$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: NkLoshrN8MuUM39FpZTgy2YGwQU6M/XXKefUVMiGy+4= Subject key identifier: 49:1A:19:5F:D1:C1:AB:21:6C:F5:1F:E0:EB:42:40:C6:9E:7E:9A:C5 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09D6 Signing time: Sat 10 May 2025 16:05:17 +0000 Manifest this update: Sat 10 May 2025 16:05:16 +0000 Manifest next update: Sat 17 May 2025 16:05:16 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: ZHVkILH64Ezo8lFpuBp20Qgxut4eHm7JFgrFydh+u+c=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: May 10 16:05:16 2025 GMT Not After : May 17 16:05:16 2025 GMT Subject: CN=681f793c-7e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6c:1f:2b:11:26:b5:c8:ef:2c:33:34:db:48: eb:ce:78:57:4c:cf:12:89:75:80:c7:09:c3:54:37: ab:39:d1:a8:cd:e1:e8:93:30:5c:f8:d1:62:c3:ec: 08:e8:42:2b:f9:5b:18:85:8a:41:ab:18:89:9a:01: 0f:74:97:e2:e0:7f:b3:ba:d7:07:b3:10:41:0f:2e: 06:72:26:2a:3e:a7:42:ec:9e:e1:0b:b8:28:a1:97: ed:04:d6:52:db:e4:d5:3e:8d:3f:4f:f7:37:8f:ad: 86:4b:db:53:9c:99:7a:db:92:7c:b9:bb:93:39:ac: 47:d1:7e:45:0a:07:4f:9a:bb:f3:a7:22:d2:17:75: 3c:31:b0:bd:9b:ca:07:33:32:e2:20:7d:3f:bd:40: 62:ea:b3:0a:8b:5b:dc:e2:e2:59:17:73:66:e4:64: ad:31:70:b3:32:ec:4b:d9:38:09:7c:b6:70:0f:b9: f6:96:bf:c0:a4:c2:46:19:a2:fa:2c:95:87:64:4b: 80:18:c7:ea:58:82:c6:8f:6d:69:11:87:40:dd:30: 99:97:ac:43:bd:35:5b:ee:3b:ba:2b:3d:7a:76:98: bf:7d:5a:61:1d:90:1d:67:cd:bf:4b:f3:0c:ce:9e: 2f:c0:05:50:59:38:50:d4:9d:f0:aa:cc:0f:36:06: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:19:5F:D1:C1:AB:21:6C:F5:1F:E0:EB:42:40:C6:9E:7E:9A:C5 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:c1:ca:63:83:4b:f6:be:2f:57:5b:ee:1f:04:5c:98:bf: cc:c5:4e:89:a9:fc:77:6b:29:cb:f5:b5:bd:82:5e:2d:7c:05: e5:e5:af:9f:3f:d5:d1:89:de:21:a2:57:d8:cb:16:32:36:ad: 00:e0:b5:26:95:aa:9f:ea:89:2c:85:eb:7a:2e:f5:0e:e3:18: 04:78:15:b5:9a:7e:b8:ac:b7:04:34:1b:8a:ef:68:a9:c1:bb: 6c:9b:9f:f1:c4:ac:56:8b:88:65:d2:87:7a:d1:3b:00:d5:57: 57:5e:4a:dd:c2:ef:6c:5a:58:e0:0c:0d:48:63:d8:46:71:c6: 14:69:b0:97:cd:79:fb:61:3f:b2:08:a9:a1:43:72:e2:63:15: 55:51:d5:6f:7b:ba:f5:7f:af:9c:91:e0:81:eb:f9:fa:11:d4: 61:a1:ae:2e:4f:ea:67:9a:f5:75:30:73:90:a7:5d:28:9c:05: 50:5d:ec:22:de:07:0e:2d:6d:da:13:c1:ff:f8:4d:f0:b7:8f: 40:9a:b8:1c:cf:ed:89:29:32:95:37:bc:14:4c:50:b9:b2:42: c0:12:4a:84:94:4c:f7:1e:b6:a7:35:23:27:02:80:11:6a:b4: e6:3e:06:45:73:42:47:5c:66:0e:83:0b:18:5f:e4:6b:fd:0e: 4d:1e:1a:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNTEwMTYwNTE2WhcNMjUwNTE3MTYwNTE2WjAYMRYwFAYD VQQDEw02ODFmNzkzYy03ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42wfKxEmtcjvLDM020jrznhXTM8SiXWAxwnDVDerOdGozeHokzBc+NFiw+wI 6EIr+VsYhYpBqxiJmgEPdJfi4H+zutcHsxBBDy4GciYqPqdC7J7hC7gooZftBNZS 2+TVPo0/T/c3j62GS9tTnJl625J8ubuTOaxH0X5FCgdPmrvzpyLSF3U8MbC9m8oH MzLiIH0/vUBi6rMKi1vc4uJZF3Nm5GStMXCzMuxL2TgJfLZwD7n2lr/ApMJGGaL6 LJWHZEuAGMfqWILGj21pEYdA3TCZl6xDvTVb7ju6Kz16dpi/fVphHZAdZ82/S/MM zp4vwAVQWThQ1J3wqswPNgbIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkaGV/R washbPUf4OtCQMaefprFMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANecHKY4NL9r4vV1vuHwRcmL/MxU6Jqfx3aynL9bW9gl4tfAXl5a+f P9XRid4holfYyxYyNq0A4LUmlaqf6okshet6LvUO4xgEeBW1mn64rLcENBuK72ip wbtsm5/xxKxWi4hl0od60TsA1VdXXkrdwu9sWljgDA1IY9hGccYUabCXzXn7YT+y CKmhQ3LiYxVVUdVve7r1f6+ckeCB6/n6EdRhoa4uT+pnmvV1MHOQp10onAVQXewi 3gcOLW3aE8H/+E3wt49Amrgcz+2JKTKVN7wUTFC5skLAEkqElEz3HranNSMnAoAR arTmPgZFc0JHXGYOgwsYX+Rr/Q5NHhpi -----END CERTIFICATE-----Generated at Sun May 11 14:57:38 2025 by rpki-client