$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft File: p93zVatoEjcBpb3RX2W6lktd4DU.mft (raw, json) Hash identifier: 2UXpC7K/ctXIydkBhfrLq8SxUDi1q5UgpdquexFEBm0= Subject key identifier: A2:9A:4D:C7:01:11:17:40:5C:D4:23:87:00:1E:A4:0E:A9:52:40:9D Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35 Certificate issuer: /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft Manifest number: 84 Signing time: Sat 31 May 2025 06:09:52 +0000 Manifest this update: Sat 31 May 2025 06:09:52 +0000 Manifest next update: Sat 07 Jun 2025 06:09:52 +0000 Files and hashes: 1: p93zVatoEjcBpb3RX2W6lktd4DU.crl (hash: TNhKv+2nmW1pPpqpnlGw5VkyQsxRoWmmbqjvBMCkBSc=) 2: 77BC7D3A74F411EF8B9E1067C4F9AE02.roa (hash: TnDDPyuYfLyHK//K+Hn8T0/qN9TuFXBURI4PhKRtzFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035 Validity Not Before: May 31 06:09:52 2025 GMT Not After : Jun 7 06:09:52 2025 GMT Subject: CN=683a9d30-86b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:67:82:8f:3b:e2:c9:d4:55:c9:be:93:67: ad:3e:cd:58:66:7d:1e:01:2d:b9:fe:2c:55:47:f2: b5:3a:e5:8f:6d:0d:86:05:1e:9e:d4:c4:a7:20:03: 87:25:d2:83:44:6a:c8:15:82:b7:f0:14:bd:02:75: 99:68:35:e7:35:ef:79:38:4c:8d:5f:bb:9f:8c:b6: ba:82:08:fe:b4:05:05:e6:94:c6:58:54:fc:68:02: 7f:27:79:e6:6a:78:98:39:b2:3d:f2:f4:aa:9b:7f: be:8c:fc:a5:0c:1a:a7:6d:c3:45:7c:14:d5:d8:29: 99:8b:c2:f6:20:f9:b4:5a:92:fe:fb:53:7c:08:79: 75:6d:59:a6:7e:6c:56:62:45:30:93:8f:34:cc:f4: df:8a:90:8b:1f:90:02:54:32:15:6a:e6:20:f7:f7: 41:85:af:61:6d:bf:13:09:a2:67:34:73:85:f7:35: ab:86:c9:fb:b8:90:94:c9:c8:f8:a5:0b:49:1b:c7: 2a:f9:dc:6a:05:9b:55:ec:37:ae:8e:2b:86:6e:ba: 2f:d7:16:f9:5b:bf:ad:ec:e6:2b:79:c4:82:31:10: 6f:8d:48:c2:ee:56:d5:7b:c2:e4:f2:35:e1:89:95: 63:84:37:00:0f:0b:99:05:4a:e8:5a:a6:5a:f7:33: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9A:4D:C7:01:11:17:40:5C:D4:23:87:00:1E:A4:0E:A9:52:40:9D X509v3 Authority Key Identifier: keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:21:9f:fc:e9:8b:e6:df:de:68:d9:91:f8:60:58:8d:7a:7b: 9f:98:cb:47:84:73:ab:8f:fd:ca:6c:bb:0f:36:f6:90:aa:6c: db:48:ad:32:a0:77:cb:d4:ac:b9:5b:0d:21:18:b9:2a:69:61: 95:52:d9:e0:d3:49:bc:b0:8e:d1:d2:cb:12:f6:59:94:06:b9: b0:52:44:cb:6f:87:f3:46:53:e0:72:98:1b:07:11:f4:6b:65: ec:03:6b:46:a7:f4:96:7f:06:64:78:09:3b:cf:90:21:36:38: e8:ba:cc:0b:72:78:3f:45:c9:58:16:06:e8:0b:04:13:3e:a2: e0:f8:17:2f:d8:29:bf:41:55:f9:fe:f7:b3:6e:6e:fa:cd:c1: 94:07:87:2e:88:52:ce:51:6d:63:f1:f9:54:62:95:37:ff:7f: a3:58:7c:54:62:71:d8:c4:a6:26:33:75:51:6a:50:bc:40:47: dd:10:ad:94:95:0c:23:28:49:de:25:27:38:b0:7e:9f:39:6f: 29:d6:c0:38:21:68:a6:f0:73:8c:ec:b1:35:ad:c9:3f:c7:6c: b9:2d:c5:4c:c8:70:81:c1:ac:cc:9b:7c:74:a3:10:f9:4f:9b: ff:82:0d:29:cb:a7:a9:f7:f2:3e:1a:4c:88:10:e8:14:29:e3: 89:d4:7a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBMUExMTAvBgNVBAUTKEE3RERGMzU1QUI2ODEyMzcwMUE1QkREMTVGNjVCQTk2 NEI1REUwMzUwHhcNMjUwNTMxMDYwOTUyWhcNMjUwNjA3MDYwOTUyWjAYMRYwFAYD VQQDEw02ODNhOWQzMC04NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXFngo874snUVcm+k2etPs1YZn0eAS25/ixVR/K1OuWPbQ2GBR6e1MSnIAOH JdKDRGrIFYK38BS9AnWZaDXnNe95OEyNX7ufjLa6ggj+tAUF5pTGWFT8aAJ/J3nm aniYObI98vSqm3++jPylDBqnbcNFfBTV2CmZi8L2IPm0WpL++1N8CHl1bVmmfmxW YkUwk480zPTfipCLH5ACVDIVauYg9/dBha9hbb8TCaJnNHOF9zWrhsn7uJCUycj4 pQtJG8cq+dxqBZtV7DeujiuGbrov1xb5W7+t7OYrecSCMRBvjUjC7lbVe8Lk8jXh iZVjhDcADwuZBUroWqZa9zMtLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKaTccB ERdAXNQjhwAepA6pUkCdMB8GA1UdIwQYMBaAFKfd81WraBI3AaW90V9lupZLXeA1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUExQS9DMkY0RUUyMDc0 QTYxMUVGQUU1NDc4M0NDNEY5QUUwMi9wOTN6VmF0b0VqY0JwYjNSWDJXNmxrdGQ0 RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5M3pWYXRvRWpjQnBiM1JYMlc2bGt0ZDREVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUExQS9DMkY0RUUyMDc0QTYxMUVGQUU1NDc4M0NDNEY5QUUwMi9wOTN6VmF0b0Vq Y0JwYjNSWDJXNmxrdGQ0RFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdIZ/86Yvm395o2ZH4YFiNenufmMtHhHOrj/3KbLsPNvaQqmzbSK0y oHfL1Ky5Ww0hGLkqaWGVUtng00m8sI7R0ssS9lmUBrmwUkTLb4fzRlPgcpgbBxH0 a2XsA2tGp/SWfwZkeAk7z5AhNjjouswLcng/RclYFgboCwQTPqLg+Bcv2Cm/QVX5 /vezbm76zcGUB4cuiFLOUW1j8flUYpU3/3+jWHxUYnHYxKYmM3VRalC8QEfdEK2U lQwjKEneJSc4sH6fOW8p1sA4IWim8HOM7LE1rck/x2y5LcVMyHCBwazMm3x0oxD5 T5v/gg0py6ep9/I+GkyIEOgUKeOJ1Ho3 -----END CERTIFICATE-----Generated at Sat May 31 17:06:25 2025 by rpki-client