$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: 9sJaPMoQUz+qqewubBMVm+n8w86SVvL/KdG3tjgOplY= Subject key identifier: 76:EB:C7:10:09:1A:95:56:C4:E8:6D:C4:D6:9A:1A:FC:AA:DE:B4:17 Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 05CC Signing time: Mon 12 May 2025 22:47:16 +0000 Manifest this update: Mon 12 May 2025 22:47:16 +0000 Manifest next update: Mon 19 May 2025 22:47:16 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: gaazLnrpoB08CdXUfFt71k4dSUPxUqXsoFsqX9zghbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: May 12 22:47:16 2025 GMT Not After : May 19 22:47:16 2025 GMT Subject: CN=68227a74-51bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:bb:fe:a0:3c:0d:37:cc:54:78:06:d9:9c: 48:af:60:ca:08:e0:61:1d:e9:c0:5d:5f:f2:37:ae: b1:ec:82:9f:86:6a:a7:cc:07:00:24:f8:37:52:86: 7d:c1:c8:4b:17:e3:5a:04:cb:b9:b2:01:4d:b8:6f: fb:bb:4b:17:a0:70:70:1c:4c:ad:61:cb:a5:f7:e6: 9f:45:3f:a4:31:0d:ca:bd:81:c6:86:95:c1:1a:8c: 53:37:56:37:f3:47:a6:87:f8:94:eb:5b:bd:bf:42: b0:61:cd:d2:c8:eb:14:78:e7:7b:54:a0:44:90:3d: 48:e2:e3:26:19:05:fe:9c:31:50:d1:e2:6c:3f:c7: fc:8e:5a:5d:ce:86:66:57:cb:36:44:34:6d:4f:7e: 5c:55:7b:77:4b:7e:b7:21:68:e7:f0:4c:24:a8:53: e9:11:e8:42:27:76:86:7e:b0:ed:36:c4:e8:18:08: 97:15:cc:30:51:ed:9e:49:0d:48:d5:df:76:09:41: 2d:50:5c:03:9b:0d:0d:65:16:df:3c:e1:a8:7a:46: 4b:6e:ae:58:1e:66:9f:0a:99:03:fc:fb:61:44:c6: 3b:25:b5:ac:55:ce:15:76:c3:ae:a7:0b:e8:2b:a1: 89:b6:fc:ef:0b:21:0f:1d:e1:c4:d4:3d:8f:e4:78: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EB:C7:10:09:1A:95:56:C4:E8:6D:C4:D6:9A:1A:FC:AA:DE:B4:17 X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:90:21:76:66:8f:ec:13:a7:ea:01:3d:51:20:50:06:57:ee: 9e:c9:d5:84:13:0b:09:c8:27:2c:6f:bf:2b:18:c4:f1:75:41: 07:dd:d7:6c:4f:e0:64:ff:d6:c1:4c:f1:04:62:29:f9:ed:88: 7a:90:69:ac:48:10:08:66:14:c8:8d:7c:20:31:43:a1:6d:59: e9:52:df:d6:94:bc:55:ce:85:12:12:75:74:7d:d9:3f:ae:61: e1:17:6f:4d:3d:f7:00:9f:ee:22:2d:63:89:26:c2:5f:22:3c: 3a:71:8c:77:de:6c:55:90:b4:37:a7:f2:3f:60:80:b7:a6:8b: cb:e1:b5:a1:a2:b6:c4:ca:9f:7e:3c:f2:c1:02:59:94:55:70: 94:2c:05:94:2a:7f:45:29:8d:a5:89:1d:75:ea:8e:33:86:05: dc:ae:62:74:73:9d:7d:47:c2:f0:4e:9a:67:e8:63:b9:5b:e8: 80:0e:ba:b1:3e:6a:7d:0f:c5:cc:a7:b1:be:67:93:65:7e:55: 40:cd:f2:63:aa:6f:53:56:8d:3b:d9:85:20:15:08:e6:7b:ff: 80:19:7d:50:33:6b:5f:e3:32:92:e6:ce:cb:9b:29:ee:88:f4: 0c:31:52:0c:a4:b6:d5:b3:c4:5d:7b:6d:48:6e:89:18:7b:36: d0:98:d1:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUwNTEyMjI0NzE2WhcNMjUwNTE5MjI0NzE2WjAYMRYwFAYD VQQDEw02ODIyN2E3NC01MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFS7/qA8DTfMVHgG2ZxIr2DKCOBhHenAXV/yN66x7IKfhmqnzAcAJPg3UoZ9 wchLF+NaBMu5sgFNuG/7u0sXoHBwHEytYcul9+afRT+kMQ3KvYHGhpXBGoxTN1Y3 80emh/iU61u9v0KwYc3SyOsUeOd7VKBEkD1I4uMmGQX+nDFQ0eJsP8f8jlpdzoZm V8s2RDRtT35cVXt3S363IWjn8EwkqFPpEehCJ3aGfrDtNsToGAiXFcwwUe2eSQ1I 1d92CUEtUFwDmw0NZRbfPOGoekZLbq5YHmafCpkD/PthRMY7JbWsVc4VdsOupwvo K6GJtvzvCyEPHeHE1D2P5HgO1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbrxxAJ GpVWxOhtxNaaGvyq3rQXMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4kCF2Zo/sE6fqAT1RIFAGV+6eydWEEwsJyCcsb78rGMTxdUEH3dds T+Bk/9bBTPEEYin57Yh6kGmsSBAIZhTIjXwgMUOhbVnpUt/WlLxVzoUSEnV0fdk/ rmHhF29NPfcAn+4iLWOJJsJfIjw6cYx33mxVkLQ3p/I/YIC3povL4bWhorbEyp9+ PPLBAlmUVXCULAWUKn9FKY2liR116o4zhgXcrmJ0c519R8LwTppn6GO5W+iADrqx Pmp9D8XMp7G+Z5NlflVAzfJjqm9TVo072YUgFQjme/+AGX1QM2tf4zKS5s7Lmynu iPQMMVIMpLbVs8Rde21IbokYezbQmNHI -----END CERTIFICATE-----Generated at Wed May 14 03:22:32 2025 by rpki-client