$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: YKVYIN233erK70vT0G83dUohBSaty1GGbHXO/AyYkec= Subject key identifier: 99:F7:E6:4D:5B:1C:0D:2C:F7:27:26:B3:13:21:03:A3:FF:64:5E:E0 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 118D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 1189 Signing time: Sat 10 May 2025 17:06:17 +0000 Manifest this update: Sat 10 May 2025 17:06:17 +0000 Manifest next update: Sat 17 May 2025 17:06:17 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: CAFH8TCBDLtGg7rmVJi6cFOJnHf3BL5lpIxsNZ36EeA=) 2: FEA22F60A5F111EF9C230280C4F9AE02.roa (hash: Jbt7n2ZRFDuS80TPLIamwTYwNZ2fv7lYVuWS7NZ1xLU=) 3: 113E8FC0A5F111EFABB09F7DC4F9AE02.roa (hash: jK4kVBYkhuumATZBB1rJMfMRjn7ETtAHz010Y63PbKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4493 (0x118d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: May 10 17:06:17 2025 GMT Not After : May 17 17:06:17 2025 GMT Subject: CN=681f8789-e6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7a:87:f7:e3:d7:31:fb:c1:ec:6e:25:ec:ea: d5:2c:e3:0c:17:89:44:5d:70:e5:e6:11:e5:63:ba: a4:99:3a:0e:01:6a:61:f4:5c:ed:fe:a0:3c:a7:c7: cb:b4:8b:40:a9:cf:df:93:e3:55:ee:43:ac:78:5c: f6:17:41:4d:b8:bf:77:64:84:cd:f5:de:9d:ba:0a: b0:b1:ae:88:08:c7:0e:8f:8e:ab:e0:a8:db:51:f4: f4:64:af:27:e5:53:54:ad:04:8f:12:e8:ed:dd:6c: e2:47:1a:14:8c:67:d2:df:4c:ad:3a:91:31:53:36: 94:b8:14:b6:c3:ed:2a:df:b4:ba:e4:cc:97:7f:6a: d2:eb:2d:22:83:e9:74:76:3b:41:c4:3e:ee:51:f8: 44:ef:5d:29:0d:c2:99:68:99:06:1e:e0:3f:05:26: 27:10:07:3c:e3:4c:49:cc:91:56:31:14:51:f3:2b: 16:e7:8c:d0:5c:3a:b4:c1:64:b6:2a:a9:82:fc:d0: ca:ef:27:65:64:12:f0:b9:17:42:bd:f5:4f:c3:44: 9a:2d:60:46:d9:a1:41:99:86:7b:4c:4c:10:52:47: 13:99:f7:73:11:78:8e:33:02:8b:69:82:67:fe:ef: d5:33:9e:2a:0c:5a:05:c8:b8:48:07:b3:4a:67:d5: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:E6:4D:5B:1C:0D:2C:F7:27:26:B3:13:21:03:A3:FF:64:5E:E0 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f9:6d:74:e6:4d:c1:4d:b6:05:c7:c3:c5:80:41:e0:bd:81: ab:c3:9a:d4:be:35:0f:f6:c9:b2:9d:4c:18:fe:e7:06:6e:3e: a9:f4:59:e2:fa:03:18:94:b0:79:c8:ed:a5:a9:24:39:1a:c6: 81:34:c9:dc:3e:c1:85:f2:b6:c0:63:45:76:e4:96:ce:0a:82: 0c:90:95:24:33:e7:53:09:48:fa:49:a2:ea:bc:95:0d:b1:66: 35:57:fe:e7:de:5c:d7:f6:19:57:fe:f5:e2:69:41:af:15:96: 7f:97:4b:b1:bd:e9:90:07:b1:74:c6:f4:28:5d:9a:85:2b:60: 9a:56:64:fe:38:0e:36:4c:e9:50:3e:38:b1:0c:b7:d9:04:2d: 70:16:5f:64:fa:cd:ed:4f:23:21:72:35:61:00:49:ff:41:ea: 49:18:2c:12:2b:aa:47:45:a7:55:90:93:83:53:fc:d7:da:aa: 1d:ed:a3:07:d0:72:f9:59:3f:0a:2d:ae:df:ef:aa:b5:3b:2e: 78:90:06:a5:28:c5:54:22:d2:b2:37:a3:1e:c2:85:0f:66:90: 10:95:d4:14:da:76:56:59:e4:db:9e:1b:c2:03:e9:1d:5f:e3: d6:3d:06:1d:ff:4b:1b:a1:5c:bd:d8:a7:2b:30:97:b5:fe:80: a0:f7:39:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNTEwMTcwNjE3WhcNMjUwNTE3MTcwNjE3WjAYMRYwFAYD VQQDEw02ODFmODc4OS1lNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+3qH9+PXMfvB7G4l7OrVLOMMF4lEXXDl5hHlY7qkmToOAWph9Fzt/qA8p8fL tItAqc/fk+NV7kOseFz2F0FNuL93ZITN9d6dugqwsa6ICMcOj46r4KjbUfT0ZK8n 5VNUrQSPEujt3WziRxoUjGfS30ytOpExUzaUuBS2w+0q37S65MyXf2rS6y0ig+l0 djtBxD7uUfhE710pDcKZaJkGHuA/BSYnEAc840xJzJFWMRRR8ysW54zQXDq0wWS2 KqmC/NDK7ydlZBLwuRdCvfVPw0SaLWBG2aFBmYZ7TEwQUkcTmfdzEXiOMwKLaYJn /u/VM54qDFoFyLhIB7NKZ9X+ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn35k1b HA0s9ycmsxMhA6P/ZF7gMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2+W105k3BTbYFx8PFgEHgvYGrw5rUvjUP9smynUwY/ucGbj6p9Fni +gMYlLB5yO2lqSQ5GsaBNMncPsGF8rbAY0V25JbOCoIMkJUkM+dTCUj6SaLqvJUN sWY1V/7n3lzX9hlX/vXiaUGvFZZ/l0uxvemQB7F0xvQoXZqFK2CaVmT+OA42TOlQ PjixDLfZBC1wFl9k+s3tTyMhcjVhAEn/QepJGCwSK6pHRadVkJODU/zX2qod7aMH 0HL5WT8KLa7f76q1Oy54kAalKMVUItKyN6MewoUPZpAQldQU2nZWWeTbnhvCA+kd X+PWPQYd/0sboVy92KcrMJe1/oCg9zlV -----END CERTIFICATE-----Generated at Sun May 11 18:52:19 2025 by rpki-client