$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: c07TGTe6OtRR+YEKXgDxS1Wv9KgFsTno06BJc99wBsk= Subject key identifier: C4:00:07:33:68:7B:09:30:27:E3:1D:05:4F:61:A1:B3:7D:B6:4F:EF Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 04FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 04F9 Signing time: Mon 12 May 2025 23:29:33 +0000 Manifest this update: Mon 12 May 2025 23:29:33 +0000 Manifest next update: Mon 19 May 2025 23:29:33 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: 6C7vLWO6yNIiVYlNXsSKANFkS30Fz9ErMUW7G7+f9oI=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: May 12 23:29:33 2025 GMT Not After : May 19 23:29:33 2025 GMT Subject: CN=6822845d-8aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:02:cb:0a:3a:4e:7c:2d:3f:1c:4f:91:9d: 3b:0d:05:ec:9e:0f:51:3b:5d:75:f7:df:bc:13:56: 46:13:5f:9b:c3:33:02:56:c7:7f:89:09:31:f7:3e: da:09:9c:8d:53:0e:9d:3b:1d:6e:34:7d:62:94:c5: 85:13:54:b2:aa:c1:f0:57:bd:53:9f:02:88:b6:fe: ee:09:4c:81:e9:77:85:e3:7e:cb:11:44:4a:cd:1f: c8:7a:31:cd:a2:11:16:bc:e9:f2:32:72:b8:d1:90: 9d:cb:83:b5:ed:17:bf:78:b7:37:65:16:61:f7:cb: d5:7d:0b:0e:27:5f:a0:b7:cd:bc:b3:f7:ae:64:1c: ad:3a:b3:59:56:3c:be:c5:32:65:d8:0c:ed:f7:5a: 76:5c:bd:2c:41:c4:f9:b3:f1:cc:1a:f4:60:60:0d: e1:ab:aa:d0:df:84:21:ae:8f:29:75:c0:6c:ab:ac: af:2c:75:0c:7c:5b:94:c8:62:33:35:51:7c:f1:97: 0d:52:76:27:8b:da:a0:0d:7b:d3:6e:d2:45:cf:4b: 66:66:98:a9:a6:43:4b:d3:05:18:84:8a:62:c1:da: b8:8f:b5:2c:ef:12:d8:81:14:1c:57:af:ab:99:5e: 8d:1a:4f:94:0a:fb:4d:99:fb:3a:6d:63:fa:cc:a4: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:00:07:33:68:7B:09:30:27:E3:1D:05:4F:61:A1:B3:7D:B6:4F:EF X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:55:25:44:ce:9b:7e:7b:bb:19:dd:62:9b:5a:68:d5:94:8d: 6a:22:57:b8:c5:71:18:b5:63:85:e7:8c:4c:4b:95:dc:8a:77: d3:7e:76:81:a8:81:ba:89:72:b8:77:7d:3b:32:1a:d0:b9:c4: 29:a5:b9:62:99:77:50:eb:ef:fb:c8:b3:02:43:5d:6e:3e:33: ad:9d:56:8d:a0:12:15:a0:7c:96:1d:3b:c7:ac:a2:90:f6:6e: 66:a0:2c:21:00:e7:8d:52:3d:21:84:0e:bc:d5:d5:47:e8:cf: 5d:37:51:be:4a:5e:7c:68:f2:ac:85:69:6a:3e:38:f4:44:f3: 3b:79:e2:e2:dc:70:7d:4e:3f:33:f5:e7:cf:55:dc:e7:bf:15: 3b:d2:d3:04:f9:7b:84:c1:90:c9:8a:a7:24:a3:33:32:8c:cc: f5:f6:1c:01:bc:83:56:df:52:2f:33:27:70:88:60:92:6c:c5: fe:13:f0:81:d6:f1:3a:0c:c6:e7:b8:ce:76:79:47:9a:a5:f8: fb:7d:27:35:50:0c:4c:e4:15:a5:0b:54:4c:57:ef:d6:2b:89: c6:09:24:eb:56:96:36:7d:e4:5f:9b:72:93:74:09:f0:35:4f: 89:f3:af:a1:9e:e7:6b:25:c7:e9:cb:8e:18:2e:8b:c0:20:7a: 5f:86:86:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUwNTEyMjMyOTMzWhcNMjUwNTE5MjMyOTMzWjAYMRYwFAYD VQQDEw02ODIyODQ1ZC04YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KECywo6TnwtPxxPkZ07DQXsng9RO11199+8E1ZGE1+bwzMCVsd/iQkx9z7a CZyNUw6dOx1uNH1ilMWFE1SyqsHwV71TnwKItv7uCUyB6XeF437LEURKzR/IejHN ohEWvOnyMnK40ZCdy4O17Re/eLc3ZRZh98vVfQsOJ1+gt828s/euZBytOrNZVjy+ xTJl2Azt91p2XL0sQcT5s/HMGvRgYA3hq6rQ34Qhro8pdcBsq6yvLHUMfFuUyGIz NVF88ZcNUnYni9qgDXvTbtJFz0tmZpippkNL0wUYhIpiwdq4j7Us7xLYgRQcV6+r mV6NGk+UCvtNmfs6bWP6zKSXLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQABzNo ewkwJ+MdBU9hobN9tk/vMB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsVSVEzpt+e7sZ3WKbWmjVlI1qIle4xXEYtWOF54xMS5XcinfTfnaB qIG6iXK4d307MhrQucQppblimXdQ6+/7yLMCQ11uPjOtnVaNoBIVoHyWHTvHrKKQ 9m5moCwhAOeNUj0hhA681dVH6M9dN1G+Sl58aPKshWlqPjj0RPM7eeLi3HB9Tj8z 9efPVdznvxU70tME+XuEwZDJiqckozMyjMz19hwBvINW31IvMydwiGCSbMX+E/CB 1vE6DMbnuM52eUeapfj7fSc1UAxM5BWlC1RMV+/WK4nGCSTrVpY2feRfm3KTdAnw NU+J86+hnudrJcfpy44YLovAIHpfhoYE -----END CERTIFICATE-----Generated at Tue May 13 04:31:56 2025 by rpki-client