$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft File: M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json) Hash identifier: Pl921g/kvFys9SDXdgpJ8ppG9j6TuZ4q/iTrtEbivmQ= Subject key identifier: 23:0E:63:A7:9D:F0:37:B2:0E:E7:84:49:4D:7A:68:1F:4C:42:0C:4D Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft Manifest number: 18 Signing time: Sat 31 May 2025 07:31:15 +0000 Manifest this update: Sat 31 May 2025 07:31:14 +0000 Manifest next update: Sat 07 Jun 2025 07:31:14 +0000 Files and hashes: 1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: h0SNLYlP0gNWm60joDF6Lp96bgN4dE7eluB2V3UI7PE=) 2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: dO3tBpPXfUSx2n1k3cMhWuGnqgEV9qYaUcicUOmxL84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Validity Not Before: May 31 07:31:14 2025 GMT Not After : Jun 7 07:31:14 2025 GMT Subject: CN=683ab043-540a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:7d:4e:61:26:e3:fe:65:e2:38:3d:96:5d: e3:3f:23:00:05:0a:a5:f1:b0:29:5e:5d:52:ec:ed: ad:32:de:86:02:4b:f8:97:97:65:9a:fa:94:23:76: 09:6b:ec:93:fa:e4:c4:78:f6:7d:b3:a1:c0:02:10: 4b:39:cc:a1:41:fa:ea:40:4d:df:a3:fc:f0:8d:69: 78:19:3a:21:85:23:2a:9b:57:3a:37:de:78:16:f2: f6:d6:1d:c9:55:4b:90:27:b7:2b:71:d4:7e:f2:d7: a9:d8:91:f9:67:2b:35:50:9d:83:67:65:b6:b9:85: ab:a2:32:c9:e8:8e:e2:17:de:54:89:63:1a:37:f7: 95:c8:74:24:0b:e2:44:62:bd:78:53:68:2a:94:db: 99:a5:2d:5f:dd:23:9e:96:d2:a4:0a:b6:ad:87:1b: 5f:d5:44:6c:5c:c4:a7:e4:53:15:85:ab:67:98:7b: b6:40:b4:67:5f:fa:26:2c:60:ab:95:0a:f7:c3:84: 42:f5:1f:15:9d:20:9e:b2:79:e4:da:86:dd:1c:68: ec:fc:28:4f:b2:83:c0:b4:b3:85:a4:29:79:3e:58: 18:18:b0:cc:ac:d9:fb:a2:c3:28:88:fb:df:4a:d8: 6a:a3:38:db:71:7d:8e:bb:d9:e7:37:30:d7:60:5e: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0E:63:A7:9D:F0:37:B2:0E:E7:84:49:4D:7A:68:1F:4C:42:0C:4D X509v3 Authority Key Identifier: keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:27:27:38:a2:3a:af:82:2c:55:40:9a:e4:fb:07:2d:fe:16: 11:a3:a0:5e:47:1f:09:bf:2d:8d:9a:92:07:90:e6:c2:2e:c4: a8:e7:d2:e5:d5:da:1a:b7:f4:8e:fa:c2:dc:19:91:18:5c:c1: 31:bb:09:ec:e0:89:18:fe:a4:1f:a9:6a:a7:11:f2:6c:cf:86: 83:b5:c1:19:d0:6f:2e:17:1a:da:af:1c:2d:43:84:2a:20:39: 10:21:ff:6c:fe:8a:4e:79:34:99:a8:bd:85:5b:e8:d8:d7:ff: 7e:ee:df:2c:0d:88:27:7e:b4:49:98:4c:1a:7f:65:1b:e7:e9: 54:75:ce:a1:73:be:95:a4:2f:ab:c3:3b:7f:26:91:8f:e4:75: a7:c3:a5:e7:69:85:f6:0e:6d:c1:e6:e8:de:c4:1a:66:56:5e: 74:b3:d5:a4:9b:a2:fe:76:3b:e8:54:5d:b6:9f:cc:dc:37:1d: 22:d6:a4:75:a0:a7:e7:f6:90:d3:c5:8d:5a:ff:a1:63:40:f8: af:71:a6:6d:63:0e:8c:82:5b:c6:cc:8d:af:67:b2:62:a0:75: 57:71:96:0b:2e:bb:cb:11:b4:2b:49:f3:a4:11:04:4f:cd:f8: 5f:08:4c:a6:44:42:66:c2:14:fd:2b:6f:9f:14:44:9a:bd:bf: 5b:13:aa:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDNGOTExMC8GA1UEBRMoMzM2MkFDNThFREIxODlDRjI1NzgzQzI3RDkwQTdEMkZB MzI5NzdDNTAeFw0yNTA1MzEwNzMxMTRaFw0yNTA2MDcwNzMxMTRaMBgxFjAUBgNV BAMTDTY4M2FiMDQzLTU0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQfX1OYSbj/mXiOD2WXeM/IwAFCqXxsCleXVLs7a0y3oYCS/iXl2Wa+pQjdglr 7JP65MR49n2zocACEEs5zKFB+upATd+j/PCNaXgZOiGFIyqbVzo33ngW8vbWHclV S5Antytx1H7y16nYkflnKzVQnYNnZba5hauiMsnojuIX3lSJYxo395XIdCQL4kRi vXhTaCqU25mlLV/dI56W0qQKtq2HG1/VRGxcxKfkUxWFq2eYe7ZAtGdf+iYsYKuV CvfDhEL1HxWdIJ6yeeTaht0caOz8KE+yg8C0s4WkKXk+WBgYsMys2fuiwyiI+99K 2GqjONtxfY672ec3MNdgXsF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIw5jp53w N7IO54RJTXpoH0xCDE0wHwYDVR0jBBgwFoAUM2KsWO2xic8leDwn2Qp9L6Mpd8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEM0Y5LzEyMjIzNkU2MThD NzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTJLc1dPMnhpYzhsZUR3bjJRcDlMNk1wZDhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE M0Y5LzEyMjIzNkU2MThDNzExRjA4MDU0MTc3RUM0RjlBRTAyL00yS3NXTzJ4aWM4 bGVEd24yUXA5TDZNcGQ4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4nJziiOq+CLFVAmuT7By3+FhGjoF5HHwm/LY2akgeQ5sIuxKjn0uXV 2hq39I76wtwZkRhcwTG7CezgiRj+pB+paqcR8mzPhoO1wRnQby4XGtqvHC1DhCog ORAh/2z+ik55NJmovYVb6NjX/37u3ywNiCd+tEmYTBp/ZRvn6VR1zqFzvpWkL6vD O38mkY/kdafDpedphfYObcHm6N7EGmZWXnSz1aSbov52O+hUXbafzNw3HSLWpHWg p+f2kNPFjVr/oWNA+K9xpm1jDoyCW8bMja9nsmKgdVdxlgsuu8sRtCtJ86QRBE/N +F8ITKZEQmbCFP0rb58URJq9v1sTqrI= -----END CERTIFICATE-----Generated at Sat May 31 17:06:27 2025 by rpki-client