$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: 2MTTxgj/2w/PgVkq84dIQdeTq9u1V9nOSgRN6KRt5as= Subject key identifier: 88:18:BB:0B:86:A8:1C:C5:8A:20:D9:9C:73:3A:8C:DD:E9:F4:7F:FD Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 3484 Signing time: Sat 31 May 2025 15:02:08 +0000 Manifest this update: Sat 31 May 2025 15:02:08 +0000 Manifest next update: Sat 07 Jun 2025 15:02:08 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: wim+Lelmdf2SHUtXfuLQSe9zbB3cThS7pFOWNKRDHLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: May 31 15:02:08 2025 GMT Not After : Jun 7 15:02:08 2025 GMT Subject: CN=683b19f0-7001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:20:78:4c:cc:12:87:f8:18:f3:24:5e:04: 26:e7:17:a9:02:d8:07:47:ef:ea:82:0d:7f:8b:9b: 9e:23:61:91:42:00:e2:e6:df:c3:ec:7e:50:76:2a: a4:c2:6a:35:74:6a:e8:2e:50:d3:15:24:02:63:d8: 5d:b3:0b:dd:9a:a1:d6:26:fa:ae:ce:f5:a9:f8:c4: f0:2c:7e:e9:b4:7c:f8:17:a4:81:82:2a:a3:e7:fc: cf:fb:87:95:64:7f:87:de:c5:f0:62:b6:60:5e:cb: 58:0c:6c:aa:04:c3:9a:6f:9a:4e:43:2c:70:72:9d: 2f:c7:4d:57:00:78:58:d8:30:96:59:78:60:9d:e5: 1a:73:28:ef:9f:b2:34:99:f5:67:3a:64:43:83:eb: eb:88:21:94:26:cd:d5:f6:f8:1c:8b:d8:2b:bd:51: 16:b9:6b:59:4d:ba:a5:63:75:16:d0:1f:ab:8b:74: b8:c3:59:3f:96:ae:39:bb:05:c5:d5:ab:93:c4:55: 68:3a:28:a4:ca:2d:4b:02:d7:cb:dd:82:55:3d:e2: 87:3a:db:3f:e2:8b:4d:ab:0d:17:b7:34:d2:de:2b: 04:ed:f6:05:37:22:51:34:16:b4:5e:cf:b2:8c:db: 56:74:89:b5:98:e8:5c:27:25:0a:d4:87:e3:58:32: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:18:BB:0B:86:A8:1C:C5:8A:20:D9:9C:73:3A:8C:DD:E9:F4:7F:FD X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:22:1d:b5:79:0c:f8:f5:fc:c0:c7:2e:bf:67:a5:ac:2d:d7: 5b:aa:4a:99:8a:65:56:4a:e1:d4:bf:51:b6:a1:12:60:59:6b: 92:6b:88:6e:53:76:22:e2:a9:91:a7:c3:67:97:62:1e:e2:8e: 70:84:d1:e0:9c:22:c7:8a:1c:de:e5:12:d0:92:ac:ac:62:2e: 20:27:7c:fc:58:12:32:21:68:cb:a1:22:f3:55:0f:6e:c0:66: e1:80:04:2e:63:b2:3a:2c:fc:cf:94:a6:bc:59:25:10:38:98: b9:8b:06:ff:eb:76:8e:ae:8b:37:45:84:1a:1b:7e:e4:5f:42: 2f:4d:1a:8d:50:d0:55:bc:5c:d3:3e:28:99:1d:c7:4a:05:1d: 15:05:24:d8:a7:37:4c:7a:54:c8:47:ae:02:33:cd:a4:5a:cd: 1c:3b:eb:02:34:89:da:fe:08:c7:ea:21:fe:5e:09:0b:25:52: fe:9f:f1:7f:7f:ab:2b:1d:c3:dc:95:b6:b8:8c:b3:56:20:64: 0e:82:9f:d3:ea:7e:0c:b2:c1:13:28:13:0d:17:e2:b4:68:e8: 3d:77:a7:09:a9:57:fb:14:d7:21:1f:ab:3c:f9:98:be:f1:c3: 24:1d:3e:15:73:3d:66:4e:37:11:30:74:d4:c8:c0:04:1c:88: c6:42:e0:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUwNTMxMTUwMjA4WhcNMjUwNjA3MTUwMjA4WjAYMRYwFAYD VQQDEw02ODNiMTlmMC03MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqb4geEzMEof4GPMkXgQm5xepAtgHR+/qgg1/i5ueI2GRQgDi5t/D7H5Qdiqk wmo1dGroLlDTFSQCY9hdswvdmqHWJvquzvWp+MTwLH7ptHz4F6SBgiqj5/zP+4eV ZH+H3sXwYrZgXstYDGyqBMOab5pOQyxwcp0vx01XAHhY2DCWWXhgneUacyjvn7I0 mfVnOmRDg+vriCGUJs3V9vgci9grvVEWuWtZTbqlY3UW0B+ri3S4w1k/lq45uwXF 1auTxFVoOiikyi1LAtfL3YJVPeKHOts/4otNqw0XtzTS3isE7fYFNyJRNBa0Xs+y jNtWdIm1mOhcJyUK1IfjWDJwnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgYuwuG qBzFiiDZnHM6jN3p9H/9MB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJIh21eQz49fzAxy6/Z6WsLddbqkqZimVWSuHUv1G2oRJgWWuSa4hu U3Yi4qmRp8Nnl2Ie4o5whNHgnCLHihze5RLQkqysYi4gJ3z8WBIyIWjLoSLzVQ9u wGbhgAQuY7I6LPzPlKa8WSUQOJi5iwb/63aOros3RYQaG37kX0IvTRqNUNBVvFzT PiiZHcdKBR0VBSTYpzdMelTIR64CM82kWs0cO+sCNIna/gjH6iH+XgkLJVL+n/F/ f6srHcPclba4jLNWIGQOgp/T6n4MssETKBMNF+K0aOg9d6cJqVf7FNchH6s8+Zi+ 8cMkHT4Vcz1mTjcRMHTUyMAEHIjGQuBW -----END CERTIFICATE-----Generated at Sat May 31 16:52:11 2025 by rpki-client