$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: vKxshzuHwvPrkPZntG9OIGGRc3qCzPCPQ0ANMfCKqOQ= Subject key identifier: DE:5A:FE:C5:3D:DA:7F:81:4C:69:EF:93:27:13:1F:4B:B6:1C:BA:62 Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 0157 Signing time: Sat 31 May 2025 03:44:56 +0000 Manifest this update: Sat 31 May 2025 03:44:55 +0000 Manifest next update: Sat 07 Jun 2025 03:44:55 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: qtSb1i+gyBX6/c8iDkefueVIBi9PJOhJXFQ4KNtELuU=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: May 31 03:44:55 2025 GMT Not After : Jun 7 03:44:55 2025 GMT Subject: CN=683a7b38-d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:72:5f:08:15:c8:dd:c8:eb:f7:b1:dc:fc: c5:82:3e:b1:fc:56:2b:8b:20:ae:fc:78:a3:65:56: 3a:9d:5b:b9:c0:97:c5:c3:da:9c:f0:5e:a2:55:59: c2:18:8c:62:ff:88:fd:62:ac:66:e3:f5:3f:c1:45: d3:71:3d:1b:8a:39:e9:7a:7e:81:f8:76:e2:67:d7: 53:30:ea:d5:ff:4e:67:e2:1d:44:0d:93:38:8c:3f: 41:23:c1:33:ad:25:c8:46:eb:2e:ae:0b:38:89:2b: 58:75:0c:e6:91:43:15:e3:38:9c:6b:6b:15:87:ce: 2b:59:57:ef:19:af:19:6b:03:da:c8:21:99:da:8e: 2c:04:0e:8d:c6:cd:f9:c9:b1:01:29:6c:b5:08:7f: e9:e3:5f:1b:95:56:aa:4a:a3:66:eb:1d:98:ff:27: 02:fc:88:31:0e:af:a0:38:04:e3:53:29:b7:eb:39: b7:da:d2:e5:14:79:b8:90:0a:b7:06:a6:5a:28:92: c9:35:e3:12:69:6b:c8:7b:85:34:1a:2c:2e:5c:ec: e2:3a:33:8e:3d:ea:0e:92:21:86:f3:aa:6e:1a:d7: d0:9b:59:1d:3e:5f:e0:7a:5b:ae:36:50:37:d3:06: a9:ae:1a:a9:c7:48:d5:01:32:59:98:b1:e9:7a:99: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:FE:C5:3D:DA:7F:81:4C:69:EF:93:27:13:1F:4B:B6:1C:BA:62 X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fb:96:2e:a5:9a:d0:ca:04:5e:50:d4:38:16:52:17:4e:ef: 60:94:4a:d7:e8:87:9d:99:05:76:b6:8d:14:bb:8a:04:5c:ca: 79:14:16:42:7d:b9:11:2f:37:fa:13:f3:87:1b:58:a8:b1:d0: c3:0b:5f:cf:dc:6d:6b:a5:12:fd:6c:3c:3c:7a:c6:22:07:7e: bc:e2:2a:83:f8:44:63:24:86:de:de:36:d3:d9:96:d8:13:ce: a7:59:66:c2:97:47:ec:ba:b5:1a:a9:8e:45:fe:12:f6:3f:a0: 12:af:eb:52:39:fd:84:8e:ea:02:24:88:95:99:73:56:7c:51: 1e:0a:b9:82:08:13:ea:e7:b1:89:92:d5:0a:18:97:93:ae:1c: 47:1a:ec:99:e0:2d:5f:14:5f:b3:9b:5d:1a:35:83:a6:38:46: 95:3f:04:97:c8:77:a1:a2:42:37:31:d0:44:99:72:48:47:cf: a8:db:f8:03:f1:37:46:6b:b8:d9:4a:95:90:c8:60:b1:0e:da: 2e:d9:5d:e3:0a:8c:26:fe:97:55:69:0a:9b:95:0d:d7:e7:c0: 4a:03:0f:e6:d7:cc:de:82:16:e2:a7:01:ab:95:40:60:5a:29: e4:dc:20:92:f9:3c:5b:fb:aa:7f:6d:a2:66:6a:02:14:29:d1: bb:c1:29:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjUwNTMxMDM0NDU1WhcNMjUwNjA3MDM0NDU1WjAYMRYwFAYD VQQDEw02ODNhN2IzOC1kMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrtyXwgVyN3I6/ex3PzFgj6x/FYriyCu/HijZVY6nVu5wJfFw9qc8F6iVVnC GIxi/4j9Yqxm4/U/wUXTcT0bijnpen6B+HbiZ9dTMOrV/05n4h1EDZM4jD9BI8Ez rSXIRusurgs4iStYdQzmkUMV4zica2sVh84rWVfvGa8ZawPayCGZ2o4sBA6Nxs35 ybEBKWy1CH/p418blVaqSqNm6x2Y/ycC/IgxDq+gOATjUym36zm32tLlFHm4kAq3 BqZaKJLJNeMSaWvIe4U0GiwuXOziOjOOPeoOkiGG86puGtfQm1kdPl/geluuNlA3 0waprhqpx0jVATJZmLHpepkdVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5a/sU9 2n+BTGnvkycTH0u2HLpiMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX+5YupZrQygReUNQ4FlIXTu9glErX6IedmQV2to0Uu4oEXMp5FBZC fbkRLzf6E/OHG1iosdDDC1/P3G1rpRL9bDw8esYiB3684iqD+ERjJIbe3jbT2ZbY E86nWWbCl0fsurUaqY5F/hL2P6ASr+tSOf2EjuoCJIiVmXNWfFEeCrmCCBPq57GJ ktUKGJeTrhxHGuyZ4C1fFF+zm10aNYOmOEaVPwSXyHehokI3MdBEmXJIR8+o2/gD 8TdGa7jZSpWQyGCxDtou2V3jCowm/pdVaQqblQ3X58BKAw/m18zeghbipwGrlUBg Wink3CCS+Txb+6p/baJmagIUKdG7wSlZ -----END CERTIFICATE-----Generated at Sat May 31 15:11:17 2025 by rpki-client