$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: OctBQ41DwfhcYS3PNxoTqrZDRlD6LkVDkVex9TCTsdk= Subject key identifier: 78:15:9F:E5:EC:BE:9F:19:9E:E5:78:7E:22:AB:F0:86:03:83:53:4C Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 0131 Signing time: Tue 13 May 2025 03:43:22 +0000 Manifest this update: Tue 13 May 2025 03:43:21 +0000 Manifest next update: Tue 20 May 2025 03:43:21 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: EkrnfXPx2L0vpEo6p9EdTK7jXdKSBEpHG8yS0vIQdVk=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: 9QttLF7HMnJDx+HbQAXC0YtWXOJ+pz+cgouITeRm1GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: May 13 03:43:21 2025 GMT Not After : May 20 03:43:21 2025 GMT Subject: CN=6822bfd9-5a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:ab:a3:0a:11:e2:92:2d:da:b8:d6:81:30: ec:67:3f:97:ee:87:44:8f:ee:4f:63:59:08:47:27: e9:7a:27:82:83:4b:f3:48:64:2e:bd:85:64:0e:a2: 7f:65:c5:c4:67:8d:29:05:63:5d:11:99:98:b1:33: 8d:90:93:11:32:a2:59:84:51:f6:de:44:8a:22:27: e5:ad:e2:f7:fe:24:f7:c4:06:30:29:01:26:54:19: 1e:09:e3:2f:ac:fc:43:10:8b:00:b7:c6:aa:fb:69: 1c:01:0f:77:80:9c:0d:94:57:3e:c9:fc:3f:e8:3c: 26:6e:0c:43:c6:4e:fd:bb:76:04:ed:2c:8f:dd:27: 49:74:fa:35:09:9b:1d:db:e8:6b:61:e1:02:96:4e: ee:8a:b3:56:e7:34:4e:c8:b8:48:95:08:ba:62:bb: 91:a1:e3:2a:23:48:7d:d7:75:24:18:f3:07:77:92: 7f:85:38:dc:3e:84:4e:c8:be:11:32:a1:41:3c:11: db:92:a9:98:85:c8:22:dc:67:62:95:2d:2f:10:66: 43:0c:2e:55:d1:b1:c5:f6:fd:9f:51:db:a4:e4:aa: 77:49:81:91:8c:16:13:00:9a:ce:58:24:0c:b2:29: 8c:ff:49:ff:7c:6b:b8:b7:62:24:ee:b4:72:f4:d5: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:15:9F:E5:EC:BE:9F:19:9E:E5:78:7E:22:AB:F0:86:03:83:53:4C X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:06:64:49:60:28:fe:10:91:f9:b6:16:b8:51:84:e1:38:7b: e0:21:40:87:40:9c:6d:cd:ed:00:df:cc:6c:85:61:53:a6:0c: 52:e7:fa:dd:ca:2b:e7:1a:b5:3a:db:9f:bf:2b:44:2c:cd:18: 4b:e7:86:4a:af:91:08:53:e2:82:45:b1:1d:9e:5b:13:99:90: 45:0c:26:f0:de:ab:f5:c5:40:47:ab:9b:1a:d5:49:c5:6e:95: d8:f9:36:14:c3:e5:d6:48:6b:98:d3:2c:2f:0f:5d:1c:dd:60: cb:4e:17:88:27:e6:b9:23:13:9b:49:55:75:eb:0d:bd:57:f6: e3:e2:7b:4d:0b:eb:27:ad:87:cd:fb:de:a5:a9:6c:3e:6f:7a: 04:5f:99:a4:d5:2c:b8:d1:28:46:4b:66:d5:f1:cb:65:c8:44: 3a:d6:32:51:c8:5d:d6:e6:b7:2d:c0:02:2a:9a:82:29:5b:7c: 4f:ea:aa:7d:d4:5f:a7:fa:8a:63:27:f5:d6:5e:28:e1:00:4b: ee:c5:ad:aa:95:8e:96:75:a6:44:de:22:2e:24:33:3d:db:3d: ba:db:59:21:b0:35:b4:36:a2:1b:15:66:09:f2:55:af:fe:e1: 12:95:39:1d:1d:3b:f9:42:ca:4e:48:49:3e:09:72:ea:35:35: 79:dd:ba:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjUwNTEzMDM0MzIxWhcNMjUwNTIwMDM0MzIxWjAYMRYwFAYD VQQDEw02ODIyYmZkOS01YThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+mrowoR4pIt2rjWgTDsZz+X7odEj+5PY1kIRyfpeieCg0vzSGQuvYVkDqJ/ ZcXEZ40pBWNdEZmYsTONkJMRMqJZhFH23kSKIiflreL3/iT3xAYwKQEmVBkeCeMv rPxDEIsAt8aq+2kcAQ93gJwNlFc+yfw/6DwmbgxDxk79u3YE7SyP3SdJdPo1CZsd 2+hrYeEClk7uirNW5zROyLhIlQi6YruRoeMqI0h913UkGPMHd5J/hTjcPoROyL4R MqFBPBHbkqmYhcgi3GdilS0vEGZDDC5V0bHF9v2fUduk5Kp3SYGRjBYTAJrOWCQM simM/0n/fGu4t2Ik7rRy9NXNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgVn+Xs vp8ZnuV4fiKr8IYDg1NMMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2BmRJYCj+EJH5tha4UYThOHvgIUCHQJxtze0A38xshWFTpgxS5/rd yivnGrU625+/K0QszRhL54ZKr5EIU+KCRbEdnlsTmZBFDCbw3qv1xUBHq5sa1UnF bpXY+TYUw+XWSGuY0ywvD10c3WDLTheIJ+a5IxObSVV16w29V/bj4ntNC+snrYfN +96lqWw+b3oEX5mk1Sy40ShGS2bV8ctlyEQ61jJRyF3W5rctwAIqmoIpW3xP6qp9 1F+n+opjJ/XWXijhAEvuxa2qlY6WdaZE3iIuJDM92z2621khsDW0NqIbFWYJ8lWv /uESlTkdHTv5QspOSEk+CXLqNTV53boc -----END CERTIFICATE-----Generated at Thu May 15 00:11:35 2025 by rpki-client