$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: KYVIwx7CfEoVQ89yRfQC9qsssqozk1d6FxG/OxiPiQg= Subject key identifier: 05:6F:AC:BC:2D:77:1F:AC:B0:FE:EF:81:8C:AF:4D:1B:B4:25:4D:8B Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0122 Signing time: Sun 11 May 2025 03:34:06 +0000 Manifest this update: Sun 11 May 2025 03:34:05 +0000 Manifest next update: Sun 18 May 2025 03:34:05 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: 4UJwHj1HIYxbRyGcWU72eYhYwYA/7Zg5muQRPisifvk=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: May 11 03:34:05 2025 GMT Not After : May 18 03:34:05 2025 GMT Subject: CN=68201aad-6ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:a2:e5:02:1f:ff:13:eb:2d:75:13:ac:6d: ab:e1:b6:63:ab:8a:c3:25:5e:d8:5e:7c:11:38:84: 7e:6b:cf:50:b0:93:3e:12:cc:17:f7:ee:5f:8b:3b: 99:31:3d:ad:67:04:ea:9f:99:e0:2a:8e:6a:28:fb: 08:c3:57:67:f8:69:b0:e1:17:e9:d8:81:55:58:c9: b5:30:e9:23:61:23:4a:d5:62:3c:51:18:0d:bf:37: a4:65:59:a1:3f:5d:b5:7a:43:ba:e8:19:70:64:48: b2:3a:b0:df:46:95:3b:e0:aa:e5:91:cb:f4:27:96: 8c:9c:e3:60:e5:c0:8a:18:54:fd:63:ee:c7:53:77: f5:6f:09:e9:0e:6d:8b:8e:9a:9c:2c:a7:eb:a9:ff: cb:d3:ad:53:92:17:e2:ad:16:99:37:9b:ee:18:6c: d2:d7:fb:c7:a5:9d:af:77:9f:dc:ba:fa:e5:34:87: cc:af:19:96:e4:e3:a5:d3:44:3c:7b:ef:70:48:a6: fe:40:85:0b:be:01:ca:ac:cd:f5:b3:d6:f3:60:4d: 8e:65:66:93:4a:5f:37:e4:2c:50:eb:63:32:2b:f8: 18:64:b6:a1:b9:21:fb:ac:94:92:e7:36:af:0b:d9: af:ec:64:76:2b:68:db:bd:ae:b5:c8:bb:4f:6c:92: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6F:AC:BC:2D:77:1F:AC:B0:FE:EF:81:8C:AF:4D:1B:B4:25:4D:8B X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:0c:75:c3:a1:bd:83:ec:57:c5:de:9e:b2:1a:82:4f:36:d0: 4a:30:41:24:3c:6b:66:21:70:96:f8:6e:71:ad:60:fa:68:34: 59:45:7e:0c:68:3f:9b:d4:c7:9f:10:6f:40:ab:19:5b:7e:c4: f0:52:88:1e:8f:da:ad:1f:5a:78:5b:af:1c:7b:82:28:77:d3: a3:94:30:8d:38:a4:58:4c:06:70:4e:24:28:37:ea:95:18:ae: 67:04:c1:60:73:cb:f4:27:5a:af:5b:ea:a8:fb:ad:94:ee:f5: 1a:41:68:8b:27:ff:5d:12:97:8a:1e:2a:a8:b2:1e:86:e8:24: 10:ed:6a:2d:08:84:b2:d7:db:39:66:2e:e4:a6:7d:6a:8f:db: 38:cc:68:bc:a4:d1:dc:5d:b5:6b:82:ed:7f:b4:70:b6:73:a3: 01:cb:92:ca:25:9b:5c:bd:69:b6:a5:04:bc:f3:2c:8d:e0:bf: f8:20:dd:2b:e3:e1:0c:4b:bd:62:b2:dd:56:96:55:01:21:d0: 75:79:99:21:4d:f9:7a:6f:5c:d8:11:d6:8c:1c:01:fc:e3:8a: 7e:4c:a6:e0:5e:ef:e4:cc:9b:85:c0:51:5c:5e:73:b6:61:0b: 99:cf:18:b9:ca:06:ce:ea:99:fe:1e:2f:2a:da:31:24:03:fc: e8:db:2d:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwNTExMDMzNDA1WhcNMjUwNTE4MDMzNDA1WjAYMRYwFAYD VQQDEw02ODIwMWFhZC02ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v6i5QIf/xPrLXUTrG2r4bZjq4rDJV7YXnwROIR+a89QsJM+EswX9+5fizuZ MT2tZwTqn5ngKo5qKPsIw1dn+Gmw4Rfp2IFVWMm1MOkjYSNK1WI8URgNvzekZVmh P121ekO66BlwZEiyOrDfRpU74Krlkcv0J5aMnONg5cCKGFT9Y+7HU3f1bwnpDm2L jpqcLKfrqf/L061TkhfirRaZN5vuGGzS1/vHpZ2vd5/cuvrlNIfMrxmW5OOl00Q8 e+9wSKb+QIULvgHKrM31s9bzYE2OZWaTSl835CxQ62MyK/gYZLahuSH7rJSS5zav C9mv7GR2K2jbva61yLtPbJLloQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVvrLwt dx+ssP7vgYyvTRu0JU2LMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApDHXDob2D7FfF3p6yGoJPNtBKMEEkPGtmIXCW+G5xrWD6aDRZRX4M aD+b1MefEG9AqxlbfsTwUogej9qtH1p4W68ce4Iod9OjlDCNOKRYTAZwTiQoN+qV GK5nBMFgc8v0J1qvW+qo+62U7vUaQWiLJ/9dEpeKHiqosh6G6CQQ7WotCISy19s5 Zi7kpn1qj9s4zGi8pNHcXbVrgu1/tHC2c6MBy5LKJZtcvWm2pQS88yyN4L/4IN0r 4+EMS71ist1WllUBIdB1eZkhTfl6b1zYEdaMHAH844p+TKbgXu/kzJuFwFFcXnO2 YQuZzxi5ygbO6pn+Hi8q2jEkA/zo2y09 -----END CERTIFICATE-----Generated at Tue May 13 01:46:54 2025 by rpki-client