$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: Q1WtPqmU9bR4mJoGsFdEwrfA6Wh9SETiDS6n/laV5Qs= Subject key identifier: E9:1A:B8:E9:11:56:36:27:1E:10:77:41:C2:7A:6D:66:8D:2F:D1:21 Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 01D4 Signing time: Sat 31 May 2025 02:37:08 +0000 Manifest this update: Sat 31 May 2025 02:37:08 +0000 Manifest next update: Sat 07 Jun 2025 02:37:08 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: 0jx63aT/a0EtXsY8yWJTq388Q6cfbiu5ySNCGMpYcfU=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=) 3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: spR6GzQsviRpE5kB1PAg1GtPij2DNf/T1fZFU8oARv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Validity Not Before: May 31 02:37:08 2025 GMT Not After : Jun 7 02:37:08 2025 GMT Subject: CN=683a6b54-444f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:a5:99:8e:15:1d:e3:2f:85:96:cd:a0:22: 4b:7e:9b:93:82:47:23:4f:46:43:ba:8b:04:82:65: 57:12:8f:94:83:52:84:92:68:ca:69:af:23:9d:dc: 74:ff:ab:11:60:79:91:3a:46:81:0d:18:59:cf:14: 2f:52:9b:9d:52:14:63:80:28:11:0b:a6:1d:f5:8b: 04:d8:1a:c3:74:90:4f:2f:a7:7a:f2:e8:52:1c:09: f7:42:3d:cf:c9:3d:4d:90:ae:77:0c:72:de:94:f1: 35:f4:e0:9f:c3:7c:8f:6e:82:68:40:b1:81:6e:b6: 02:04:29:48:47:92:20:95:66:cf:9b:70:df:db:75: 21:97:c0:31:26:9a:27:e1:2c:a0:5a:88:39:9f:28: 9b:a4:ef:5f:ff:15:08:28:8f:fa:11:29:dc:0f:ca: b5:b4:94:43:b5:4b:ae:ab:e2:75:41:7a:83:7c:07: 8a:a0:e9:fa:25:e7:f5:5f:8a:72:7a:ee:98:4b:4d: 67:8a:93:48:c1:64:c4:d2:37:11:49:6d:9d:29:d1: 34:bc:c5:94:70:16:80:62:cc:6b:40:22:e5:e7:a8: 1c:e6:3a:08:47:16:04:50:c2:60:4b:fb:11:30:19: 1c:a5:d2:1c:38:67:f0:0a:06:0d:f5:b1:ed:86:eb: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1A:B8:E9:11:56:36:27:1E:10:77:41:C2:7A:6D:66:8D:2F:D1:21 X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:55:06:8e:ba:52:de:4c:53:c7:ed:07:05:ad:14:ac:ee:df: 11:39:bf:c4:c4:61:5e:24:07:7d:0d:6c:c7:27:88:9f:0b:6d: d6:5d:e0:53:dc:7c:82:c1:35:ac:0c:64:66:29:72:c5:60:df: 97:ee:d5:a8:27:87:cf:35:05:0f:9c:69:e2:3e:8f:cd:de:52: 91:0e:dc:02:29:12:97:80:ae:da:bc:97:87:b6:10:eb:12:3e: b2:da:29:23:73:56:59:77:ea:9d:7e:a9:6a:77:b2:99:e1:e1: 86:dd:1a:02:0e:76:f1:13:82:d2:02:3b:c2:37:e9:bd:a2:e1: 55:5e:95:75:24:30:47:68:58:9b:db:a4:66:6a:09:f3:bf:f6: d9:28:f8:40:0a:23:21:e1:92:7d:74:eb:bb:3f:37:e5:d2:f4: d2:64:c7:e3:9a:08:67:14:e0:ea:06:2d:be:fc:39:9f:d5:25: d5:1a:9d:7c:0c:d2:37:8f:78:64:61:4f:9b:01:2e:62:1a:db: c2:cf:2f:bc:9b:da:4e:e9:55:48:79:b0:96:f8:8f:58:41:70: 71:97:aa:44:4e:1b:cd:a1:e5:82:3b:45:ab:54:d4:ad:60:33: 03:7f:2a:f2:d6:fe:c3:02:24:9c:e6:4e:58:a8:5b:6f:47:03: 20:4a:51:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjUwNTMxMDIzNzA4WhcNMjUwNjA3MDIzNzA4WjAYMRYwFAYD VQQDEw02ODNhNmI1NC00NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBSlmY4VHeMvhZbNoCJLfpuTgkcjT0ZDuosEgmVXEo+Ug1KEkmjKaa8jndx0 /6sRYHmROkaBDRhZzxQvUpudUhRjgCgRC6Yd9YsE2BrDdJBPL6d68uhSHAn3Qj3P yT1NkK53DHLelPE19OCfw3yPboJoQLGBbrYCBClIR5IglWbPm3Df23Uhl8AxJpon 4SygWog5nyibpO9f/xUIKI/6ESncD8q1tJRDtUuuq+J1QXqDfAeKoOn6Jef1X4py eu6YS01nipNIwWTE0jcRSW2dKdE0vMWUcBaAYsxrQCLl56gc5joIRxYEUMJgS/sR MBkcpdIcOGfwCgYN9bHthuvmLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkauOkR VjYnHhB3QcJ6bWaNL9EhMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUVQaOulLeTFPH7QcFrRSs7t8ROb/ExGFeJAd9DWzHJ4ifC23WXeBT 3HyCwTWsDGRmKXLFYN+X7tWoJ4fPNQUPnGniPo/N3lKRDtwCKRKXgK7avJeHthDr Ej6y2ikjc1ZZd+qdfqlqd7KZ4eGG3RoCDnbxE4LSAjvCN+m9ouFVXpV1JDBHaFib 26Rmagnzv/bZKPhACiMh4ZJ9dOu7Pzfl0vTSZMfjmghnFODqBi2+/Dmf1SXVGp18 DNI3j3hkYU+bAS5iGtvCzy+8m9pO6VVIebCW+I9YQXBxl6pEThvNoeWCO0WrVNSt YDMDfyry1v7DAiSc5k5YqFtvRwMgSlEI -----END CERTIFICATE-----Generated at Sat May 31 17:27:51 2025 by rpki-client