$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: 5AqkV9+djca8fOHyLKFiQnNRgzdp0Bt7/puxmSUecD0= Subject key identifier: 03:EE:3D:1C:EA:06:05:2F:E2:EB:F4:29:76:76:B1:39:AE:A6:C2:15 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0130 Signing time: Sun 11 May 2025 03:23:56 +0000 Manifest this update: Sun 11 May 2025 03:23:56 +0000 Manifest next update: Sun 18 May 2025 03:23:56 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: iguzLEcsa4ix8U1J06GG6FMsYjv0BhVJAtYMntGY7OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: May 11 03:23:56 2025 GMT Not After : May 18 03:23:56 2025 GMT Subject: CN=6820184c-d1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:05:d9:17:11:c3:34:02:d4:b5:b6:a3:37:3e: a7:57:c0:1a:de:ba:07:00:8d:94:36:8b:85:6f:9c: c3:65:94:36:9a:0b:e2:d0:17:38:d8:eb:82:f4:8d: 1f:76:bc:e1:9e:90:a8:fe:ec:a1:89:5f:ac:c1:d8: e8:4b:cc:de:ed:77:aa:41:13:14:6a:4b:3e:ad:7e: e1:72:99:73:cb:3e:01:81:57:90:db:ed:75:83:24: 96:6a:d8:f2:ee:f1:f5:1d:bd:d4:80:60:f8:dc:9d: 9b:a9:a1:dd:f5:f8:94:64:c1:72:88:ce:2a:78:4c: 88:ce:10:cf:d0:36:09:a0:a5:c3:d9:d8:10:c9:ef: 25:1f:c7:a8:56:f5:fe:11:3d:9d:73:5f:b3:41:26: 04:b1:16:62:29:d6:dc:58:86:51:a9:62:00:f6:3c: 55:0a:ad:3d:08:6a:e1:d8:30:e8:8e:4f:5a:1b:0f: 6f:a8:91:10:f4:95:63:7f:81:de:b3:38:c8:51:63: 2a:e5:84:4a:b9:46:2a:ec:6c:bf:76:a0:10:8e:f9: da:6c:d5:15:c7:4b:ab:d6:2e:07:af:30:48:73:ef: 6a:6a:f7:0a:74:3d:a7:cf:4f:17:b2:6c:b8:4d:dd: 06:25:55:2f:60:97:2c:6d:d5:ff:8c:39:25:52:9b: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EE:3D:1C:EA:06:05:2F:E2:EB:F4:29:76:76:B1:39:AE:A6:C2:15 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:cb:44:73:41:3a:08:26:cf:14:9a:7d:9b:de:2d:0c:f2:3a: a2:66:e2:15:eb:48:7f:45:8b:c9:3a:a6:89:42:81:09:7f:19: 6e:ee:7e:8d:74:84:1f:79:7a:e6:a0:0e:30:ec:81:fa:8c:80: 2f:2c:42:73:14:e5:94:44:ec:a8:48:6f:21:2f:66:37:a2:8f: 4e:50:33:53:ba:5b:3b:f8:76:96:50:21:cc:0e:a1:ce:62:58: 7c:31:3e:61:e1:46:9b:b6:09:13:ee:48:3e:2a:22:f6:58:73: ff:cd:6b:54:dd:c7:93:5c:fb:d9:8b:d6:fc:f9:6e:57:f7:74: 36:03:04:80:45:af:bc:7e:a8:6c:a0:4c:36:eb:7f:40:e6:5b: 05:90:fe:48:3e:d1:22:08:c9:e4:57:dd:cc:ad:52:35:51:eb: 21:c6:f5:6d:d0:39:88:19:2e:92:99:0e:3b:44:56:b1:2a:64: 1a:5f:80:c7:3a:aa:fa:df:ca:19:c9:58:3e:18:77:ca:16:37: b7:2e:6e:bc:f0:42:a6:20:e7:c7:32:de:4e:98:32:ae:b5:f6: 91:87:8b:c9:0e:e5:49:d0:84:69:20:47:50:0e:9f:e5:f6:07: a0:b7:b7:51:fe:f3:ac:51:98:92:5c:e2:14:a0:2d:94:2b:eb: 40:4c:dd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUwNTExMDMyMzU2WhcNMjUwNTE4MDMyMzU2WjAYMRYwFAYD VQQDEw02ODIwMTg0Yy1kMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QXZFxHDNALUtbajNz6nV8Aa3roHAI2UNouFb5zDZZQ2mgvi0Bc42OuC9I0f drzhnpCo/uyhiV+swdjoS8ze7XeqQRMUaks+rX7hcplzyz4BgVeQ2+11gySWatjy 7vH1Hb3UgGD43J2bqaHd9fiUZMFyiM4qeEyIzhDP0DYJoKXD2dgQye8lH8eoVvX+ ET2dc1+zQSYEsRZiKdbcWIZRqWIA9jxVCq09CGrh2DDojk9aGw9vqJEQ9JVjf4He szjIUWMq5YRKuUYq7Gy/dqAQjvnabNUVx0ur1i4HrzBIc+9qavcKdD2nz08Xsmy4 Td0GJVUvYJcsbdX/jDklUpuHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPuPRzq BgUv4uv0KXZ2sTmupsIVMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3y0RzQToIJs8Umn2b3i0M8jqiZuIV60h/RYvJOqaJQoEJfxlu7n6N dIQfeXrmoA4w7IH6jIAvLEJzFOWUROyoSG8hL2Y3oo9OUDNTuls7+HaWUCHMDqHO Ylh8MT5h4UabtgkT7kg+KiL2WHP/zWtU3ceTXPvZi9b8+W5X93Q2AwSARa+8fqhs oEw2639A5lsFkP5IPtEiCMnkV93MrVI1UeshxvVt0DmIGS6SmQ47RFaxKmQaX4DH Oqr638oZyVg+GHfKFje3Lm688EKmIOfHMt5OmDKutfaRh4vJDuVJ0IRpIEdQDp/l 9gegt7dR/vOsUZiSXOIUoC2UK+tATN3S -----END CERTIFICATE-----Generated at Mon May 12 16:54:58 2025 by rpki-client