$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: r1nVWifeHl/dgdvwOegLfqk2icPbehvMVQX/pGwZjQU= Subject key identifier: 2F:E0:1E:F3:4D:E7:B8:23:1E:5F:08:0F:9A:A7:18:AB:57:EA:71:FC Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0D99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0D84 Signing time: Mon 12 May 2025 17:50:52 +0000 Manifest this update: Mon 12 May 2025 17:50:51 +0000 Manifest next update: Mon 19 May 2025 17:50:51 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: utyrUmx+hdm1jIAdsHGs+IQBpODxwEb9Si6T7jchFaU=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3481 (0xd99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: May 12 17:50:51 2025 GMT Not After : May 19 17:50:51 2025 GMT Subject: CN=682234fb-6067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3a:f7:77:6a:69:c8:a4:cd:85:3c:3c:c9:75: a6:b1:0a:d4:c9:f3:74:d6:22:e9:1f:ca:34:25:91: a5:0c:42:77:30:05:f7:51:76:2b:e3:c2:d1:27:53: b1:f9:81:88:ab:4c:3e:97:bb:96:2e:6c:67:34:50: 5f:3a:2a:e8:fd:83:ce:31:c7:b5:7b:c1:10:aa:c9: 4e:26:b5:37:1d:62:56:c7:60:9e:ab:37:c1:a9:7b: 14:08:fe:11:5e:6b:90:99:19:ee:c7:45:a6:c0:aa: 24:31:39:e8:c2:15:c2:80:eb:4e:4b:9c:ef:2f:bd: 81:f0:bf:45:ea:ab:ef:da:34:40:54:33:bc:04:6e: 64:ea:e0:46:e8:0b:f1:0d:f9:3a:af:76:aa:ed:be: 69:82:7d:7d:89:bc:4c:2e:a7:93:b9:48:03:9a:7f: 7d:af:31:9c:77:4c:86:79:bc:4d:c9:39:d6:1b:0f: a3:21:04:ee:4e:54:45:93:a6:a4:72:01:2a:4c:c3: 80:8c:bf:6d:09:fe:4a:26:d1:06:74:d8:32:a6:77: 3c:e3:b4:52:5c:c0:2f:0e:ba:43:64:6a:15:1a:10: 08:b7:a2:2f:e9:62:d1:8e:ef:62:95:ae:97:69:93: ee:2e:75:95:d7:c0:c2:8f:8f:50:cb:89:72:3b:14: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E0:1E:F3:4D:E7:B8:23:1E:5F:08:0F:9A:A7:18:AB:57:EA:71:FC X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:74:ae:03:6b:44:d6:cf:b0:4b:95:2b:17:4b:e2:66:51:f5: c7:2f:a8:34:1e:35:93:2d:64:21:bd:15:23:24:0f:2b:f3:29: be:9f:20:86:b4:ec:d2:c9:64:94:8a:99:b4:b4:33:1e:e7:03: 44:b8:70:22:1a:9a:24:b2:5a:14:db:75:0a:77:c8:9c:72:c4: 52:f0:52:a9:d7:f0:e3:03:04:20:b6:a6:e7:d8:b8:ac:c4:13: c2:71:77:10:c3:3b:4f:52:8c:93:ae:72:f2:9d:9f:84:5e:2b: 60:e0:f4:68:f0:6f:05:0b:7d:cb:51:74:35:10:9d:e1:32:1f: 8b:4d:cf:cd:fd:94:c1:60:6a:17:f1:fc:c5:0a:79:f2:3d:34: 33:7a:1b:2f:93:aa:63:40:0b:7f:92:8d:99:96:15:93:dc:d2: 46:40:53:35:f6:8f:6e:10:51:a4:c6:bd:db:e3:be:23:56:88: 4c:8d:97:4c:49:5e:1f:06:2c:e0:62:87:57:b6:87:79:4b:0a: e8:9d:63:c1:84:5e:8b:5b:d9:ec:5d:58:14:aa:76:b7:16:cc: 0c:20:af:c5:3c:dc:ed:5e:14:08:55:a3:2f:b0:7c:90:31:03: 87:49:97:35:1d:51:c8:09:42:43:2d:bb:3a:5d:39:17:85:da: 10:18:93:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUwNTEyMTc1MDUxWhcNMjUwNTE5MTc1MDUxWjAYMRYwFAYD VQQDEw02ODIyMzRmYi02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zr3d2ppyKTNhTw8yXWmsQrUyfN01iLpH8o0JZGlDEJ3MAX3UXYr48LRJ1Ox +YGIq0w+l7uWLmxnNFBfOiro/YPOMce1e8EQqslOJrU3HWJWx2CeqzfBqXsUCP4R XmuQmRnux0WmwKokMTnowhXCgOtOS5zvL72B8L9F6qvv2jRAVDO8BG5k6uBG6Avx Dfk6r3aq7b5pgn19ibxMLqeTuUgDmn99rzGcd0yGebxNyTnWGw+jIQTuTlRFk6ak cgEqTMOAjL9tCf5KJtEGdNgypnc847RSXMAvDrpDZGoVGhAIt6Iv6WLRju9ila6X aZPuLnWV18DCj49Qy4lyOxSDoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/gHvNN 57gjHl8ID5qnGKtX6nH8MB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARdK4Da0TWz7BLlSsXS+JmUfXHL6g0HjWTLWQhvRUjJA8r8ym+nyCG tOzSyWSUipm0tDMe5wNEuHAiGpoksloU23UKd8iccsRS8FKp1/DjAwQgtqbn2Lis xBPCcXcQwztPUoyTrnLynZ+EXitg4PRo8G8FC33LUXQ1EJ3hMh+LTc/N/ZTBYGoX 8fzFCnnyPTQzehsvk6pjQAt/ko2ZlhWT3NJGQFM19o9uEFGkxr3b474jVohMjZdM SV4fBizgYodXtod5SwronWPBhF6LW9nsXVgUqna3FswMIK/FPNztXhQIVaMvsHyQ MQOHSZc1HVHICUJDLbs6XTkXhdoQGJP8 -----END CERTIFICATE-----Generated at Mon May 12 21:36:01 2025 by rpki-client