$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: +4oazRKwADAw7W3EWT27d/JeTovSjY0GssoRylwZ2U4= Subject key identifier: 58:9A:07:57:BC:7D:15:9E:B3:54:B4:9D:C5:07:01:4A:73:6F:84:E8 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 34B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 349A Signing time: Mon 12 May 2025 14:41:49 +0000 Manifest this update: Mon 12 May 2025 14:41:49 +0000 Manifest next update: Mon 19 May 2025 14:41:49 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 49nMSoGBOYiABjkpn8ETOA8LC5m7lwIXHtwgaQDwQfI=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: zqO+6+1m7aZm2JcpbyGs7JD55ITmH3KS8z593DQAnJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: May 12 14:41:49 2025 GMT Not After : May 19 14:41:49 2025 GMT Subject: CN=682208ad-e293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:0a:6c:50:e8:e4:6e:40:c1:e7:68:62:04: fa:0c:ad:29:83:54:54:3b:36:c7:55:3b:e2:97:05: 92:83:3e:ff:8b:71:ba:c4:1c:c0:1f:48:ca:ee:f0: 5c:19:ca:58:07:f9:0b:0d:5a:7c:bf:9e:08:e5:bc: 8e:b3:24:d1:64:fa:7e:b7:d6:8b:0b:e7:da:c6:7f: dc:b2:80:6e:e4:bb:d5:8e:83:a7:c7:b9:95:71:ea: ee:4f:67:ff:2c:8f:f6:60:30:1c:08:44:d0:5c:95: 07:04:b2:ca:f1:b3:0b:28:0f:84:a7:75:6c:44:fc: a3:2d:27:c0:ff:ba:17:64:42:be:ee:d5:e8:66:8f: 78:1a:2c:ce:04:0b:fc:d1:e9:15:03:b0:b1:6a:db: 92:9b:5c:84:8c:d8:98:d8:89:69:44:7e:b1:c0:47: 15:a2:23:06:38:6c:9f:8e:d0:62:72:f7:66:e9:ab: 27:a6:63:bd:0f:0e:5c:52:bb:b9:44:a6:fd:98:44: e4:3d:35:27:57:19:5d:8f:11:75:f0:bd:3d:d2:78: f9:5a:cc:b1:e2:28:7d:4b:3a:93:73:5c:05:9c:36: 7b:94:72:1e:80:18:17:fc:cb:2d:78:54:50:47:ef: c6:52:26:8d:26:76:6a:d2:ff:d7:8b:66:44:ee:0f: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9A:07:57:BC:7D:15:9E:B3:54:B4:9D:C5:07:01:4A:73:6F:84:E8 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7c:85:72:97:53:3c:33:9d:99:ec:2f:c4:1b:ac:7a:b9:6c: 4c:61:53:8d:8c:b4:62:7a:b2:11:2b:03:20:ff:08:6f:fe:d4: 19:12:01:87:c9:ae:79:99:f0:51:92:06:27:d5:a2:07:ca:a2: d9:50:2f:1c:e6:67:42:94:b9:1c:44:0d:59:14:b2:84:68:e2: a0:dc:6d:65:43:95:10:4f:3a:25:d8:54:23:07:82:4c:38:ee: 49:fa:74:b2:68:f3:54:53:eb:32:9f:b0:f8:cf:fd:77:35:8b: 90:39:ee:eb:be:99:00:ad:b8:52:d7:45:34:56:14:6e:2e:ce: f6:6d:1e:88:3d:8f:9f:cc:d7:0e:e7:de:6d:ff:32:d9:53:ae: e0:b5:49:dc:b3:1e:9d:1f:b3:56:d0:d1:9a:a2:f0:65:a8:90: 89:76:dd:64:e9:4c:b0:01:d1:1e:9d:1b:5a:70:a5:92:24:6c: c3:74:ae:ea:14:87:25:01:90:27:3b:72:37:5c:e6:5e:47:cf: 4a:d5:53:59:18:56:50:8d:dd:e8:81:0f:4b:78:c4:df:a1:e2: d4:82:01:79:ea:38:71:f4:fe:c9:83:70:40:d7:88:64:77:71: ef:7c:18:87:ff:26:56:d6:c1:fe:8e:e4:c1:5b:07:13:cb:88: d0:71:60:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUwNTEyMTQ0MTQ5WhcNMjUwNTE5MTQ0MTQ5WjAYMRYwFAYD VQQDEw02ODIyMDhhZC1lMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYgKbFDo5G5AwedoYgT6DK0pg1RUOzbHVTvilwWSgz7/i3G6xBzAH0jK7vBc GcpYB/kLDVp8v54I5byOsyTRZPp+t9aLC+faxn/csoBu5LvVjoOnx7mVceruT2f/ LI/2YDAcCETQXJUHBLLK8bMLKA+Ep3VsRPyjLSfA/7oXZEK+7tXoZo94GizOBAv8 0ekVA7CxatuSm1yEjNiY2IlpRH6xwEcVoiMGOGyfjtBicvdm6asnpmO9Dw5cUru5 RKb9mETkPTUnVxldjxF18L090nj5Wsyx4ih9SzqTc1wFnDZ7lHIegBgX/MsteFRQ R+/GUiaNJnZq0v/Xi2ZE7g++7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiaB1e8 fRWes1S0ncUHAUpzb4ToMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNfIVyl1M8M52Z7C/EG6x6uWxMYVONjLRierIRKwMg/whv/tQZEgGH ya55mfBRkgYn1aIHyqLZUC8c5mdClLkcRA1ZFLKEaOKg3G1lQ5UQTzol2FQjB4JM OO5J+nSyaPNUU+syn7D4z/13NYuQOe7rvpkArbhS10U0VhRuLs72bR6IPY+fzNcO 595t/zLZU67gtUncsx6dH7NW0NGaovBlqJCJdt1k6UywAdEenRtacKWSJGzDdK7q FIclAZAnO3I3XOZeR89K1VNZGFZQjd3ogQ9LeMTfoeLUggF56jhx9P7Jg3BA14hk d3HvfBiH/yZW1sH+juTBWwcTy4jQcWDy -----END CERTIFICATE-----Generated at Tue May 13 19:05:45 2025 by rpki-client