$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: H7fErbbVrfc0kX2gmq/60n/7CmCGpVMBIy9SsjsPNQw= Subject key identifier: 6F:1A:8C:02:8D:A5:7E:BB:03:1A:C3:D2:84:D9:EC:58:B4:30:59:AF Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 351F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 34DA Signing time: Sat 31 May 2025 14:40:43 +0000 Manifest this update: Sat 31 May 2025 14:40:43 +0000 Manifest next update: Sat 07 Jun 2025 14:40:43 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: 0vVSgULbF7rqu4thcJ8/ETTcjPVe6S06lStf1xetJHo=) 2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: h9F1tXbUdsyNYFPUVJCB1ist/+nNZLk15lU+6OKai0c=) 3: 0537EDD4E37C11EA8C217816C4F9AE02.roa (hash: SqzEVckRy0F20kGZ/i2KdXyFceQ+W0O7xzAWCq702q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Validity Not Before: May 31 14:40:43 2025 GMT Not After : Jun 7 14:40:43 2025 GMT Subject: CN=683b14eb-7285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:5b:40:78:ea:f1:b3:5e:32:f5:28:64:03: c7:bd:17:e1:88:e7:37:4a:3a:b5:89:19:34:ff:a1: 63:f5:c3:23:1c:e2:36:79:7c:9c:89:24:21:c9:e6: c4:40:11:f4:46:ba:4a:82:12:68:31:ab:77:31:c8: 69:02:f4:f8:92:df:15:c8:53:04:e8:87:89:bb:c5: 2e:fb:1f:f7:0f:2c:d2:cd:b6:fa:04:78:0a:74:97: c7:1c:04:53:39:31:80:77:a1:11:03:35:2d:eb:50: 08:4d:ba:d9:59:50:7a:43:a7:73:56:e5:8c:46:a2: e7:32:9f:95:6b:47:32:1b:5b:86:ff:95:1f:0c:51: d0:97:19:68:8c:c4:f6:ea:8c:ea:14:aa:8e:7f:2c: 28:9f:5c:19:37:cf:8e:f2:97:56:30:bb:8b:0c:e1: a5:21:a4:7e:0b:de:dd:b3:92:8a:af:25:4a:a2:e6: cc:eb:1e:f0:f2:95:bd:fe:ec:7b:17:dc:72:e6:a0: da:44:bf:39:f0:4f:e2:ef:a4:63:50:7f:2a:bf:90: 79:90:52:ae:48:0a:17:40:aa:fa:f1:d6:e3:06:f6: 0e:c4:62:31:82:c3:9b:b6:51:64:7e:fb:d6:c0:a1: 72:b5:63:f1:3d:ab:40:e4:8d:02:0b:ed:04:cd:a9: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:8C:02:8D:A5:7E:BB:03:1A:C3:D2:84:D9:EC:58:B4:30:59:AF X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:57:75:c1:51:69:85:ca:0b:52:dd:30:dd:99:7c:60:27:29: c5:2f:14:27:d0:cd:32:27:09:51:b3:90:18:3e:1a:ca:90:cd: 6c:95:23:eb:34:4c:f3:4b:d7:c9:c5:66:66:ff:e7:d8:b4:a9: 52:28:85:e5:73:9a:05:d5:a1:bf:81:b7:1e:d9:2b:79:5a:ad: c7:02:b2:c2:1f:e0:f9:e3:c1:c5:be:d4:1d:4a:1f:b9:dd:0e: e3:9c:dc:0a:1a:a6:7e:bb:24:fa:25:5b:c3:c8:33:e3:ba:77: 36:e3:84:07:3f:f7:bb:62:2b:02:ef:db:84:72:8e:c8:4b:69: ce:56:72:39:53:41:c9:c6:5d:73:50:5b:d8:f3:51:e7:5c:c6: f2:5c:80:11:f3:12:db:79:e5:08:97:66:f5:b1:85:96:4b:ab: 63:6c:d6:8e:6f:2e:48:8a:51:4b:29:66:c1:b5:be:70:ee:df: df:01:c9:d3:9d:90:de:ee:6e:7c:06:33:6b:3d:3c:39:50:0f: aa:3e:08:8c:2a:71:0c:ac:93:10:ee:c6:be:fa:c2:48:8e:61: 8d:ee:c0:01:6d:0f:c3:8a:e9:30:94:41:4c:f1:0e:ba:8f:90: e0:a0:80:4f:73:3e:57:37:fb:43:46:35:47:08:fd:a8:a2:69: c3:35:4f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjUwNTMxMTQ0MDQzWhcNMjUwNjA3MTQ0MDQzWjAYMRYwFAYD VQQDEw02ODNiMTRlYi03Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmp5bQHjq8bNeMvUoZAPHvRfhiOc3Sjq1iRk0/6Fj9cMjHOI2eXyciSQhyebE QBH0RrpKghJoMat3MchpAvT4kt8VyFME6IeJu8Uu+x/3DyzSzbb6BHgKdJfHHART OTGAd6ERAzUt61AITbrZWVB6Q6dzVuWMRqLnMp+Va0cyG1uG/5UfDFHQlxlojMT2 6ozqFKqOfywon1wZN8+O8pdWMLuLDOGlIaR+C97ds5KKryVKoubM6x7w8pW9/ux7 F9xy5qDaRL858E/i76RjUH8qv5B5kFKuSAoXQKr68dbjBvYOxGIxgsObtlFkfvvW wKFytWPxPatA5I0CC+0EzalxfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8ajAKN pX67AxrD0oTZ7Fi0MFmvMB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6V3XBUWmFygtS3TDdmXxgJynFLxQn0M0yJwlRs5AYPhrKkM1slSPr NEzzS9fJxWZm/+fYtKlSKIXlc5oF1aG/gbce2St5Wq3HArLCH+D548HFvtQdSh+5 3Q7jnNwKGqZ+uyT6JVvDyDPjunc244QHP/e7YisC79uEco7IS2nOVnI5U0HJxl1z UFvY81HnXMbyXIAR8xLbeeUIl2b1sYWWS6tjbNaOby5IilFLKWbBtb5w7t/fAcnT nZDe7m58BjNrPTw5UA+qPgiMKnEMrJMQ7sa++sJIjmGN7sABbQ/DiukwlEFM8Q66 j5DgoIBPcz5XN/tDRjVHCP2oomnDNU8e -----END CERTIFICATE-----Generated at Sat May 31 16:43:59 2025 by rpki-client