$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json) Hash identifier: djumgyi05V1iyBMy7+lx38XC3NLPFJq2rDQWEzXTOgg= Subject key identifier: F1:1E:FE:C4:9F:6A:EB:A3:E1:6E:02:1B:3D:18:24:FF:33:B8:9D:0D Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft Manifest number: 0124 Signing time: Wed 14 May 2025 15:33:41 +0000 Manifest this update: Wed 14 May 2025 15:33:40 +0000 Manifest next update: Wed 21 May 2025 15:33:40 +0000 Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: TG4fWV9nJh3GLVsNmuSeg+h7cMkPfPqjXN9lAsPTniI=) 2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 4RQI+EFj/mJJo3iDsYdl0ustKcpifsqTMWOHIgjxyFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: May 14 15:33:40 2025 GMT Not After : May 21 15:33:40 2025 GMT Subject: CN=6824b7d4-b221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:ba:52:d6:ea:21:a5:4d:f4:b3:46:28:a1: 96:17:7f:fc:d4:4d:64:7f:8c:80:a5:3f:aa:d8:18: db:9e:4f:d3:53:a8:d1:2f:6c:a1:05:bf:44:41:ec: e1:e0:c7:aa:9a:31:dd:e1:d8:5d:18:83:85:da:13: f8:42:c1:0b:16:dd:5e:17:df:92:3c:0b:55:f4:f8: bf:3f:69:d9:f5:a9:05:73:69:c0:fa:c7:50:8c:76: 8c:ca:02:bf:cf:4e:ab:a3:49:91:46:e3:11:cd:b9: ab:2a:13:25:d7:e4:9a:44:92:da:53:b2:4a:d9:d8: 37:36:4e:b6:58:6e:92:03:70:7b:07:f3:a3:72:4d: 67:f1:17:46:d5:86:aa:f5:3a:ca:23:4b:24:e1:25: d5:d1:08:7a:9f:99:83:67:ca:d2:fc:4a:55:2e:e9: ee:03:74:0f:ea:b2:f3:9c:90:2a:95:1d:f9:7e:46: a0:d2:0b:55:fb:aa:67:80:c7:dc:b7:ed:90:c6:f8: 4d:a4:57:ab:24:71:60:17:0a:d6:46:bd:17:19:e7: 92:28:d7:60:82:83:32:dc:16:39:c0:e7:b4:c1:43: 53:54:19:98:65:6d:a4:6d:34:30:e1:0a:0d:ed:36: 27:4a:fc:1a:b7:53:97:50:1f:6b:03:fe:2a:b7:19: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1E:FE:C4:9F:6A:EB:A3:E1:6E:02:1B:3D:18:24:FF:33:B8:9D:0D X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c1:60:75:b4:fe:b0:f4:f0:0c:66:f0:b5:be:4e:4e:8c:6a: a1:43:94:20:02:c0:e0:3e:d5:f2:43:40:48:3c:54:14:75:6e: 58:ed:46:81:05:29:e9:48:ac:b2:a8:4f:1b:91:99:e7:d2:ef: c1:5b:78:da:db:68:ad:7d:54:06:4c:e5:f8:d6:4f:95:f6:3e: 2a:8f:bc:86:55:91:cd:12:63:c4:f3:7f:84:02:13:d8:b2:f6: 9b:d7:fc:c1:1b:ce:ec:1e:ea:13:d9:c3:a3:11:58:65:79:60: c9:a4:0b:e3:5f:a2:8b:b4:7f:47:a5:fc:6f:4f:45:65:1a:c6: 6f:da:13:d1:c4:2e:d6:6f:d6:3f:29:2b:e5:df:71:77:0c:22: a5:c6:e4:84:6f:a9:47:b4:9f:72:a9:7d:8f:b6:d1:80:cb:5d: 5c:45:d4:26:6b:3e:21:bd:0f:42:36:20:e7:1e:47:f5:80:06: e8:c0:3d:5f:a8:af:d8:b4:52:a8:e9:61:c0:a2:f4:ce:2a:7a: 63:f4:cd:62:40:ac:3c:a4:8b:43:8b:55:2a:e5:69:9d:58:47: 32:6f:d1:2f:66:61:f0:fc:03:32:3f:77:eb:f2:6d:77:84:6e: a0:77:d1:cb:18:d3:a3:28:85:60:1d:f8:d0:a9:49:39:f0:6c: 14:7f:d6:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjUwNTE0MTUzMzQwWhcNMjUwNTIxMTUzMzQwWjAYMRYwFAYD VQQDEw02ODI0YjdkNC1iMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k66UtbqIaVN9LNGKKGWF3/81E1kf4yApT+q2Bjbnk/TU6jRL2yhBb9EQezh 4MeqmjHd4dhdGIOF2hP4QsELFt1eF9+SPAtV9Pi/P2nZ9akFc2nA+sdQjHaMygK/ z06ro0mRRuMRzbmrKhMl1+SaRJLaU7JK2dg3Nk62WG6SA3B7B/Ojck1n8RdG1Yaq 9TrKI0sk4SXV0Qh6n5mDZ8rS/EpVLunuA3QP6rLznJAqlR35fkag0gtV+6pngMfc t+2QxvhNpFerJHFgFwrWRr0XGeeSKNdggoMy3BY5wOe0wUNTVBmYZW2kbTQw4QoN 7TYnSvwat1OXUB9rA/4qtxmltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEe/sSf auuj4W4CGz0YJP8zuJ0NMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS NlNhRHMtdGJla1YwbExKZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQwWB1tP6w9PAMZvC1vk5OjGqhQ5QgAsDgPtXyQ0BIPFQUdW5Y7UaB BSnpSKyyqE8bkZnn0u/BW3ja22itfVQGTOX41k+V9j4qj7yGVZHNEmPE83+EAhPY svab1/zBG87sHuoT2cOjEVhleWDJpAvjX6KLtH9HpfxvT0VlGsZv2hPRxC7Wb9Y/ KSvl33F3DCKlxuSEb6lHtJ9yqX2PttGAy11cRdQmaz4hvQ9CNiDnHkf1gAbowD1f qK/YtFKo6WHAovTOKnpj9M1iQKw8pItDi1Uq5WmdWEcyb9EvZmHw/AMyP3fr8m13 hG6gd9HLGNOjKIVgHfjQqUk58GwUf9YF -----END CERTIFICATE-----Generated at Fri May 16 11:36:58 2025 by rpki-client