$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: HWbBa3XGbKPRatFF1f07sxcigsk0MsDRLfB/5qp43R0= Subject key identifier: 41:C5:18:5B:B6:68:B6:E9:2C:47:73:60:A9:14:0D:95:C3:FC:17:DE Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 0102 Signing time: Mon 12 May 2025 23:21:17 +0000 Manifest this update: Mon 12 May 2025 23:21:16 +0000 Manifest next update: Mon 19 May 2025 23:21:16 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: ZxRo4uXKEodvI1zIEo/RBk7zA0Oudgs7IqD8lmkyY+w=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: tvLrXzmWLi+yYUfuM7mTXsSMiwGKfb5ZJS93I35M4zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: May 12 23:21:16 2025 GMT Not After : May 19 23:21:16 2025 GMT Subject: CN=6822826c-93da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:21:0e:35:9e:55:c3:75:36:cf:ae:0e:7d:c0: 55:ba:58:51:40:09:e7:98:72:8d:4e:23:d3:e4:29: 7f:b6:db:8f:9a:e3:73:08:dc:85:f6:76:a3:b5:15: 9a:7d:aa:2a:a3:e7:00:5f:4c:2d:fa:09:95:9e:fa: 26:01:89:24:4f:09:c7:15:07:a7:d0:88:84:28:7a: 7c:12:56:ae:37:88:90:06:81:b3:f2:d7:d5:d0:a0: 3b:e6:14:52:65:f2:ed:e7:63:f2:7d:0e:ae:fc:76: 62:65:c1:06:e1:25:00:1b:33:0f:c8:61:cb:9d:c4: 7e:6e:b2:75:08:7c:b3:43:46:21:75:98:3d:c2:08: ad:1e:88:56:29:5b:fa:28:f0:d1:10:f2:f2:7b:a4: aa:8a:fd:b7:71:a1:4c:63:34:89:5b:b7:79:11:27: 9b:45:b7:17:e3:28:2c:c0:28:e1:a3:76:72:84:33: 02:66:ea:96:ae:d7:35:3f:c7:74:e5:bc:9f:2b:ee: 2d:c7:af:26:a6:ef:3d:b1:2b:3e:62:00:6c:08:1d: e7:6d:69:0e:d4:85:89:41:ff:c3:17:26:66:53:4f: 54:4d:3d:5f:a7:9b:5c:df:3a:76:7c:fc:9c:9f:73: df:97:f1:6e:f4:1f:3c:70:f7:dd:c2:ac:2a:a7:2e: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C5:18:5B:B6:68:B6:E9:2C:47:73:60:A9:14:0D:95:C3:FC:17:DE X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:c6:fe:2f:64:f3:75:16:98:8a:0b:d4:df:90:fd:de:0d:81: 66:8e:82:5e:55:72:a0:6c:fc:0a:53:27:7f:2c:d0:58:db:9f: 0a:83:fd:60:66:87:df:28:8d:7e:95:19:17:d1:bc:cf:89:18: d8:f9:b9:07:a8:02:8c:c4:7d:6f:ad:36:8f:dd:50:e1:0e:ea: de:63:7b:09:21:68:3e:66:8d:ed:0e:5e:9b:81:cf:1f:6a:b1: b2:c8:6a:31:a1:f4:94:45:0f:fd:7a:54:fe:b9:bb:dc:28:0e: 8e:ff:94:e2:21:32:11:f2:b9:26:24:2b:9a:4c:03:65:bd:eb: 09:02:6d:8b:43:6f:f3:68:17:80:51:19:40:f7:cf:24:da:18: f9:ac:14:44:fa:67:62:b6:e5:e2:57:7b:87:74:bb:21:ac:32: e5:01:20:b5:90:f4:00:b0:38:73:59:f0:45:0b:7d:33:8b:a4: 49:9c:c8:50:3c:c2:b3:5c:6f:85:6d:0b:7d:be:5e:a5:27:4c: 7b:c8:55:9c:1f:7d:dd:51:2d:4a:fc:b2:3f:76:d7:72:1c:ce: df:d1:d6:1b:54:7c:24:8a:f1:f7:d5:af:fc:77:f7:c8:39:f5: b5:6a:12:c5:a7:34:84:09:96:d7:aa:6e:86:cc:29:08:fb:71: 24:8a:7e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjUwNTEyMjMyMTE2WhcNMjUwNTE5MjMyMTE2WjAYMRYwFAYD VQQDEw02ODIyODI2Yy05M2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iEONZ5Vw3U2z64OfcBVulhRQAnnmHKNTiPT5Cl/ttuPmuNzCNyF9najtRWa faoqo+cAX0wt+gmVnvomAYkkTwnHFQen0IiEKHp8ElauN4iQBoGz8tfV0KA75hRS ZfLt52PyfQ6u/HZiZcEG4SUAGzMPyGHLncR+brJ1CHyzQ0YhdZg9wgitHohWKVv6 KPDREPLye6Sqiv23caFMYzSJW7d5ESebRbcX4ygswCjho3ZyhDMCZuqWrtc1P8d0 5byfK+4tx68mpu89sSs+YgBsCB3nbWkO1IWJQf/DFyZmU09UTT1fp5tc3zp2fPyc n3Pfl/Fu9B88cPfdwqwqpy4pHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHFGFu2 aLbpLEdzYKkUDZXD/BfeMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIxv4vZPN1FpiKC9TfkP3eDYFmjoJeVXKgbPwKUyd/LNBY258Kg/1g ZoffKI1+lRkX0bzPiRjY+bkHqAKMxH1vrTaP3VDhDureY3sJIWg+Zo3tDl6bgc8f arGyyGoxofSURQ/9elT+ubvcKA6O/5TiITIR8rkmJCuaTANlvesJAm2LQ2/zaBeA URlA988k2hj5rBRE+mdituXiV3uHdLshrDLlASC1kPQAsDhzWfBFC30zi6RJnMhQ PMKzXG+FbQt9vl6lJ0x7yFWcH33dUS1K/LI/dtdyHM7f0dYbVHwkivH31a/8d/fI OfW1ahLFpzSECZbXqm6GzCkI+3Ekin60 -----END CERTIFICATE-----Generated at Wed May 14 14:56:15 2025 by rpki-client