8:96:97:0f:c8:c5: 58:e9:88:56:bf:34:e7:a2:45:38:90:17:b5:e3:32: 3d:17:b7:4b:58:67:1e:35:59:c4:0a:bb:ab:b8:63: ea:64:1f:52:c0:c4:5d:1c:e2:51:63:e3:a6:ad:6c: 35:54:3b:3a:7e:30:ea:52:25:dc:e5:96:58:7a:03: c5:db:e8:1d:dd:ad:e2:ab:07:1a:7b:53:ed:d6:32: e2:0d:28:16:23:3c:26:7d:85:8c:c8:ef:5e:c2:d9: 53:86:8c:b1:42:a9:38:66:a7:dc:1a:25:f9:97:86: 49:ed:f8:4a:7a:56:aa:48:bc:c7:5e:f6:cf:b7:75: 96:4d:2e:76:ac:98:d2:96:2e:4a:08:7a:f7:2e:93: 58:6b:24:98:28:a0:da:c8:26:99:ef:2c:a9:18:da: fd:9b:af:92:6f:5f:b3:f9:41:fc:c9:62:0f:47:46: 57:0d:8f:17:43:1f:f3:42:ff:1a:29:2b:de:94:56: 19:b7:ff:e0:26:f9:33:0c:ea:62:4c:a0:0e:e5:59: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FC:CD:07:E6:4C:41:15:DA:6A:14:29:AC:1E:0D:32:72:F5:74:12 X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7f:74:4a:d4:f4:ec:e1:16:fd:23:c9:f6:2e:8e:e7:ea:46: 01:dc:a3:6f:88:da:63:dc:b9:ce:9e:bd:97:0d:74:bd:41:12: e9:19:4d:59:e2:b0:c5:b0:ac:93:0a:ff:85:ee:e3:76:e6:09: 69:c2:44:79:ae:2a:a4:91:be:57:54:5a:12:96:dd:af:fa:bd: d4:6b:07:9d:74:8d:61:1b:7d:a8:0d:7f:0d:bd:70:c0:c8:c6: ec:95:c4:fd:2a:47:98:50:b0:f3:48:78:02:96:ad:42:76:49: cc:08:40:e5:d2:cd:aa:2e:b4:b4:9e:eb:f7:49:22:80:62:ae: b5:0a:2f:c0:d7:91:67:f0:03:c2:01:70:93:7e:56:77:a1:30: 24:a3:b1:62:06:b1:88:68:84:d4:84:22:56:3d:51:af:7c:fe: ec:66:fb:58:33:47:99:16:bc:05:ec:71:4b:6b:63:15:e2:6e: be:a9:42:50:30:d1:52:1e:44:98:e7:3d:b4:3e:41:fb:3f:90: 1e:d9:84:8d:10:20:0b:44:68:65:6f:d8:cb:30:44:0e:da:c6: ce:1e:5b:b4:b4:c4:ac:b4:13:84:ea:04:69:b6:a2:21:a9:3e: cf:5a:54:34:60:21:84:c6:a6:cf:5b:c2:eb:93:12:a7:c9:d5: 86:bf:25:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUwNTMwMjEwNjEwWhcNMjUwNjA2MjEwNjEwWjAYMRYwFAYD VQQDEw02ODNhMWRjMi1kY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiwkAsoXr2He/ZeVf8k/qyvGlyGGQmLqyTSYEbW5iHAcjjSK6kpCUljMvKmW ZBq1rMjsOaDolpcPyMVY6YhWvzTnokU4kBe14zI9F7dLWGceNVnECruruGPqZB9S wMRdHOJRY+OmrWw1VDs6fjDqUiXc5ZZYegPF2+gd3a3iqwcae1Pt1jLiDSgWIzwm fYWMyO9ewtlThoyxQqk4ZqfcGiX5l4ZJ7fhKelaqSLzHXvbPt3WWTS52rJjSli5K CHr3LpNYaySYKKDayCaZ7yypGNr9m6+Sb1+z+UH8yWIPR0ZXDY8XQx/zQv8aKSve lFYZt//gJvkzDOpiTKAO5VlkdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn8zQfm TEEV2moUKaweDTJy9XQSMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUf3RK1PTs4Rb9I8n2Lo7n6kYB3KNviNpj3LnOnr2XDXS9QRLpGU1Z 4rDFsKyTCv+F7uN25glpwkR5riqkkb5XVFoSlt2v+r3UaweddI1hG32oDX8NvXDA yMbslcT9KkeYULDzSHgClq1CdknMCEDl0s2qLrS0nuv3SSKAYq61Ci/A15Fn8APC AXCTflZ3oTAko7FiBrGIaITUhCJWPVGvfP7sZvtYM0eZFrwF7HFLa2MV4m6+qUJQ MNFSHkSY5z20PkH7P5Ae2YSNECALRGhlb9jLMEQO2sbOHlu0tMSstBOE6gRptqIh qT7PWlQ0YCGExqbPW8LrkxKnydWGvyUR -----END CERTIFICATE-----Generated at Sat May 31 16:33:06 2025 by rpki-client