$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: XS4b5i/jLVVAPWYLdYzfGqZZfVkRXw0eWWQl3dGeAzo= Subject key identifier: 14:41:C3:0E:ED:86:44:8A:78:F2:5B:E8:6A:9F:95:53:B9:29:C7:C6 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 013C Signing time: Sat 31 May 2025 04:01:55 +0000 Manifest this update: Sat 31 May 2025 04:01:55 +0000 Manifest next update: Sat 07 Jun 2025 04:01:55 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: DH+5YoMCCzKClXkq5qj3r+kAGxExLnuFriA65fhei3Y=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: May 31 04:01:55 2025 GMT Not After : Jun 7 04:01:55 2025 GMT Subject: CN=683a7f33-4fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:34:b7:ae:a6:82:ae:1c:2c:87:37:3a:a2: 37:83:f0:c4:e1:31:fa:fd:0b:a4:53:ba:bd:3b:b0: 4d:bb:a5:35:cc:42:f5:96:e4:ea:9b:c2:e5:f4:c6: ca:5d:b2:0d:fb:92:ac:23:e4:32:6d:b3:61:37:02: d1:8b:4a:72:39:a3:89:71:b7:dc:72:10:47:9f:71: 5e:40:08:54:ad:6c:88:3f:fa:7d:e9:4e:89:04:d5: 8f:2a:68:89:1b:ad:f1:37:1b:1b:da:ad:a1:eb:6f: a8:19:52:21:7b:97:7d:03:31:84:3a:da:70:b7:ef: 81:76:61:ac:1a:14:52:f2:8c:29:5e:66:26:9b:99: 69:d5:5b:61:a1:a0:9b:4a:81:77:ed:b6:07:5b:05: e9:96:70:c1:b4:9a:c7:f2:a0:b8:96:41:b4:47:ca: cf:c9:04:1e:00:7b:df:a1:a1:a0:80:6f:b1:89:13: f6:9a:06:56:29:fd:ff:d6:d8:09:db:e2:b9:b1:89: 2a:1b:35:4a:89:3a:72:9f:9d:3c:4b:b5:4b:ee:fa: f7:79:25:8e:19:1f:9b:84:b0:09:1a:a2:cc:b8:59: 16:5e:df:f7:a2:3c:d0:fe:c1:a4:7c:c3:0f:e4:b7: bf:0a:30:f0:30:cf:11:56:36:e1:8e:02:4e:84:90: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:C3:0E:ED:86:44:8A:78:F2:5B:E8:6A:9F:95:53:B9:29:C7:C6 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:91:8e:5c:cb:e1:f8:df:dc:c6:6f:c8:c3:9f:cc:3e:db:7d: 89:c0:12:ab:25:04:33:b0:f2:20:e1:d7:64:fd:22:e8:ca:17: c5:6d:95:4c:61:da:48:ba:68:5a:f1:8e:90:15:68:4f:8e:c1: 23:c4:c2:7d:98:74:63:1d:b2:57:11:68:98:87:f4:5b:e8:9f: 33:8c:64:a8:5c:18:3f:1b:0e:e5:56:73:69:0e:31:ee:19:8e: ee:65:79:4d:62:4e:be:0e:37:74:7d:83:7b:e3:8c:5d:2f:38: 4e:74:25:6a:e4:44:7f:63:91:89:13:36:8c:01:f6:e5:7e:fb: 41:e3:2a:f2:d4:29:d0:ef:1a:30:da:52:9d:93:99:12:e8:db: 23:df:fe:d6:81:8c:5d:93:af:61:d4:68:99:9f:89:92:4e:ea: 95:3f:0d:94:55:ee:8b:cb:0e:f9:39:dd:10:62:2a:88:fb:72: f3:11:58:d0:f2:02:c5:76:45:b2:55:6c:5e:8e:24:17:dc:3a: cd:94:09:b1:27:18:bc:d8:fd:44:4e:81:55:6a:36:5e:36:65: f2:cb:59:87:22:d4:21:30:e9:a9:20:10:0d:ee:ac:e8:44:4f: ed:80:70:1b:ef:f8:be:eb:31:17:2b:a0:ae:25:30:ed:62:f2: 2c:49:53:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwNTMxMDQwMTU1WhcNMjUwNjA3MDQwMTU1WjAYMRYwFAYD VQQDEw02ODNhN2YzMy00ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Mo0t66mgq4cLIc3OqI3g/DE4TH6/QukU7q9O7BNu6U1zEL1luTqm8Ll9MbK XbIN+5KsI+QybbNhNwLRi0pyOaOJcbfcchBHn3FeQAhUrWyIP/p96U6JBNWPKmiJ G63xNxsb2q2h62+oGVIhe5d9AzGEOtpwt++BdmGsGhRS8owpXmYmm5lp1VthoaCb SoF37bYHWwXplnDBtJrH8qC4lkG0R8rPyQQeAHvfoaGggG+xiRP2mgZWKf3/1tgJ 2+K5sYkqGzVKiTpyn508S7VL7vr3eSWOGR+bhLAJGqLMuFkWXt/3ojzQ/sGkfMMP 5Le/CjDwMM8RVjbhjgJOhJCtVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRBww7t hkSKePJb6GqflVO5KcfGMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYkY5cy+H439zGb8jDn8w+232JwBKrJQQzsPIg4ddk/SLoyhfFbZVM YdpIumha8Y6QFWhPjsEjxMJ9mHRjHbJXEWiYh/Rb6J8zjGSoXBg/Gw7lVnNpDjHu GY7uZXlNYk6+Djd0fYN744xdLzhOdCVq5ER/Y5GJEzaMAfblfvtB4yry1CnQ7xow 2lKdk5kS6Nsj3/7WgYxdk69h1GiZn4mSTuqVPw2UVe6Lyw75Od0QYiqI+3LzEVjQ 8gLFdkWyVWxejiQX3DrNlAmxJxi82P1EToFVajZeNmXyy1mHItQhMOmpIBAN7qzo RE/tgHAb7/i+6zEXK6CuJTDtYvIsSVNs -----END CERTIFICATE-----Generated at Sat May 31 17:03:29 2025 by rpki-client