$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json) Hash identifier: U2ekz6eX3tb6tB1cs06uNbw1f3nUUHCgC058pIZOM+g= Subject key identifier: 97:A5:B3:53:B3:E2:EA:7C:B1:3B:93:F6:BE:1E:76:CD:3C:82:62:54 Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 Certificate issuer: /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft Manifest number: 347D Signing time: Mon 12 May 2025 14:35:58 +0000 Manifest this update: Mon 12 May 2025 14:35:57 +0000 Manifest next update: Mon 19 May 2025 14:35:57 +0000 Files and hashes: 1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: 8JjPGmfCw1oiooDFx2DM21JySeZ5KTeSbB94ZmsfGa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Validity Not Before: May 12 14:35:57 2025 GMT Not After : May 19 14:35:57 2025 GMT Subject: CN=6822074d-cd4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:9a:d9:0e:92:5e:bf:3b:8f:d7:f5:13:6f: 5b:51:2a:fa:a2:18:a7:58:ce:3c:14:3f:6c:a8:40: a6:54:9c:8e:26:40:a5:b2:16:02:02:39:e3:0a:b7: 40:b4:45:16:c9:c4:4a:41:f6:d6:33:3f:4e:68:a4: 94:bd:59:55:08:38:98:3a:55:45:91:0d:26:98:a4: f6:6a:38:dd:8b:63:c8:17:93:ee:4f:c5:bf:6e:75: ad:73:d8:e1:03:46:16:5a:c4:e4:91:5c:48:20:15: 72:87:07:5a:23:35:e0:b7:c3:08:f9:17:48:14:76: 10:11:ba:27:68:2b:2a:ec:fd:37:ed:36:e8:99:90: 1c:db:67:9f:62:d3:19:9d:2e:5a:99:ee:7a:51:91: ea:42:db:15:23:48:08:22:10:4c:3e:09:2c:c2:ba: f5:d4:8c:5e:a8:d7:9e:0f:60:68:54:ff:2e:47:80: 09:8d:c1:fc:6d:22:b6:c6:89:97:5a:cd:51:81:02: 2a:ab:36:3b:de:9b:20:bd:52:72:4c:8e:5a:37:04: 89:6e:53:cf:bf:ac:9b:ed:cd:cc:fc:88:b1:0c:44: f9:9e:3b:c7:a1:74:c3:03:74:2b:40:22:43:f9:90: 8d:ad:4f:a8:6b:8e:2f:ca:e1:05:fd:ec:35:b6:4c: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:B3:53:B3:E2:EA:7C:B1:3B:93:F6:BE:1E:76:CD:3C:82:62:54 X509v3 Authority Key Identifier: keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:61:b0:55:78:fe:f6:f3:c9:b0:ca:34:b3:33:b2:8c:7e:d5: a6:03:67:29:97:7b:d8:51:17:4b:e8:0c:98:a5:40:87:37:17: 0a:4f:23:d4:d5:70:7d:e2:52:af:49:80:f9:eb:0e:b3:74:4a: 42:62:9f:b1:75:95:f9:25:11:b6:e2:84:21:a5:cc:ba:72:14: 1d:20:0c:23:0e:a8:df:c0:ca:3a:b2:2e:a3:eb:ee:7e:74:a8: 94:88:09:bb:b9:36:90:ce:25:d6:50:87:d0:b7:41:02:96:0c: f0:62:44:48:05:b3:42:01:e9:5e:27:0e:80:5d:b8:08:b5:0e: d5:31:17:2e:b2:c5:1b:4b:1d:a5:24:e6:8a:e1:6b:46:a9:ce: fe:11:92:70:a6:51:1a:5f:73:55:f2:99:67:02:0a:88:d0:22: 5b:3e:c8:ce:74:a5:78:bc:50:1c:6f:f2:2d:fe:75:78:7d:70: 6c:4e:b2:53:83:e9:88:a6:3a:c5:8e:d4:a0:c4:38:96:2a:66: 11:65:d6:f9:e6:fb:4f:27:7d:3a:20:ef:bf:1a:30:05:36:e8: e7:84:ed:51:d2:a9:dd:ce:61:27:6c:b2:78:f2:24:f9:6b:d9: 00:22:ba:29:6c:c8:21:93:36:f0:96:ee:f7:a4:34:6a:83:f1: 3d:59:2c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMzUxMTAvBgNVBAUTKDA2NTVFMjkxNUNBREU5MTY3N0FBQjQ4QzIzQzFFMjI0 QjQzREJBQTUwHhcNMjUwNTEyMTQzNTU3WhcNMjUwNTE5MTQzNTU3WjAYMRYwFAYD VQQDEw02ODIyMDc0ZC1jZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp2a2Q6SXr87j9f1E29bUSr6ohinWM48FD9sqECmVJyOJkClshYCAjnjCrdA tEUWycRKQfbWMz9OaKSUvVlVCDiYOlVFkQ0mmKT2ajjdi2PIF5PuT8W/bnWtc9jh A0YWWsTkkVxIIBVyhwdaIzXgt8MI+RdIFHYQEbonaCsq7P037TbomZAc22efYtMZ nS5ame56UZHqQtsVI0gIIhBMPgkswrr11IxeqNeeD2BoVP8uR4AJjcH8bSK2xomX Ws1RgQIqqzY73psgvVJyTI5aNwSJblPPv6yb7c3M/IixDET5njvHoXTDA3QrQCJD +ZCNrU+oa44vyuEF/ew1tkz1UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJels1Oz 4up8sTuT9r4eds08gmJUMB8GA1UdIwQYMBaAFAZV4pFcrekWd6q0jCPB4iS0Pbql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQzNS9ENkY4ODVBNDFE OEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZSWjNxclNNSThIaUpMUTl1 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsWGlrVnl0NlJaM3FyU01JOEhpSkxROXVxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQzNS9ENkY4ODVBNDFEOEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZS WjNxclNNSThIaUpMUTl1cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfYbBVeP7288mwyjSzM7KMftWmA2cpl3vYURdL6AyYpUCHNxcKTyPU 1XB94lKvSYD56w6zdEpCYp+xdZX5JRG24oQhpcy6chQdIAwjDqjfwMo6si6j6+5+ dKiUiAm7uTaQziXWUIfQt0EClgzwYkRIBbNCAeleJw6AXbgItQ7VMRcussUbSx2l JOaK4WtGqc7+EZJwplEaX3NV8plnAgqI0CJbPsjOdKV4vFAcb/It/nV4fXBsTrJT g+mIpjrFjtSgxDiWKmYRZdb55vtPJ306IO+/GjAFNujnhO1R0qndzmEnbLJ48iT5 a9kAIropbMghkzbwlu73pDRqg/E9WSwZ -----END CERTIFICATE-----Generated at Wed May 14 01:40:07 2025 by rpki-client