$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: 9t5X4tnQxuXo7jKb88zlFcSN/7J7RBGLcQ/nZ4jJBpg= Subject key identifier: 9C:96:04:84:03:32:E7:5A:FB:99:D1:41:9B:DD:FF:A4:68:DD:B1:B5 Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 041E Signing time: Sat 10 May 2025 23:59:15 +0000 Manifest this update: Sat 10 May 2025 23:59:14 +0000 Manifest next update: Sat 17 May 2025 23:59:14 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: gpph9gSNr4Ji2s1d1kHI/KS0OrXfoF3O9OXYMphb0bg=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: x1o/7SXGT/4CedCgS5u41onm9GYNi5PSdU5ws280Sfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: May 10 23:59:14 2025 GMT Not After : May 17 23:59:14 2025 GMT Subject: CN=681fe853-eed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:76:04:0c:cc:df:95:bc:bb:20:8d:9c:e0: 9d:ad:44:09:20:0d:fe:ad:21:b9:2f:ea:df:dd:8c: 8a:2c:15:ef:90:8c:05:0c:8c:9f:ec:af:94:8a:df: 2f:e9:f8:53:f7:e2:4c:97:3b:82:aa:f1:f8:b5:1e: ae:0f:71:a6:49:e4:c7:0e:05:8b:32:c6:8b:a1:c6: 26:78:cd:ac:6c:7c:bb:10:50:a6:5f:68:f2:5a:95: 24:78:8f:eb:fa:75:cc:fc:54:c0:eb:a9:1a:56:30: bb:89:4f:53:4d:37:1c:80:78:77:33:ef:e1:7f:79: 62:78:a7:08:12:05:f4:13:ac:29:2f:f8:ce:42:7d: cc:9d:e8:c1:52:76:19:e3:69:44:4f:a0:eb:1d:20: 8e:46:69:3d:b1:2c:85:6d:b7:77:74:60:28:0a:83: c5:8d:90:1c:7b:d5:1e:55:d9:f4:d0:8d:11:5b:ec: ab:24:3d:d7:5b:40:52:33:4a:4b:57:1a:4b:f1:04: eb:06:e8:a1:9e:2b:69:39:45:ce:bb:22:c0:f0:31: d1:dd:dd:a7:b0:7e:e5:79:99:85:97:57:76:19:0c: 8c:14:d9:c3:fb:e3:45:1e:2d:f9:84:be:69:f8:47: 19:ac:6c:dc:c5:6b:27:a7:d9:3e:45:aa:a6:4f:8b: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:96:04:84:03:32:E7:5A:FB:99:D1:41:9B:DD:FF:A4:68:DD:B1:B5 X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d5:de:94:d1:4e:32:1f:eb:77:fa:9d:0f:ff:10:87:31:44: 2c:c9:17:0c:76:b8:6d:32:7d:2c:ec:14:59:97:c1:23:d3:bd: 7f:c9:12:2c:69:48:71:52:07:a3:4f:d4:d3:fe:1d:66:6d:92: 87:59:1e:f3:52:66:59:f6:b2:61:16:ab:f6:b3:36:57:ee:2f: 36:0d:88:b4:b7:ee:5b:82:e6:43:28:a7:7b:d4:54:f2:e9:eb: bb:4e:cc:3f:a9:dd:3b:eb:15:d2:11:b3:9c:cf:6e:74:2d:e4: 73:21:19:85:57:ef:ea:cc:4e:7f:ce:bf:c5:43:c7:40:c8:fa: be:47:21:08:60:36:6d:a8:7e:87:97:50:0e:0d:9d:70:eb:cd: 1f:0b:10:0e:ca:c0:8c:a2:70:57:c4:1e:fc:2c:5f:f8:1e:63: 28:eb:5a:09:5f:64:5b:e1:b3:28:f1:1f:8f:6c:f4:6a:e3:f3: 4b:9d:1b:05:a5:db:a4:b3:54:d8:43:9d:7f:d4:6a:63:e8:f4: 1f:0f:7a:3c:36:d2:4d:ce:15:23:fc:3b:15:45:49:59:41:66: df:db:db:a2:a7:e4:b8:4b:de:59:20:57:b0:e7:46:d4:83:c8: 60:02:4d:37:29:dd:17:a8:4c:cc:c3:db:97:df:0f:5b:d0:33: 1a:d3:94:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjUwNTEwMjM1OTE0WhcNMjUwNTE3MjM1OTE0WjAYMRYwFAYD VQQDEw02ODFmZTg1My1lZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvZ2BAzM35W8uyCNnOCdrUQJIA3+rSG5L+rf3YyKLBXvkIwFDIyf7K+Uit8v 6fhT9+JMlzuCqvH4tR6uD3GmSeTHDgWLMsaLocYmeM2sbHy7EFCmX2jyWpUkeI/r +nXM/FTA66kaVjC7iU9TTTccgHh3M+/hf3lieKcIEgX0E6wpL/jOQn3MnejBUnYZ 42lET6DrHSCORmk9sSyFbbd3dGAoCoPFjZAce9UeVdn00I0RW+yrJD3XW0BSM0pL VxpL8QTrBuihnitpOUXOuyLA8DHR3d2nsH7leZmFl1d2GQyMFNnD++NFHi35hL5p +EcZrGzcxWsnp9k+RaqmT4uZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyWBIQD Muda+5nRQZvd/6Ro3bG1MB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA71d6U0U4yH+t3+p0P/xCHMUQsyRcMdrhtMn0s7BRZl8Ej071/yRIs aUhxUgejT9TT/h1mbZKHWR7zUmZZ9rJhFqv2szZX7i82DYi0t+5bguZDKKd71FTy 6eu7Tsw/qd076xXSEbOcz250LeRzIRmFV+/qzE5/zr/FQ8dAyPq+RyEIYDZtqH6H l1AODZ1w680fCxAOysCMonBXxB78LF/4HmMo61oJX2Rb4bMo8R+PbPRq4/NLnRsF pduks1TYQ51/1Gpj6PQfD3o8NtJNzhUj/DsVRUlZQWbf29uip+S4S95ZIFew50bU g8hgAk03Kd0XqEzMw9uX3w9b0DMa05RP -----END CERTIFICATE-----Generated at Mon May 12 09:35:22 2025 by rpki-client