$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: VPgfMhfQ+p9ucTf8v9Db3IhzJ6H9CpLxstpmv1/aU3M= Subject key identifier: B8:91:6C:2B:3C:FB:CD:14:E5:FD:00:59:16:8E:0D:FA:A8:AD:09:38 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0EF2 Signing time: Sat 10 May 2025 21:06:38 +0000 Manifest this update: Sat 10 May 2025 21:06:38 +0000 Manifest next update: Sat 17 May 2025 21:06:38 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: hR/S5DMlgY3lTTuQOmrN5k6JIJ7jgS/hUugN1OL611Y=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: May 10 21:06:38 2025 GMT Not After : May 17 21:06:38 2025 GMT Subject: CN=681fbfde-efac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:0c:41:c7:ed:bb:4b:fd:4f:e5:23:f0:42: f8:cf:45:bf:87:b3:61:92:ee:ac:ff:5c:3f:0b:fe: 6b:e9:83:6f:d5:68:6a:b1:ca:7c:2f:39:30:a2:50: e5:65:03:e5:2d:2b:d9:22:ee:2e:a2:51:05:10:ca: 55:14:94:66:0e:52:66:5f:b9:6e:74:11:6c:6c:a5: 3d:dc:4e:7e:23:b8:d9:77:88:51:48:fa:42:15:46: 5f:e2:64:24:34:83:41:0d:9a:58:08:52:9b:ef:0f: 93:17:22:c1:b4:db:43:9e:d1:29:73:a9:a4:e5:25: c1:90:92:d2:ea:15:34:08:30:1f:90:90:0a:83:2b: 82:41:81:7f:76:be:25:c0:92:39:db:98:f5:d1:98: 76:e7:2d:64:0e:3d:db:94:d8:cc:84:52:53:f7:60: 0c:48:a2:45:67:de:2b:0f:cb:32:69:d0:61:18:60: b9:d3:cc:16:bf:48:4f:2f:9a:f4:9f:8c:4b:3d:38: 5c:6c:2f:c1:7a:4a:f9:2a:6b:37:e8:29:f8:ee:db: 4b:23:df:42:df:b1:c2:3c:05:58:53:2d:08:d9:39: 1f:81:bf:6d:07:4a:8e:a4:82:14:c0:77:eb:fc:51: f1:a0:f1:80:27:7d:7c:71:83:a4:aa:42:07:7c:63: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:91:6C:2B:3C:FB:CD:14:E5:FD:00:59:16:8E:0D:FA:A8:AD:09:38 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7a:7a:0e:21:8f:f8:76:01:ba:49:b9:46:9b:7f:4b:f7:cb: 66:f6:45:8a:9c:55:b1:3e:4e:72:3b:d3:45:22:62:15:05:9f: b9:78:74:cd:01:e3:6b:10:8f:25:8d:5f:9a:27:2b:e6:7d:4e: 9d:b6:bc:19:9b:d6:6b:84:54:d0:e5:c6:7e:5e:89:fe:96:15: 70:8d:d1:28:48:69:af:66:14:1c:36:8e:5a:65:f3:32:ca:f1: c2:b4:41:92:f5:d6:2c:85:fd:cf:f9:71:0d:5a:de:37:56:af: a6:e9:ae:37:86:a5:08:f5:c5:66:5f:68:e5:e7:78:46:60:7b: e8:40:7f:c5:b2:57:9a:a5:ca:37:56:a5:f8:2e:30:e3:98:76: 40:53:13:e0:21:6c:87:a6:c5:02:a6:f4:e4:32:7d:44:d3:71: 9d:1d:33:86:09:76:41:9b:0b:cb:52:97:7a:c8:f8:39:9b:b7: db:80:e8:4d:8f:f4:51:e3:7e:92:a3:12:51:8d:67:7b:d9:0f: 10:11:61:49:56:fd:9b:1c:d0:b8:97:d2:79:9c:f1:cd:03:97: fe:40:4e:ca:ce:dd:42:8b:f4:fa:b7:44:65:ba:f5:90:d7:5c: 4a:bd:0e:80:bc:fc:1d:eb:6c:98:1d:81:85:30:60:45:7a:88: 38:bd:8f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUwNTEwMjEwNjM4WhcNMjUwNTE3MjEwNjM4WjAYMRYwFAYD VQQDEw02ODFmYmZkZS1lZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qQMQcftu0v9T+Uj8EL4z0W/h7Nhku6s/1w/C/5r6YNv1Whqscp8LzkwolDl ZQPlLSvZIu4uolEFEMpVFJRmDlJmX7ludBFsbKU93E5+I7jZd4hRSPpCFUZf4mQk NINBDZpYCFKb7w+TFyLBtNtDntEpc6mk5SXBkJLS6hU0CDAfkJAKgyuCQYF/dr4l wJI525j10Zh25y1kDj3blNjMhFJT92AMSKJFZ94rD8syadBhGGC508wWv0hPL5r0 n4xLPThcbC/Bekr5Kms36Cn47ttLI99C37HCPAVYUy0I2Tkfgb9tB0qOpIIUwHfr /FHxoPGAJ318cYOkqkIHfGOJ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiRbCs8 +80U5f0AWRaODfqorQk4MB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMenoOIY/4dgG6SblGm39L98tm9kWKnFWxPk5yO9NFImIVBZ+5eHTN AeNrEI8ljV+aJyvmfU6dtrwZm9ZrhFTQ5cZ+Xon+lhVwjdEoSGmvZhQcNo5aZfMy yvHCtEGS9dYshf3P+XENWt43Vq+m6a43hqUI9cVmX2jl53hGYHvoQH/Fsleapco3 VqX4LjDjmHZAUxPgIWyHpsUCpvTkMn1E03GdHTOGCXZBmwvLUpd6yPg5m7fbgOhN j/RR436SoxJRjWd72Q8QEWFJVv2bHNC4l9J5nPHNA5f+QE7Kzt1Ci/T6t0RluvWQ 11xKvQ6AvPwd62yYHYGFMGBFeog4vY+d -----END CERTIFICATE-----Generated at Sun May 11 02:06:52 2025 by rpki-client