$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: EZmQYuai69fnDjMHWlEizYpQtq4gLQzn4qwnGtrtCVA= Subject key identifier: 9A:D0:C4:65:85:76:D9:04:9E:BA:DF:FF:3F:83:2D:3F:86:82:54:57 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1EF9 Signing time: Sat 10 May 2025 15:57:54 +0000 Manifest this update: Sat 10 May 2025 15:57:54 +0000 Manifest next update: Sat 17 May 2025 15:57:54 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: 5MVsIMueLrykHdU+bs+PAkWjOMCj5S1FRXDreZgBZF0=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7945 (0x1f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: May 10 15:57:54 2025 GMT Not After : May 17 15:57:54 2025 GMT Subject: CN=681f7782-154d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:ce:97:52:91:c6:80:c7:75:fd:f1:7b:29: 0c:2b:e4:31:78:95:40:24:3f:3f:9d:d3:b2:38:09: 75:6a:ba:14:88:4c:6d:84:9a:92:30:f0:5e:36:ab: cb:fa:83:9c:8c:a7:cc:4a:dd:9f:07:75:ea:17:f6: 17:6a:1c:8e:c4:9e:23:8c:33:d0:a0:fe:15:85:1f: b0:40:55:b2:df:63:7d:11:32:90:00:b6:53:4e:f9: 9a:e4:02:d5:a2:3b:16:1e:98:45:6b:f4:5d:ac:7a: 91:c3:49:6c:d6:a1:d8:a9:27:6f:75:99:94:2e:5e: 2b:b0:09:51:c0:3e:a3:9e:bd:1e:fb:8a:50:d4:0b: 63:de:a0:3a:73:bc:ff:e5:f5:c6:08:72:81:f6:a8: 01:5f:7f:92:cf:eb:a8:06:d2:cc:a7:27:4d:ea:47: 14:a8:08:7b:03:95:c0:98:1b:47:63:8c:1f:b6:03: 23:42:b4:ab:1f:40:f6:6e:72:87:00:3b:17:12:68: d0:7a:6a:4c:26:2a:7e:35:2f:77:94:91:54:5f:e1: 77:ed:6b:ba:fa:e3:41:be:48:29:d7:06:4e:e1:15: 79:19:68:4d:2b:6f:bf:a3:d4:78:f5:98:75:91:48: 6b:c3:d2:14:2b:6b:e9:dd:8a:02:03:79:c2:1f:fd: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D0:C4:65:85:76:D9:04:9E:BA:DF:FF:3F:83:2D:3F:86:82:54:57 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:87:34:47:50:75:a6:03:77:2e:59:75:f7:41:e2:ed:23:e0: 80:1f:2c:91:32:23:d8:72:90:af:ac:e7:73:0d:ee:89:87:99: 0a:24:0f:ac:29:28:87:45:24:3a:49:75:64:15:68:f5:2e:10: e3:84:99:99:1e:c6:2a:fb:02:39:4e:77:95:11:c0:93:ee:fa: fb:25:76:6f:d9:7b:19:67:bb:6e:e9:72:20:56:02:39:af:2f: 34:77:aa:6c:f1:8e:c3:51:31:5b:a4:8e:10:c3:bb:b9:6e:ab: e5:05:6a:ae:66:42:e9:a5:60:5d:a5:6c:dc:2e:d5:ce:a3:8d: 21:3b:41:96:cb:c2:1b:8c:03:5e:7f:6f:7b:1b:46:fe:fb:b8: 0a:f2:46:32:89:23:00:04:57:85:c6:cb:cb:29:9e:7f:cd:26: 06:ba:26:87:d7:03:18:1e:de:b8:13:2b:15:68:ee:d9:9b:a4: 03:fb:72:d5:1d:e2:9b:52:9a:e9:ad:7f:c4:c8:a3:6d:8d:e9: 41:2c:7b:d3:74:ea:92:d4:88:43:e3:af:49:5b:fb:0e:b4:b9: 64:f9:16:3d:13:e0:b5:2d:ca:7c:32:01:b9:51:f8:86:b1:0d: 7f:c5:7a:c7:94:4d:4f:c3:86:37:69:85:e4:2d:b9:ce:d4:97: 13:cc:a2:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUwNTEwMTU1NzU0WhcNMjUwNTE3MTU1NzU0WjAYMRYwFAYD VQQDEw02ODFmNzc4Mi0xNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyrOl1KRxoDHdf3xeykMK+QxeJVAJD8/ndOyOAl1aroUiExthJqSMPBeNqvL +oOcjKfMSt2fB3XqF/YXahyOxJ4jjDPQoP4VhR+wQFWy32N9ETKQALZTTvma5ALV ojsWHphFa/RdrHqRw0ls1qHYqSdvdZmULl4rsAlRwD6jnr0e+4pQ1Atj3qA6c7z/ 5fXGCHKB9qgBX3+Sz+uoBtLMpydN6kcUqAh7A5XAmBtHY4wftgMjQrSrH0D2bnKH ADsXEmjQempMJip+NS93lJFUX+F37Wu6+uNBvkgp1wZO4RV5GWhNK2+/o9R49Zh1 kUhrw9IUK2vp3YoCA3nCH/2gBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrQxGWF dtkEnrrf/z+DLT+GglRXMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4hzRHUHWmA3cuWXX3QeLtI+CAHyyRMiPYcpCvrOdzDe6Jh5kKJA+s KSiHRSQ6SXVkFWj1LhDjhJmZHsYq+wI5TneVEcCT7vr7JXZv2XsZZ7tu6XIgVgI5 ry80d6ps8Y7DUTFbpI4Qw7u5bqvlBWquZkLppWBdpWzcLtXOo40hO0GWy8IbjANe f297G0b++7gK8kYyiSMABFeFxsvLKZ5/zSYGuiaH1wMYHt64EysVaO7Zm6QD+3LV HeKbUprprX/EyKNtjelBLHvTdOqS1IhD469JW/sOtLlk+RY9E+C1Lcp8MgG5UfiG sQ1/xXrHlE1Pw4Y3aYXkLbnO1JcTzKIY -----END CERTIFICATE-----Generated at Sun May 11 22:17:26 2025 by rpki-client