$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: 2u1AzHRu+IZVpIvEOdJ61nSPcpCRODbavHXj+2X1Ef8= Subject key identifier: DE:CB:28:B1:29:99:3B:FF:2D:E1:6F:11:FB:11:66:F6:48:04:7D:AF Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 0193 Signing time: Tue 13 May 2025 02:46:44 +0000 Manifest this update: Tue 13 May 2025 02:46:44 +0000 Manifest next update: Tue 20 May 2025 02:46:44 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: FLLaVHljk//2zMOFJzeePRo1owtD39pb/LDu1ayhuIA=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: oLct614lxULJnPg0Rxvnf0inRuQaFav2PCBlzJPAse0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: May 13 02:46:44 2025 GMT Not After : May 20 02:46:44 2025 GMT Subject: CN=6822b294-c3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:b0:29:ee:3f:69:94:9b:b8:da:44:4a:c1: 1e:1c:c2:f0:82:c4:bc:50:8f:36:08:66:84:33:f3: 0e:71:9d:41:23:4c:7e:65:06:ab:9d:4d:4a:4d:98: fb:45:a7:3c:26:77:07:dc:23:78:8f:a7:f8:11:4e: ec:dd:54:f7:78:ab:74:cd:a5:49:6c:5e:93:92:ad: 47:18:2a:c5:95:68:44:29:b2:b6:e7:5c:de:ac:57: ce:74:98:c3:55:88:23:d5:85:09:f2:f1:14:79:11: c6:4e:a2:e9:98:e3:da:28:42:d4:69:83:e4:7b:df: ea:16:fc:2b:25:b6:18:b3:98:0f:a9:a6:c7:2e:ee: 75:77:55:fd:ea:0d:e8:56:e3:65:00:7a:72:99:d6: 23:80:29:1b:0f:b9:4f:f0:7e:f0:7e:11:57:0b:5e: 2e:33:52:5e:66:69:80:b1:85:75:21:b4:3c:ac:51: d4:5f:61:44:3e:6a:f4:b1:4f:12:2f:e2:d9:fa:2f: 02:88:9f:40:ad:97:d4:1e:1a:c5:90:8d:9e:b1:53: 27:a0:db:6e:86:14:9b:55:60:33:7b:8e:05:91:76: e2:8d:20:8b:7c:f2:4e:37:1d:c7:10:49:a2:d0:1e: be:c5:b0:f9:92:12:21:4c:16:b8:29:9b:2d:b2:47: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:28:B1:29:99:3B:FF:2D:E1:6F:11:FB:11:66:F6:48:04:7D:AF X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c1:3f:9b:f3:57:43:77:ae:76:aa:62:5d:0f:14:10:9b:9f: 77:fd:f8:9a:d3:81:b9:bb:ed:2a:60:35:ff:24:bb:7f:6e:a5: 5d:36:37:b4:91:ed:e8:c7:19:86:79:c1:c4:a8:07:9f:02:55: 9b:5c:84:67:0c:9c:ac:45:85:49:df:7e:25:ca:f5:22:81:b1: dc:d6:2f:d2:5d:9b:9e:af:69:85:18:c1:fa:9c:bd:63:c8:39: ec:4c:65:e5:3f:67:07:86:27:83:4c:7f:f0:87:19:aa:83:76: 30:ba:57:b4:00:25:12:53:92:d4:68:72:5b:6a:52:9f:28:12: e1:a7:e5:5b:ab:63:19:c6:a4:1e:10:6f:9c:b0:73:3f:21:e4: e2:fc:47:d9:11:d1:c2:f7:86:fc:14:e5:e0:27:69:a2:84:5d: db:1b:44:8e:d6:9e:b0:8f:bc:cf:cc:b0:6e:f7:cc:7e:ed:18: 38:0c:ca:52:ff:75:d6:77:c2:4e:e4:7a:a8:d7:74:5d:14:44: 26:1c:41:cb:c1:99:25:b7:2c:78:3f:b3:31:e1:5f:80:e6:24: 91:2d:31:a2:cf:21:f4:5f:00:3f:30:3b:df:6a:1e:7b:3b:07: be:09:d3:a6:e4:65:dd:b2:88:29:c6:7d:64:da:05:66:10:a2: 29:47:06:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwNTEzMDI0NjQ0WhcNMjUwNTIwMDI0NjQ0WjAYMRYwFAYD VQQDEw02ODIyYjI5NC1jM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQiwKe4/aZSbuNpESsEeHMLwgsS8UI82CGaEM/MOcZ1BI0x+ZQarnU1KTZj7 Rac8JncH3CN4j6f4EU7s3VT3eKt0zaVJbF6Tkq1HGCrFlWhEKbK251zerFfOdJjD VYgj1YUJ8vEUeRHGTqLpmOPaKELUaYPke9/qFvwrJbYYs5gPqabHLu51d1X96g3o VuNlAHpymdYjgCkbD7lP8H7wfhFXC14uM1JeZmmAsYV1IbQ8rFHUX2FEPmr0sU8S L+LZ+i8CiJ9ArZfUHhrFkI2esVMnoNtuhhSbVWAze44FkXbijSCLfPJONx3HEEmi 0B6+xbD5khIhTBa4KZstskcxWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7LKLEp mTv/LeFvEfsRZvZIBH2vMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbwT+b81dDd652qmJdDxQQm593/fia04G5u+0qYDX/JLt/bqVdNje0 ke3oxxmGecHEqAefAlWbXIRnDJysRYVJ334lyvUigbHc1i/SXZuer2mFGMH6nL1j yDnsTGXlP2cHhieDTH/whxmqg3Ywule0ACUSU5LUaHJbalKfKBLhp+Vbq2MZxqQe EG+csHM/IeTi/EfZEdHC94b8FOXgJ2mihF3bG0SO1p6wj7zPzLBu98x+7Rg4DMpS /3XWd8JO5Hqo13RdFEQmHEHLwZkltyx4P7Mx4V+A5iSRLTGizyH0XwA/MDvfah57 Owe+CdOm5GXdsogpxn1k2gVmEKIpRwbA -----END CERTIFICATE-----Generated at Tue May 13 19:56:33 2025 by rpki-client