$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft File: e_1dY_8gHxhzXBGACmL2pyeujBE.mft (raw, json) Hash identifier: ZHnI9H9qiTfTgI0VMPmLFtr6EnaNT3FnD2DDehDZzAg= Subject key identifier: D7:67:72:78:F2:A0:3C:61:74:90:29:B1:04:64:22:1A:33:0B:2A:9C Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 Certificate issuer: /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft Manifest number: 09FC Signing time: Fri 30 May 2025 20:03:29 +0000 Manifest this update: Fri 30 May 2025 20:03:28 +0000 Manifest next update: Fri 06 Jun 2025 20:03:28 +0000 Files and hashes: 1: e_1dY_8gHxhzXBGACmL2pyeujBE.crl (hash: n9Xm++uMkTTgKXZx+0p8bNLCnHpCVXPtMpaRNgVKUG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F3A, serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Validity Not Before: May 30 20:03:28 2025 GMT Not After : Jun 6 20:03:28 2025 GMT Subject: CN=683a0f11-d1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:30:48:1b:29:98:d2:5f:c7:1b:11:47:d3: 5c:23:e4:c2:a6:d4:e2:8b:b2:95:1c:8e:d2:c2:e2: 9d:b1:df:bf:89:ef:c1:9e:92:b8:42:7d:1b:76:fa: f9:5e:94:a7:07:e4:ce:19:e0:82:f7:f1:c7:c3:f6: 87:40:89:0d:eb:61:24:15:ab:e0:ec:b0:d3:70:0b: 14:7f:48:12:66:70:4a:0e:40:7b:8d:d0:28:5e:41: 50:80:d0:7f:77:14:c1:2b:e9:7d:69:4c:0a:d6:16: fe:d3:42:36:c8:a3:cc:38:e7:d7:b2:ae:bc:9c:87: c5:62:b0:d7:fc:02:73:08:b7:cf:bd:88:a4:f9:64: b4:cc:80:92:50:67:c3:e3:fc:e0:c0:b9:40:6c:88: 2c:65:10:ae:88:83:84:36:01:1b:1c:ad:e7:21:01: a0:6f:d5:3d:9d:13:e7:c0:61:ea:76:82:0e:58:ea: ae:fb:f0:06:e3:c9:17:86:76:ff:09:05:49:ba:ed: fb:30:35:a5:90:b6:80:4e:b3:d6:74:69:b5:0a:04: 6f:53:7f:ff:54:04:dd:b4:4c:78:3d:7d:cb:51:f4: 32:fe:ff:da:76:74:1d:3d:0f:f6:dc:a9:d6:cf:6b: 1f:6a:21:4d:cd:7d:1f:d2:88:d4:6f:47:2e:57:a2: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:72:78:F2:A0:3C:61:74:90:29:B1:04:64:22:1A:33:0B:2A:9C X509v3 Authority Key Identifier: keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:fe:45:3d:67:3d:a4:38:26:b8:85:49:98:39:1c:e2:cd:b3: 19:0b:02:b1:5a:7a:38:00:02:46:e9:67:9a:e6:e8:bd:41:29: 75:04:fb:90:26:25:bb:37:40:12:b6:7f:76:c9:bb:c9:25:96: 7d:9d:68:8d:e7:cd:cd:b2:e4:64:4e:49:ba:46:04:53:73:9d: 00:27:92:d4:3c:19:c4:c1:22:98:75:32:ed:31:88:d4:a3:51: 48:0f:99:c5:de:7d:36:2a:9a:25:e3:24:69:a3:1b:eb:0c:f1: ad:a4:b0:b7:c1:fd:5b:1e:64:30:e6:8d:cb:fd:8b:ea:d7:06: d4:f3:71:e2:b9:9c:c1:48:44:a9:9c:c2:38:f4:8e:f0:87:97: a1:14:eb:f4:56:7f:0a:1c:58:c9:b7:4e:6e:0c:96:f8:f9:71: a3:b6:5a:c5:e7:2e:34:8f:77:41:6a:04:be:c3:2a:0c:4f:ae: 33:67:a8:d5:e8:65:bf:79:73:dd:ab:8e:df:a7:a4:15:71:71: 1c:69:27:ff:b7:18:ce:13:bd:4a:ef:55:67:1f:b1:b7:7e:d7: a7:c2:fb:cd:bd:a7:5c:80:1a:4d:78:c2:24:0b:25:a1:cf:97: 68:24:12:e3:ae:48:e6:9a:76:d4:6d:30:d2:70:e1:39:1b:65: 6d:97:82:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGM0ExMTAvBgNVBAUTKDdCRkQ1RDYzRkYyMDFGMTg3MzVDMTE4MDBBNjJGNkE3 MjdBRThDMTEwHhcNMjUwNTMwMjAwMzI4WhcNMjUwNjA2MjAwMzI4WjAYMRYwFAYD VQQDEw02ODNhMGYxMS1kMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPQwSBspmNJfxxsRR9NcI+TCptTii7KVHI7SwuKdsd+/ie/BnpK4Qn0bdvr5 XpSnB+TOGeCC9/HHw/aHQIkN62EkFavg7LDTcAsUf0gSZnBKDkB7jdAoXkFQgNB/ dxTBK+l9aUwK1hb+00I2yKPMOOfXsq68nIfFYrDX/AJzCLfPvYik+WS0zICSUGfD 4/zgwLlAbIgsZRCuiIOENgEbHK3nIQGgb9U9nRPnwGHqdoIOWOqu+/AG48kXhnb/ CQVJuu37MDWlkLaATrPWdGm1CgRvU3//VATdtEx4PX3LUfQy/v/adnQdPQ/23KnW z2sfaiFNzX0f0ojUb0cuV6LdUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdncnjy oDxhdJApsQRkIhozCyqcMB8GA1UdIwQYMBaAFHv9XWP/IB8Yc1wRgApi9qcnrowR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0YzQS9BQjQyRTE2MDc4 OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4aHpYQkdBQ21MMnB5ZXVq QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfMWRZXzhnSHhoelhCR0FDbUwycHlldWpCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0YzQS9BQjQyRTE2MDc4OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4 aHpYQkdBQ21MMnB5ZXVqQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU/kU9Zz2kOCa4hUmYORzizbMZCwKxWno4AAJG6Wea5ui9QSl1BPuQ JiW7N0AStn92ybvJJZZ9nWiN583NsuRkTkm6RgRTc50AJ5LUPBnEwSKYdTLtMYjU o1FID5nF3n02Kpol4yRpoxvrDPGtpLC3wf1bHmQw5o3L/Yvq1wbU83HiuZzBSESp nMI49I7wh5ehFOv0Vn8KHFjJt05uDJb4+XGjtlrF5y40j3dBagS+wyoMT64zZ6jV 6GW/eXPdq47fp6QVcXEcaSf/txjOE71K71VnH7G3ftenwvvNvadcgBpNeMIkCyWh z5doJBLjrkjmmnbUbTDScOE5G2Vtl4KG -----END CERTIFICATE-----Generated at Sat May 31 17:12:52 2025 by rpki-client