$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: KJE8nw1xA0DL4D0E14Wxy4RafVDZa19O7wDQSk1KvSw= Subject key identifier: ED:4C:A5:23:61:E9:91:57:93:91:77:7F:1D:62:CD:BF:EA:9C:1D:24 Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 013D Signing time: Sat 31 May 2025 04:03:38 +0000 Manifest this update: Sat 31 May 2025 04:03:38 +0000 Manifest next update: Sat 07 Jun 2025 04:03:38 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: AS0MZIzzkV6h8joNL9WwGq079SqpVNIowsa68e7bS1g=) 2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: hNwMkMdjh5wXeGCbclXCuLBfGgwTuq5lN97tlwCY1b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: May 31 04:03:38 2025 GMT Not After : Jun 7 04:03:38 2025 GMT Subject: CN=683a7f9a-bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:9a:98:b7:b0:e2:00:1a:98:60:58:18:2b: bd:81:68:33:f3:fd:68:3d:d6:59:95:88:7a:d7:d7: ee:d0:6c:56:2e:c5:38:15:8b:6e:52:4e:99:5d:37: fa:b3:cf:5a:b3:cf:0c:2f:0c:3c:9e:ae:23:19:74: da:c2:c1:b5:9a:3b:9a:ba:96:33:65:b3:b3:ee:8d: a1:5f:25:f3:91:aa:07:eb:e8:42:e0:ec:0b:85:b3: 79:11:53:72:be:1d:dc:12:39:69:95:48:9b:95:6e: ea:ea:81:79:0f:1c:5e:72:a4:10:44:92:76:1b:d2: 65:59:b1:b6:41:3d:65:e2:b5:d2:73:36:c0:cb:95: 12:01:61:00:94:bd:ae:94:15:21:44:80:bb:3f:ec: cd:53:3f:81:3b:f5:15:23:d9:67:c5:1e:0b:a1:d8: b3:3d:b7:0a:da:7b:3c:e2:b9:a9:12:46:53:ae:02: b2:a5:96:b9:3d:43:e4:47:87:97:1d:35:ab:b2:ef: 97:c6:f3:ee:df:99:11:c9:74:1d:d5:40:1c:67:be: 93:47:6b:67:70:8a:ef:e9:46:c4:bf:c5:13:b6:0e: 74:b8:44:a5:e7:b4:6a:0f:9e:b6:c5:74:52:be:a2: 1c:51:0f:ab:46:7e:91:cb:d6:c7:ad:a4:f3:83:ff: 86:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4C:A5:23:61:E9:91:57:93:91:77:7F:1D:62:CD:BF:EA:9C:1D:24 X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:41:04:84:f6:b0:9a:eb:a4:2a:21:05:aa:36:b1:c8:27:31: 8b:cd:0c:c4:6c:2e:23:55:59:b8:0f:4a:bd:7a:07:8e:62:4f: 03:fe:87:07:71:1a:2a:fa:b5:5e:bb:91:54:14:2d:28:2a:0b: 6f:ef:3d:f8:5c:58:03:06:bf:34:b2:ac:02:de:4c:51:e9:08: d0:c8:b8:ad:53:46:b1:96:c8:b2:40:65:47:61:dc:ad:63:f2: ee:8d:e2:cd:5d:c7:ba:f7:44:1d:5c:fe:8a:0c:a4:b8:5f:3c: 4a:7a:b1:b3:d2:11:74:a7:c6:88:1c:42:34:80:54:bd:01:96: 94:2a:54:e0:fd:29:b6:2f:5a:b0:17:01:ae:d4:50:11:9a:90: e7:7b:01:eb:af:0f:50:42:3b:c6:7e:e2:28:af:bb:7d:82:00: 0a:1a:67:97:e1:a6:04:04:d0:57:67:e0:01:2b:64:bc:41:a1: f8:25:2e:a8:ab:05:6e:be:c6:a5:e5:30:69:c2:2f:09:48:e9: c3:96:1a:8a:33:fc:a2:78:e5:57:ad:42:fa:c8:ca:85:2e:6b: 12:45:d3:68:f4:68:5c:a9:80:51:90:8d:45:ef:e3:17:d3:a1: 9a:63:3c:2a:8b:d4:af:da:e1:d8:d4:48:3c:80:7c:e5:c5:b9: 59:b0:15:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjUwNTMxMDQwMzM4WhcNMjUwNjA3MDQwMzM4WjAYMRYwFAYD VQQDEw02ODNhN2Y5YS1iZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNeamLew4gAamGBYGCu9gWgz8/1oPdZZlYh619fu0GxWLsU4FYtuUk6ZXTf6 s89as88MLww8nq4jGXTawsG1mjuaupYzZbOz7o2hXyXzkaoH6+hC4OwLhbN5EVNy vh3cEjlplUiblW7q6oF5DxxecqQQRJJ2G9JlWbG2QT1l4rXSczbAy5USAWEAlL2u lBUhRIC7P+zNUz+BO/UVI9lnxR4LodizPbcK2ns84rmpEkZTrgKypZa5PUPkR4eX HTWrsu+XxvPu35kRyXQd1UAcZ76TR2tncIrv6UbEv8UTtg50uESl57RqD562xXRS vqIcUQ+rRn6Ry9bHraTzg/+G7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1MpSNh 6ZFXk5F3fx1izb/qnB0kMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaQQSE9rCa66QqIQWqNrHIJzGLzQzEbC4jVVm4D0q9egeOYk8D/ocH cRoq+rVeu5FUFC0oKgtv7z34XFgDBr80sqwC3kxR6QjQyLitU0axlsiyQGVHYdyt Y/LujeLNXce690QdXP6KDKS4XzxKerGz0hF0p8aIHEI0gFS9AZaUKlTg/Sm2L1qw FwGu1FARmpDnewHrrw9QQjvGfuIor7t9ggAKGmeX4aYEBNBXZ+ABK2S8QaH4JS6o qwVuvsal5TBpwi8JSOnDlhqKM/yieOVXrUL6yMqFLmsSRdNo9GhcqYBRkI1F7+MX 06GaYzwqi9Sv2uHY1Eg8gHzlxblZsBWL -----END CERTIFICATE-----Generated at Sat May 31 17:53:10 2025 by rpki-client