$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: hywlk9zszhclbPs2cYgh+ejz0GqwXqWst7JGTvoUEOo= Subject key identifier: 52:DE:F4:09:DE:FF:DE:3C:65:BF:94:77:B6:DD:C2:74:16:4B:C5:86 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 0132 Signing time: Thu 15 May 2025 03:53:10 +0000 Manifest this update: Thu 15 May 2025 03:53:10 +0000 Manifest next update: Thu 22 May 2025 03:53:10 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: 6uRFJ3V2xwThoS0rO8iPZq2jYPkuoj5Ixn11vl7HnDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: May 15 03:53:10 2025 GMT Not After : May 22 03:53:10 2025 GMT Subject: CN=68256526-928d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:af:65:f5:83:1a:6e:7c:ae:ca:fc:0d:63: 9b:fa:ad:ef:9b:a2:62:7c:b2:05:70:f2:52:84:a0: a5:a1:d5:8b:c1:af:ef:5b:2e:4e:11:43:00:78:f0: a3:d5:7b:fd:0b:be:b7:1d:f3:c0:af:5b:de:3b:8c: ea:8c:1d:3d:fe:85:d5:60:25:3a:04:ac:d9:b7:de: 49:02:82:a5:39:f5:3f:d1:6b:ff:86:1d:39:90:2d: 3d:b2:73:26:4a:71:82:5a:c3:00:74:36:3c:56:dd: eb:0d:12:43:47:6d:d0:b4:f4:5c:01:71:9f:49:bc: 60:a8:f0:73:84:0d:29:45:2f:0a:60:a3:68:25:34: 27:df:85:7f:18:4c:ae:22:92:12:30:e0:00:f2:33: 5a:05:0f:36:74:4b:de:b1:40:15:0c:61:50:77:22: af:48:9b:ae:82:9f:9d:19:06:64:16:c0:d4:c4:3d: d2:de:bf:46:e9:a2:87:35:e9:3e:4d:58:f9:e8:54: 91:bc:d8:d3:05:50:66:fb:4e:fb:83:bb:d0:47:13: 12:b2:b5:5a:f0:f1:63:27:8c:76:09:10:72:0c:b1: ae:01:b4:77:cf:f5:04:d0:3f:e9:f5:56:85:01:b8: 12:95:a5:c6:34:1c:39:f1:c9:25:36:14:63:4c:1c: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DE:F4:09:DE:FF:DE:3C:65:BF:94:77:B6:DD:C2:74:16:4B:C5:86 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2f:71:dc:b1:5b:ad:16:b5:77:c4:e2:35:17:b7:31:3b:60: 8e:9a:7d:b8:49:c4:63:d1:ca:1f:7a:58:17:13:03:83:e0:71: 54:5b:5f:85:9d:e4:ff:80:be:5c:a9:22:a4:55:64:09:0a:b3: 66:17:d9:d1:89:73:5d:2d:10:7b:28:be:be:42:07:15:ea:a3: 56:88:47:04:7c:f3:ee:75:2a:fa:20:82:6e:70:4b:82:f7:fd: a9:3c:35:88:25:61:e7:16:38:99:a8:fa:5d:79:88:3a:b4:d8: e2:9e:15:ad:8e:29:81:10:35:98:0a:bd:f9:a4:20:0d:0b:cd: 3f:0d:fe:66:8f:e4:86:dc:2a:4f:86:ad:12:ee:b9:cb:4a:d8: bb:7e:87:17:32:84:52:08:9c:66:db:64:9b:83:32:0c:7f:da: 61:af:52:29:1b:b1:e4:f3:6e:46:b6:f8:e2:3f:c8:42:0b:16: 8c:92:2d:4d:fd:6b:0f:88:18:08:1c:0c:f7:73:b8:64:29:a6: 86:24:7b:9f:4f:10:24:f5:b2:7c:6b:83:a8:de:6c:32:d2:cd: 45:73:7c:8a:60:4e:8d:a7:37:65:10:5b:b5:b3:70:04:ea:ac: da:c3:a3:fe:87:9a:66:cf:d1:0f:23:65:ba:d9:3e:d1:ec:9b: 54:a1:61:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUwNTE1MDM1MzEwWhcNMjUwNTIyMDM1MzEwWjAYMRYwFAYD VQQDEw02ODI1NjUyNi05MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RSvZfWDGm58rsr8DWOb+q3vm6JifLIFcPJShKClodWLwa/vWy5OEUMAePCj 1Xv9C763HfPAr1veO4zqjB09/oXVYCU6BKzZt95JAoKlOfU/0Wv/hh05kC09snMm SnGCWsMAdDY8Vt3rDRJDR23QtPRcAXGfSbxgqPBzhA0pRS8KYKNoJTQn34V/GEyu IpISMOAA8jNaBQ82dEvesUAVDGFQdyKvSJuugp+dGQZkFsDUxD3S3r9G6aKHNek+ TVj56FSRvNjTBVBm+077g7vQRxMSsrVa8PFjJ4x2CRByDLGuAbR3z/UE0D/p9VaF AbgSlaXGNBw58cklNhRjTByo2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLe9Ane /948Zb+Ud7bdwnQWS8WGMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIL3HcsVutFrV3xOI1F7cxO2COmn24ScRj0cofelgXEwOD4HFUW1+F neT/gL5cqSKkVWQJCrNmF9nRiXNdLRB7KL6+QgcV6qNWiEcEfPPudSr6IIJucEuC 9/2pPDWIJWHnFjiZqPpdeYg6tNjinhWtjimBEDWYCr35pCANC80/Df5mj+SG3CpP hq0S7rnLSti7focXMoRSCJxm22SbgzIMf9phr1IpG7Hk825GtvjiP8hCCxaMki1N /WsPiBgIHAz3c7hkKaaGJHufTxAk9bJ8a4Oo3mwy0s1Fc3yKYE6NpzdlEFu1s3AE 6qzaw6P+h5pmz9EPI2W62T7R7JtUoWH7 -----END CERTIFICATE-----Generated at Thu May 15 15:35:31 2025 by rpki-client