$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft File: _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json) Hash identifier: KIIo4/F45GHR3JlhcZWHdcMWjM++6oINCxyRRBqQPr4= Subject key identifier: C4:7C:92:14:CE:5A:29:B1:D5:37:AE:13:B6:FA:45:89:78:98:E1:43 Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8 Certificate issuer: /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft Manifest number: 144B Signing time: Fri 30 May 2025 18:32:16 +0000 Manifest this update: Fri 30 May 2025 18:32:15 +0000 Manifest next update: Fri 06 Jun 2025 18:32:15 +0000 Files and hashes: 1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: +Ocn6aQ1RfpOqNV3/8aK3CH7WvtPU5SOErWLXpe1Ykw=) 2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8 Validity Not Before: May 30 18:32:15 2025 GMT Not After : Jun 6 18:32:15 2025 GMT Subject: CN=6839f9b0-de59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:99:d6:9c:06:23:0d:6d:5d:1d:09:57:d2: 07:8d:c8:67:d8:cf:d8:8b:45:79:4d:6d:cd:0a:b4: a6:2e:6e:a4:34:f8:6a:54:5f:8e:55:c2:77:98:82: 71:9a:77:af:2c:90:08:0e:01:3e:99:b9:6f:cb:c9: 21:f7:54:11:db:83:da:54:e7:ad:6c:91:31:26:33: cb:13:d9:c9:b7:c5:97:bc:89:05:0f:4a:67:5d:fa: f2:95:41:89:60:b8:06:b8:97:e0:a0:a8:8a:3f:1a: e2:49:e9:bd:c8:eb:02:f0:bd:07:a9:ff:c8:d6:a9: 6a:67:be:09:1c:41:00:29:45:56:e8:45:9c:66:32: 69:9a:1a:cf:7d:6d:d6:1d:cb:1e:c2:ab:70:60:26: 46:69:5d:5d:05:42:d8:b1:3c:6d:68:4a:73:e7:b4: af:b1:54:86:6d:97:0e:b1:71:86:8b:54:67:f3:00: 91:cc:a4:d2:3d:00:71:3e:79:40:9b:45:fb:b9:cf: 77:2b:5c:a3:1f:96:db:f6:73:9b:5c:8e:08:11:67: 6c:93:74:3a:8b:de:2b:75:e6:17:fe:d2:37:cc:9d: 0e:de:37:c9:a8:ca:15:95:4d:fd:d2:a9:aa:48:d0: 6b:11:8d:b0:89:e1:a2:f9:50:97:54:9c:97:1c:7f: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7C:92:14:CE:5A:29:B1:D5:37:AE:13:B6:FA:45:89:78:98:E1:43 X509v3 Authority Key Identifier: keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:fe:38:dd:e5:3d:c1:38:8e:ee:ad:73:1a:e7:26:38:07: 84:05:fb:fd:b5:a6:72:40:ba:55:01:3e:83:09:34:be:8a:a7: ee:6b:95:ba:9b:a4:b5:d4:e6:8e:65:b1:b8:bc:44:a0:5a:3a: cf:f0:1c:2e:30:54:88:07:f3:01:e2:ca:6d:ab:46:cc:dc:c6: 95:37:99:6d:c5:bb:29:d5:d2:c8:8e:a5:c8:01:50:f1:e9:82: b8:bf:c4:18:ce:3c:6e:fa:fd:b4:97:67:53:10:21:36:68:42: 28:03:83:d4:55:70:94:33:b8:91:9c:f2:60:d0:7c:ec:86:02: d6:f7:68:ae:c1:2a:cd:0f:8d:33:5c:92:93:11:ce:31:aa:9c: 89:64:b8:82:c5:5c:1f:b7:1d:33:8c:0e:3a:6a:71:a1:6e:f4: 4f:55:1d:26:b1:35:74:d0:68:fd:a7:9c:26:27:07:e5:e0:97: 49:15:5b:22:f9:b5:28:f9:71:3f:13:a2:29:bb:c2:92:88:ed: a3:66:fb:56:6b:c5:e9:60:d9:c3:da:b4:d8:21:b0:cc:0b:f3: 9d:61:de:87:62:3d:12:64:f7:bf:6f:dd:b2:23:59:6d:ae:cc: 3e:d0:99:16:38:51:04:e7:db:7d:9d:94:7b:03:e4:b4:59:55: db:5b:25:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3RDAxMTAvBgNVBAUTKEZFOTA3REE3QTdGOTkzNzlBNkZENDYzREQxN0QyNUI0 RDUwMURGRTgwHhcNMjUwNTMwMTgzMjE1WhcNMjUwNjA2MTgzMjE1WjAYMRYwFAYD VQQDEw02ODM5ZjliMC1kZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o2Z1pwGIw1tXR0JV9IHjchn2M/Yi0V5TW3NCrSmLm6kNPhqVF+OVcJ3mIJx mnevLJAIDgE+mblvy8kh91QR24PaVOetbJExJjPLE9nJt8WXvIkFD0pnXfrylUGJ YLgGuJfgoKiKPxriSem9yOsC8L0Hqf/I1qlqZ74JHEEAKUVW6EWcZjJpmhrPfW3W HcsewqtwYCZGaV1dBULYsTxtaEpz57SvsVSGbZcOsXGGi1Rn8wCRzKTSPQBxPnlA m0X7uc93K1yjH5bb9nObXI4IEWdsk3Q6i94rdeYX/tI3zJ0O3jfJqMoVlU390qmq SNBrEY2wieGi+VCXVJyXHH9O2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR8khTO Wimx1TeuE7b6RYl4mOFDMB8GA1UdIwQYMBaAFP6Qfaen+ZN5pv1GPdF9JbTVAd/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWszbW1fVVk5MFgwbHROVUIz LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19wQjlwNmY1azNtbV9VWTkwWDBsdE5VQjMtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi9fcEI5cDZmNWsz bW1fVVk5MFgwbHROVUIzLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPS/443eU9wTiO7q1zGucmOAeEBfv9taZyQLpVAT6DCTS+iqfua5W6 m6S11OaOZbG4vESgWjrP8BwuMFSIB/MB4sptq0bM3MaVN5ltxbsp1dLIjqXIAVDx 6YK4v8QYzjxu+v20l2dTECE2aEIoA4PUVXCUM7iRnPJg0HzshgLW92iuwSrND40z XJKTEc4xqpyJZLiCxVwftx0zjA46anGhbvRPVR0msTV00Gj9p5wmJwfl4JdJFVsi +bUo+XE/E6Ipu8KSiO2jZvtWa8XpYNnD2rTYIbDMC/OdYd6HYj0SZPe/b92yI1lt rsw+0JkWOFEE59t9nZR7A+S0WVXbWyWQ -----END CERTIFICATE-----Generated at Sat May 31 16:29:37 2025 by rpki-client