$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft File: mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json) Hash identifier: hchr2DhkjSvOJqBY6a2Zi6gwHf1EElVHy4OlnOZ16TQ= Subject key identifier: 98:37:A5:95:54:7D:96:61:C9:90:4C:22:B8:D9:25:32:23:63:2E:BD Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 Certificate issuer: /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Certificate serial: 1DC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft Manifest number: 1DB9 Signing time: Sat 10 May 2025 16:03:15 +0000 Manifest this update: Sat 10 May 2025 16:03:15 +0000 Manifest next update: Sat 17 May 2025 16:03:15 +0000 Files and hashes: 1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: GSz8XZhz3x57DHWuMaQHfNkpGShBgu112vo5DaFhvJ8=) 2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: quQxqNwWkulIRmJT2I6ZYZNStKYWsMI4R3sbyT8S9tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7622 (0x1dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Validity Not Before: May 10 16:03:15 2025 GMT Not After : May 17 16:03:15 2025 GMT Subject: CN=681f78c3-0d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:14:83:a9:96:50:22:0c:53:9e:24:68:3e:a0: 6d:d9:08:a9:bf:ce:4a:33:e1:cd:c2:1c:c2:1f:ef: 48:fa:39:ae:fa:f0:2c:e8:85:8a:d7:d3:ae:65:64: 78:92:d2:76:cf:18:88:d7:d1:20:e1:02:f5:4b:cb: 2a:0e:df:2c:56:75:04:80:5c:4d:7f:ef:16:6b:6a: 88:d9:a6:e9:11:c0:c7:e6:58:a1:5e:7c:b7:d8:d9: 81:20:fe:cf:fb:c2:4a:45:75:2a:b5:05:23:f8:72: af:64:a7:29:69:96:a4:eb:b9:38:2a:33:a2:4c:51: c5:60:2b:05:c8:3d:4a:05:a4:bc:b4:eb:66:4a:9c: 30:96:56:ba:8e:8d:a9:e9:61:17:a8:4f:26:f0:b6: af:f9:d4:b8:1f:a8:8d:8e:a5:3f:f9:42:77:9d:87: 3f:5c:53:c6:da:76:fb:86:48:0d:8a:bc:5d:90:15: 21:1b:a7:d9:01:2e:1d:75:6c:be:39:9f:bd:c5:8f: c5:df:83:8b:0c:f8:3f:cd:22:2a:d7:5e:42:d1:80: 00:9f:a0:18:53:d7:0c:7a:f3:f4:2d:17:30:64:83: 23:0f:9c:a2:17:60:65:84:1b:fd:f3:af:45:67:1a: d3:19:36:c9:ac:0c:eb:1b:31:15:d5:b0:0b:5a:3f: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:A5:95:54:7D:96:61:C9:90:4C:22:B8:D9:25:32:23:63:2E:BD X509v3 Authority Key Identifier: keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6b:f2:7f:54:20:bf:0e:58:66:5d:03:87:5a:5b:e4:0c:dc: c2:73:d8:33:04:d7:91:f1:bd:8a:2d:89:93:0a:a3:e0:d3:43: 0b:56:e2:83:a2:a5:9e:2e:95:9a:5d:8f:f6:39:d9:aa:63:d6: 8c:99:66:2c:72:ca:3a:8f:dc:1a:50:33:a8:29:db:47:1a:43: e9:9d:0d:22:9d:3b:f8:1f:f5:8e:2d:9c:d0:1e:7d:23:12:45: a9:80:4a:be:ea:6f:f9:ca:64:25:b1:62:fb:99:db:94:ae:d4: 95:a6:8c:5f:9e:66:67:9f:45:3b:f0:6c:59:1f:0b:97:5c:cb: 93:01:de:70:6a:62:6d:6c:14:ba:87:bb:12:fd:f7:28:fb:91: 1c:9b:b5:84:1b:1e:a1:15:3d:ad:33:1f:ba:03:5c:b5:0b:5c: 93:7c:18:f0:9b:19:41:73:b9:cb:a2:f6:29:a1:a5:2e:16:52: a8:fb:85:0c:38:94:31:cb:1f:a4:3d:b5:41:db:a9:c1:e2:9a: 2f:a6:a1:aa:30:76:ce:4d:bd:15:23:c1:d3:37:4c:21:95:44: 15:bb:e9:54:00:87:4c:0a:c1:c1:ac:62:a1:67:5d:65:ca:40: e6:ac:7c:a8:d8:97:7b:58:cf:f6:9c:5f:12:6d:c6:95:bb:a5: 9d:b7:d3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4MEMxMTAvBgNVBAUTKDlBNjY1MjAxRDYxNjBGMzFENzZCOUQyMTdBMURGRkVB RDEyQ0JBODIwHhcNMjUwNTEwMTYwMzE1WhcNMjUwNTE3MTYwMzE1WjAYMRYwFAYD VQQDEw02ODFmNzhjMy0wZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BSDqZZQIgxTniRoPqBt2Qipv85KM+HNwhzCH+9I+jmu+vAs6IWK19OuZWR4 ktJ2zxiI19Eg4QL1S8sqDt8sVnUEgFxNf+8Wa2qI2abpEcDH5lihXny32NmBIP7P +8JKRXUqtQUj+HKvZKcpaZak67k4KjOiTFHFYCsFyD1KBaS8tOtmSpwwlla6jo2p 6WEXqE8m8Lav+dS4H6iNjqU/+UJ3nYc/XFPG2nb7hkgNirxdkBUhG6fZAS4ddWy+ OZ+9xY/F34OLDPg/zSIq115C0YAAn6AYU9cMevP0LRcwZIMjD5yiF2BlhBv9869F ZxrTGTbJrAzrGzEV1bALWj9L+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg3pZVU fZZhyZBMIrjZJTIjYy69MB8GA1UdIwQYMBaAFJpmUgHWFg8x12udIXod/+rRLLqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTgwQy85QTdDRDNFQTk2 QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6SFhhNTBoZWgzXzZ0RXN1 b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tWlNBZFlXRHpIWGE1MGhlaDNfNnRFc3VvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTgwQy85QTdDRDNFQTk2QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6 SFhhNTBoZWgzXzZ0RXN1b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPa/J/VCC/DlhmXQOHWlvkDNzCc9gzBNeR8b2KLYmTCqPg00MLVuKD oqWeLpWaXY/2OdmqY9aMmWYscso6j9waUDOoKdtHGkPpnQ0inTv4H/WOLZzQHn0j EkWpgEq+6m/5ymQlsWL7mduUrtSVpoxfnmZnn0U78GxZHwuXXMuTAd5wamJtbBS6 h7sS/fco+5Ecm7WEGx6hFT2tMx+6A1y1C1yTfBjwmxlBc7nLovYpoaUuFlKo+4UM OJQxyx+kPbVB26nB4povpqGqMHbOTb0VI8HTN0whlUQVu+lUAIdMCsHBrGKhZ11l ykDmrHyo2Jd7WM/2nF8SbcaVu6Wdt9Mt -----END CERTIFICATE-----Generated at Sat May 10 19:13:41 2025 by rpki-client