$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json) Hash identifier: /mw++QG9ej5kV/RJn6iQqzwwfDD4apWpouUmim6pDxY= Subject key identifier: A4:80:0B:69:13:54:FB:2F:19:34:61:78:BB:65:01:6F:C7:47:B1:60 Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft Manifest number: AE Signing time: Sun 11 May 2025 04:52:23 +0000 Manifest this update: Sun 11 May 2025 04:52:23 +0000 Manifest next update: Sun 18 May 2025 04:52:23 +0000 Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: jg3slWFCc55vMUj7yWPLHBBOpFr1hFGl3ViOqjrK8C4=) 2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: RJoaBkivOrsbbGOk4+rF7GV3mPNikd+l5jkX1SaMaN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7 Validity Not Before: May 11 04:52:23 2025 GMT Not After : May 18 04:52:23 2025 GMT Subject: CN=68202d07-334c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:f0:d8:fb:c8:b2:d9:f3:17:9a:a1:39:70: 0c:91:40:c6:06:7d:50:83:54:a3:99:04:ea:8f:16: 8d:8e:79:28:78:e0:bd:3f:2a:73:1c:2b:27:99:45: e4:83:50:aa:c9:57:7b:90:35:f1:83:49:b4:66:9e: 9c:ef:5a:f0:1e:0a:69:02:c7:1d:03:6f:39:9a:a1: b4:e1:5d:3c:f4:67:f3:88:36:cd:a2:17:80:86:4a: 3a:7e:a7:62:a8:fa:55:29:dd:f2:8c:8a:03:7a:8c: c2:77:9a:d6:49:07:87:1a:54:1d:d1:f1:3f:66:62: d4:24:87:1c:0b:21:4b:fd:d8:29:8e:00:f9:19:f4: 68:be:5a:8a:15:e7:80:3b:ab:da:41:b3:ea:4f:71: e0:4a:66:90:61:f3:ee:c9:63:01:0d:59:26:42:9f: 96:c6:c6:32:2e:0f:19:85:a7:35:2c:67:c2:ff:73: d8:89:f2:f1:dc:f5:99:f3:32:54:35:f6:ad:86:8a: f0:22:b1:4c:78:27:b7:9d:00:f1:ab:c3:6a:9e:15: 22:97:3d:28:52:fd:51:96:11:f1:db:af:f9:4b:9c: a6:ee:b2:7e:08:8a:eb:92:8b:ff:1e:bb:b5:28:e2: 58:f3:03:4f:0b:58:43:b5:6d:1c:8a:ac:db:c4:4a: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:80:0B:69:13:54:FB:2F:19:34:61:78:BB:65:01:6F:C7:47:B1:60 X509v3 Authority Key Identifier: keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2b:58:99:99:6e:58:da:98:25:f7:d5:ee:fa:ee:69:7f:ca: 57:ad:ed:ad:dd:dd:c4:a0:a0:23:34:b2:e3:a4:46:19:c9:0d: 08:70:ca:fb:c0:9a:6a:50:ea:05:18:ef:f2:1e:d2:3f:70:4b: 73:49:0b:9e:b4:a8:06:92:da:fe:09:76:a7:51:9e:b3:45:2f: 78:9e:49:a1:e6:6f:64:6c:52:3e:04:d1:c8:b2:7d:44:9f:4a: 65:96:6e:10:f9:41:40:3c:79:ec:4f:5b:7d:12:78:cd:40:0b: 19:0e:8b:76:d1:1e:12:0f:6a:06:8b:0c:5c:91:57:a9:84:76: 8e:4e:50:43:91:2c:c6:e5:53:f3:30:58:fa:f0:22:d8:61:42: b6:2f:32:3f:6a:68:3a:60:6c:f2:ea:0d:bb:f3:5f:e4:a3:a5: 05:89:3e:8b:17:2e:29:bd:86:fb:37:7d:e4:ea:54:54:fe:53: b5:d9:a3:43:27:2d:54:a0:c6:54:e4:88:93:89:30:e0:bf:66: 00:b3:77:30:4b:95:7e:5d:3a:ae:32:96:0d:5f:6a:cf:64:e3: 93:c9:80:fd:6a:f4:3d:cb:f4:20:33:a5:1f:7f:99:6b:0f:ca: aa:96:e4:13:9c:35:65:34:5f:a6:be:5b:cd:96:c0:bd:74:8a: 98:ec:f8:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFRUIxMTAvBgNVBAUTKEE2MTk5NTBDQ0E2NDY0ODdBQjlCRDQ0QTQxRjdGNkM5 QjQwOUIzRDcwHhcNMjUwNTExMDQ1MjIzWhcNMjUwNTE4MDQ1MjIzWjAYMRYwFAYD VQQDEw02ODIwMmQwNy0zMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv7w2PvIstnzF5qhOXAMkUDGBn1Qg1SjmQTqjxaNjnkoeOC9PypzHCsnmUXk g1CqyVd7kDXxg0m0Zp6c71rwHgppAscdA285mqG04V089GfziDbNoheAhko6fqdi qPpVKd3yjIoDeozCd5rWSQeHGlQd0fE/ZmLUJIccCyFL/dgpjgD5GfRovlqKFeeA O6vaQbPqT3HgSmaQYfPuyWMBDVkmQp+WxsYyLg8Zhac1LGfC/3PYifLx3PWZ8zJU NfathorwIrFMeCe3nQDxq8NqnhUilz0oUv1RlhHx26/5S5ym7rJ+CIrrkov/Hru1 KOJY8wNPC1hDtW0ciqzbxEpbswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSAC2kT VPsvGTRheLtlAW/HR7FgMB8GA1UdIwQYMBaAFKYZlQzKZGSHq5vUSkH39sm0CbPX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEVFQi9GNDkxMTQ4MDJC QzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJZXJtOVJLUWZmMnliUUpz OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEVFQi9GNDkxMTQ4MDJCQzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJ ZXJtOVJLUWZmMnliUUpzOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKK1iZmW5Y2pgl99Xu+u5pf8pXre2t3d3EoKAjNLLjpEYZyQ0IcMr7 wJpqUOoFGO/yHtI/cEtzSQuetKgGktr+CXanUZ6zRS94nkmh5m9kbFI+BNHIsn1E n0pllm4Q+UFAPHnsT1t9EnjNQAsZDot20R4SD2oGiwxckVephHaOTlBDkSzG5VPz MFj68CLYYUK2LzI/amg6YGzy6g2781/ko6UFiT6LFy4pvYb7N33k6lRU/lO12aND Jy1UoMZU5IiTiTDgv2YAs3cwS5V+XTquMpYNX2rPZOOTyYD9avQ9y/QgM6Uff5lr D8qqluQTnDVlNF+mvlvNlsC9dIqY7Pin -----END CERTIFICATE-----Generated at Mon May 12 13:30:37 2025 by rpki-client