$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json) Hash identifier: rxdovMVY1BhZXxs0U6WMS6+7lfAbXKuN7SBipj+eHSE= Subject key identifier: 75:07:45:47:DD:74:C5:4C:28:A2:A6:6A:98:5E:42:52:F5:C7:E1:12 Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft Manifest number: 1254 Signing time: Fri 30 May 2025 19:23:47 +0000 Manifest this update: Fri 30 May 2025 19:23:47 +0000 Manifest next update: Fri 06 Jun 2025 19:23:47 +0000 Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: RDYagdiDYUmCUoi7NWz0h4CcY6lUJBNleeYwIH050QQ=) 2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 5XwqomZ9BLQ4EjKkc4C/QpwLGFRZM50AcN0fv78p3Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Validity Not Before: May 30 19:23:47 2025 GMT Not After : Jun 6 19:23:47 2025 GMT Subject: CN=683a05c3-5e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:ae:e3:7c:c2:32:1e:12:a1:73:f0:17:5c: 3c:ee:b8:a9:83:92:fa:cd:05:90:6d:bb:c5:3e:bd: e0:0c:a9:b3:ff:de:84:d3:a5:1d:0f:f1:7e:ae:c7: 1b:c3:0f:6a:9d:03:cb:ca:55:53:bc:01:f4:fc:d7: 30:23:b5:a1:d7:31:23:34:94:55:1b:89:95:00:54: 3a:ef:d1:48:2b:eb:e4:31:90:9a:e2:3a:f5:e3:aa: 70:ae:48:35:62:b5:2b:d2:d2:67:b7:4f:cd:83:f8: fd:44:ba:1c:68:5c:b2:e6:ee:2b:0e:5d:05:24:f9: 23:3c:1d:82:5b:a5:88:3e:9e:de:82:e6:c7:fb:ed: b2:26:47:f4:5d:89:d7:6e:70:ec:9f:f1:99:5a:fb: a5:a7:a4:49:cd:8f:6f:4f:77:92:c4:d3:e4:7a:11: a9:9d:2c:14:b5:5b:c9:c0:5c:ce:7a:0f:d5:ec:4d: 09:64:eb:04:f4:aa:1c:be:0f:a5:bc:85:58:53:3e: bb:3b:62:10:fa:2e:3a:87:49:18:75:7f:f1:18:e6: 3b:6a:79:5a:d2:e9:2e:5a:ea:14:28:cc:d2:f6:72: d9:ca:1a:7c:91:30:cd:86:fb:c5:ea:13:f4:61:0d: ed:32:4e:ef:53:7d:ee:4e:92:43:2f:9b:a0:9a:01: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:45:47:DD:74:C5:4C:28:A2:A6:6A:98:5E:42:52:F5:C7:E1:12 X509v3 Authority Key Identifier: keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5d:00:a4:0a:d9:97:94:aa:c5:ac:84:75:ce:48:e7:a9:11: e0:51:8d:ee:05:f7:e3:d8:19:da:e3:83:2a:49:51:3b:ad:e6: 33:40:71:2c:b2:9f:04:21:16:eb:fd:3e:0c:34:50:bd:e8:61: 47:20:84:e6:f7:39:a7:be:de:df:09:a5:b4:40:4e:52:ea:bd: 08:63:80:e1:49:60:2f:b5:66:c2:d5:98:70:71:39:45:35:bc: 55:93:4c:77:23:2b:36:d3:8a:67:37:f2:30:f3:fa:4c:8d:86: 50:56:15:85:b8:9a:08:1c:24:ba:1e:50:1c:44:56:7e:bf:7c: 20:93:de:98:9f:ce:ad:d0:35:b9:4c:0d:b2:a3:e3:59:d4:1e: 24:a5:df:d2:80:36:7a:2d:8d:7b:bc:69:52:96:d0:95:c9:21: 3d:8b:4b:85:d2:17:03:d0:1a:61:55:c6:7c:a2:d2:2c:f7:ed: c8:56:0e:ee:1c:d8:a4:67:90:1d:91:e8:1c:e9:d4:34:ce:52: a9:a1:4e:da:0b:4d:2a:61:e2:a9:21:c2:12:0f:a8:b0:c0:b1: f7:70:f2:75:82:cf:70:06:aa:60:2c:1d:7a:f8:02:82:98:d4: d9:72:70:e4:29:f2:93:bb:b3:11:1a:2b:e7:1e:22:00:4e:5d: 2e:0e:d3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx ODVGRDlDODUwHhcNMjUwNTMwMTkyMzQ3WhcNMjUwNjA2MTkyMzQ3WjAYMRYwFAYD VQQDEw02ODNhMDVjMy01ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rWu43zCMh4SoXPwF1w87ripg5L6zQWQbbvFPr3gDKmz/96E06UdD/F+rscb ww9qnQPLylVTvAH0/NcwI7Wh1zEjNJRVG4mVAFQ679FIK+vkMZCa4jr146pwrkg1 YrUr0tJnt0/Ng/j9RLocaFyy5u4rDl0FJPkjPB2CW6WIPp7egubH++2yJkf0XYnX bnDsn/GZWvulp6RJzY9vT3eSxNPkehGpnSwUtVvJwFzOeg/V7E0JZOsE9Kocvg+l vIVYUz67O2IQ+i46h0kYdX/xGOY7anla0ukuWuoUKMzS9nLZyhp8kTDNhvvF6hP0 YQ3tMk7vU33uTpJDL5ugmgH8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUHRUfd dMVMKKKmapheQlL1x+ESMB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfXQCkCtmXlKrFrIR1zkjnqRHgUY3uBffj2Bna44MqSVE7reYzQHEs sp8EIRbr/T4MNFC96GFHIITm9zmnvt7fCaW0QE5S6r0IY4DhSWAvtWbC1ZhwcTlF NbxVk0x3Iys204pnN/Iw8/pMjYZQVhWFuJoIHCS6HlAcRFZ+v3wgk96Yn86t0DW5 TA2yo+NZ1B4kpd/SgDZ6LY17vGlSltCVySE9i0uF0hcD0BphVcZ8otIs9+3IVg7u HNikZ5Adkegc6dQ0zlKpoU7aC00qYeKpIcISD6iwwLH3cPJ1gs9wBqpgLB16+AKC mNTZcnDkKfKTu7MRGivnHiIATl0uDtP7 -----END CERTIFICATE-----Generated at Sat May 31 17:14:35 2025 by rpki-client