$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: CxDI5W33v2hDEIjZK9qcfsQW76yaY1rtqnEW7qLlGgc= Subject key identifier: C3:62:D9:3E:3F:0A:34:D2:38:00:88:82:AE:DA:55:72:53:80:BF:F5 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 34B1 Signing time: Mon 12 May 2025 14:21:44 +0000 Manifest this update: Mon 12 May 2025 14:21:44 +0000 Manifest next update: Mon 19 May 2025 14:21:44 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: FFM/f3C9aFlHAQGcalQUk9ZeYDAlvmhkUAUj3KyNpwo=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: jwyDhO2AKzS24hZPtz7MMlmo1w5QqA8KZe3aiJpN8lw=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: 7hb8peyViLHs7pUvHbdg5I6QacKj8JDlnsxAKAU1Zc0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: N+3adJFbEo0riTp5e2KIvLZDqSsoREj9ZabeHIbeUYU=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: rL42c7NaJK9wVJaWnoYtY42z+plXzLKrOFuOd8KULJk=) 6: 30941278EF2011EF9264077FC4F9AE02.roa (hash: 7cnuMrD52u33lf3m5CrnVGkp55WZekOCTta1eN0iR8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: May 12 14:21:44 2025 GMT Not After : May 19 14:21:44 2025 GMT Subject: CN=682203f8-4bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:25:0c:ac:29:94:d3:66:65:6e:25:d2:7a: 56:a3:4f:80:6a:4e:3c:44:a3:dc:9c:c4:a0:0e:96: 58:91:0b:28:ed:b9:46:9c:f1:71:8e:66:fb:fe:85: 4e:40:92:2e:23:c3:f5:f1:30:58:87:cc:7d:84:e8: 60:49:77:e0:1f:3e:b8:0b:f9:4e:ab:85:f0:de:ba: 0c:4c:28:0e:5c:3b:37:26:fa:5c:0c:79:bc:e6:11: a2:1f:65:17:79:ed:2e:e8:cd:c2:57:b6:91:2d:d6: 21:e1:08:90:1e:1a:f3:e2:4f:a3:47:9c:ef:ad:41: 7b:5b:92:1d:6d:53:3e:31:ad:f4:ee:8e:77:39:aa: e8:91:09:1e:6f:66:86:c8:6b:08:c5:58:97:b7:dc: 0a:7f:82:7b:a7:3e:29:bf:8d:82:34:1d:0d:02:98: b8:9f:f7:3c:13:69:99:20:77:2d:d7:db:37:96:13: 52:c8:6e:d8:32:e3:11:c3:3f:59:79:39:51:2e:f3: 1b:f5:00:0c:79:74:51:65:44:11:ee:22:2a:13:7b: 61:22:3c:e0:07:9e:e3:66:51:cc:b0:e2:70:56:2a: 4d:8f:91:d5:8c:0c:ca:95:52:ec:47:20:a1:2c:13: f9:ef:50:94:39:4d:8d:73:29:a3:34:61:d8:4a:60: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:D9:3E:3F:0A:34:D2:38:00:88:82:AE:DA:55:72:53:80:BF:F5 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:b4:1e:a7:e7:e9:34:a0:0d:bd:1a:8b:85:21:9e:bc:b0:f3: 5d:b8:79:b4:a9:15:ad:53:5c:fb:7b:f1:18:da:4b:77:f7:77: cd:0d:28:62:fa:11:40:a1:04:6c:31:ac:3e:f2:c7:cb:68:c5: 0c:ef:69:34:2a:16:93:45:f8:eb:1c:8b:3a:24:f6:05:aa:be: e8:66:26:c6:9e:48:4e:c1:01:ac:f0:2c:b3:c8:9f:fe:ce:a8: 82:a3:d0:fb:3a:f9:93:3a:53:15:81:46:e9:6d:24:82:05:76: 4f:84:75:a2:36:5c:d3:b4:1a:af:5d:d3:9b:91:54:89:bd:2d: 4b:32:7a:89:85:47:57:97:83:45:b2:f6:85:aa:b0:f9:46:61: 5a:ee:17:a3:f8:50:db:69:ce:e4:01:05:ac:a4:30:69:d5:d3: e3:63:b8:43:84:94:45:ad:28:11:f2:bb:97:94:48:bb:78:4e: 20:ea:5f:a0:de:02:ec:4e:0a:31:ec:5e:f8:64:61:86:85:aa: 5e:1e:51:f1:8f:cf:c8:e8:2a:7f:fe:c5:bb:9b:49:1c:1b:84: be:6b:f4:3f:fc:1f:e3:13:1a:93:7c:b0:c1:98:d6:76:fc:dc: 2e:07:a3:80:2e:6e:65:02:2d:e6:c2:e7:b3:0c:b4:c2:ac:35: 03:4d:92:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUwNTEyMTQyMTQ0WhcNMjUwNTE5MTQyMTQ0WjAYMRYwFAYD VQQDEw02ODIyMDNmOC00YmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHIlDKwplNNmZW4l0npWo0+Aak48RKPcnMSgDpZYkQso7blGnPFxjmb7/oVO QJIuI8P18TBYh8x9hOhgSXfgHz64C/lOq4Xw3roMTCgOXDs3JvpcDHm85hGiH2UX ee0u6M3CV7aRLdYh4QiQHhrz4k+jR5zvrUF7W5IdbVM+Ma307o53OarokQkeb2aG yGsIxViXt9wKf4J7pz4pv42CNB0NApi4n/c8E2mZIHct19s3lhNSyG7YMuMRwz9Z eTlRLvMb9QAMeXRRZUQR7iIqE3thIjzgB57jZlHMsOJwVipNj5HVjAzKlVLsRyCh LBP571CUOU2NcymjNGHYSmA/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNi2T4/ CjTSOACIgq7aVXJTgL/1MB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCptB6n5+k0oA29GouFIZ68sPNduHm0qRWtU1z7e/EY2kt393fNDShi +hFAoQRsMaw+8sfLaMUM72k0KhaTRfjrHIs6JPYFqr7oZibGnkhOwQGs8CyzyJ/+ zqiCo9D7OvmTOlMVgUbpbSSCBXZPhHWiNlzTtBqvXdObkVSJvS1LMnqJhUdXl4NF svaFqrD5RmFa7hej+FDbac7kAQWspDBp1dPjY7hDhJRFrSgR8ruXlEi7eE4g6l+g 3gLsTgox7F74ZGGGhapeHlHxj8/I6Cp//sW7m0kcG4S+a/Q//B/jExqTfLDBmNZ2 /NwuB6OALm5lAi3mwuezDLTCrDUDTZK1 -----END CERTIFICATE-----Generated at Tue May 13 04:37:29 2025 by rpki-client