$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: dnJHqVGZQ2nCSC8amiWg1muXJI9iOYiZNBermurxJ+o= Subject key identifier: C1:99:CC:B6:48:5D:80:6C:B8:F7:C4:26:B3:24:3E:B7:C7:42:31:93 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 74 Signing time: Sun 11 May 2025 05:32:32 +0000 Manifest this update: Sun 11 May 2025 05:32:32 +0000 Manifest next update: Sun 18 May 2025 05:32:32 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: 9YSDv9pvoDdHh6V9m+NDi+s9e0wttK/54llc1fkp79E=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: May 11 05:32:32 2025 GMT Not After : May 18 05:32:32 2025 GMT Subject: CN=68203670-f062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:db:7f:09:89:34:41:80:fc:22:8b:44:7f: 97:89:dd:9c:4c:98:bd:a5:b1:de:a5:55:c8:9e:6d: 8b:41:49:55:65:03:c2:bd:2e:a8:7f:a3:c1:9d:20: 4a:50:7f:53:d5:47:fd:4b:10:eb:3a:0b:1a:10:5a: e5:f1:af:36:df:c8:48:bc:cb:89:15:87:56:01:8f: fb:06:5c:16:bd:a3:81:fa:e6:a8:32:b1:26:2a:8a: ff:99:1a:0c:a7:4b:d4:bc:36:88:03:f2:47:56:09: 22:20:54:ba:5d:45:19:da:87:ab:f3:90:ae:21:3b: 71:39:8b:bf:99:22:b7:54:eb:b1:06:e7:75:6d:d5: 2b:57:21:1c:e4:ba:18:1c:e6:c5:fd:54:be:da:59: 43:1a:cb:9f:90:63:2b:c0:9d:b7:35:6e:e9:3d:f9: a3:4e:d3:44:0d:2d:4e:27:55:d2:ae:14:57:25:60: e3:31:09:94:e2:83:11:89:89:ed:36:47:18:a8:71: cc:18:1a:a3:3e:75:d5:8e:af:ec:d8:a7:62:02:00: 7a:cf:5e:90:02:6c:55:a3:63:67:7c:db:b0:6c:0d: c6:6d:14:d6:13:20:f7:15:c5:66:24:a7:03:0f:e8: b0:ad:58:31:e5:36:44:18:93:7c:48:cc:d1:b4:b7: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:99:CC:B6:48:5D:80:6C:B8:F7:C4:26:B3:24:3E:B7:C7:42:31:93 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d1:aa:04:c6:94:6e:fb:d9:e4:87:b5:24:86:cf:38:86:d5: 40:ab:e6:c6:fd:06:8e:b0:99:99:e0:5e:f9:d6:c7:b7:64:eb: 91:6b:16:e3:e7:b6:8a:b6:bc:e9:e2:bd:1c:7f:78:29:82:0a: de:4b:6f:d9:5d:a7:99:2d:20:84:96:52:a4:e1:c4:db:df:6d: 82:fb:c9:ba:bb:97:e1:bd:dd:37:50:67:ac:bd:31:0b:f0:31: 50:c6:f5:32:60:bb:f7:74:33:bc:29:75:20:f7:9c:97:15:c2: 74:4b:7a:2f:3b:24:a3:d9:f4:a0:97:54:e1:11:54:25:c6:f9: a3:51:dc:47:be:7d:8e:b7:f4:3f:c7:ff:42:48:9e:0b:e7:45: 3b:7e:0e:09:96:dc:c2:44:6a:ad:48:fb:35:1c:5b:64:18:4a: a0:ad:29:cb:36:f5:c7:29:31:40:79:5f:16:f2:ea:c9:16:32: a2:7e:2f:94:1c:3d:86:9c:55:7b:7d:f5:a4:a4:30:67:92:7d: 06:a0:a1:e3:1e:8d:da:3d:fd:01:dd:b6:dd:af:36:05:00:15: d9:cf:82:ef:c6:95:a3:18:57:3e:f6:e2:25:ad:25:68:44:1e: 75:92:50:54:cc:76:e4:f4:65:0d:f4:8f:b3:a2:d6:99:a4:94: 46:cf:20:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoREM2QTIzNzRDNTE0RThDRjRBQzc2NEEwRjNDODQ2RjA5 QjMzRDI4MjAeFw0yNTA1MTEwNTMyMzJaFw0yNTA1MTgwNTMyMzJaMBgxFjAUBgNV BAMTDTY4MjAzNjcwLWYwNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt8Nt/CYk0QYD8IotEf5eJ3ZxMmL2lsd6lVciebYtBSVVlA8K9Lqh/o8GdIEpQ f1PVR/1LEOs6CxoQWuXxrzbfyEi8y4kVh1YBj/sGXBa9o4H65qgysSYqiv+ZGgyn S9S8NogD8kdWCSIgVLpdRRnah6vzkK4hO3E5i7+ZIrdU67EG53Vt1StXIRzkuhgc 5sX9VL7aWUMay5+QYyvAnbc1buk9+aNO00QNLU4nVdKuFFclYOMxCZTigxGJie02 RxioccwYGqM+ddWOr+zYp2ICAHrPXpACbFWjY2d827BsDcZtFNYTIPcVxWYkpwMP 6LCtWDHlNkQYk3xIzNG0t1hTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwZnMtkhd gGy498QmsyQ+t8dCMZMwHwYDVR0jBBgwFoAU3GojdMUU6M9Kx2Sg88hG8Jsz0oIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzY0MjNCRTA2N0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0dvamRNVVU2TTlLeDJTZzg4aEc4SnN6MG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzY0MjNCRTA2N0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05 S3gyU2c4OGhHOEpzejBvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/RqgTGlG772eSHtSSGzziG1UCr5sb9Bo6wmZngXvnWx7dk65FrFuPn toq2vOnivRx/eCmCCt5Lb9ldp5ktIISWUqThxNvfbYL7ybq7l+G93TdQZ6y9MQvw MVDG9TJgu/d0M7wpdSD3nJcVwnRLei87JKPZ9KCXVOERVCXG+aNR3Ee+fY639D/H /0JIngvnRTt+DgmW3MJEaq1I+zUcW2QYSqCtKcs29ccpMUB5Xxby6skWMqJ+L5Qc PYacVXt99aSkMGeSfQagoeMejdo9/QHdtt2vNgUAFdnPgu/GlaMYVz724iWtJWhE HnWSUFTMduT0ZQ30j7Oi1pmklEbPIJ8= -----END CERTIFICATE-----Generated at Mon May 12 23:20:40 2025 by rpki-client