$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: iBxfAtXERlCKRhH6ZSsREDSk8pu4WhpCscYEMbgQHeE= Subject key identifier: 2A:FF:B9:90:C9:7F:DF:E7:F2:A2:97:A7:E0:48:D8:48:FF:6E:26:72 Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 077E Signing time: Sat 10 May 2025 21:04:57 +0000 Manifest this update: Sat 10 May 2025 21:04:56 +0000 Manifest next update: Sat 17 May 2025 21:04:56 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: WEdJ+JwPJaAXD4Cw/mGPTu/BSaOzEXdwFpI7yMZTbwc=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: 0a3iDH5bkO5J9nl1C2L0muZWxN/ekxHt+EqAXGCfnCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: May 10 21:04:56 2025 GMT Not After : May 17 21:04:56 2025 GMT Subject: CN=681fbf79-3295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3a:1e:2a:13:d3:98:a1:2a:a9:fe:98:62:1c: ac:41:0b:a6:7a:74:f9:99:06:b3:e4:2d:f5:79:a5: 50:c6:9b:db:fc:46:75:79:b9:b5:31:60:42:4d:e2: 83:bf:55:27:bc:74:cb:ec:b4:64:d0:b4:a0:e5:11: ab:0f:28:11:e4:02:d9:fa:61:1e:7a:8e:df:c8:b0: c1:e0:96:a9:f7:f6:64:05:e5:9a:c1:b2:da:ec:12: e8:77:39:88:4f:8b:b7:53:ad:6f:08:48:cb:f4:a3: 02:0b:47:b8:af:32:3d:68:18:f1:1b:b1:9d:0e:0f: 7b:a6:0e:d3:75:07:3e:32:e8:b0:af:4b:ed:f0:49: 18:bc:ab:63:c0:61:d6:86:57:0d:b5:d3:be:0c:f8: cb:08:83:3f:7b:30:dc:ef:12:39:25:57:c2:53:5f: 45:f7:7c:6f:dd:66:0c:1a:2e:80:1c:86:8f:44:c5: 5b:a5:14:6d:8b:8f:ca:6f:16:7d:31:27:73:c3:af: f5:30:eb:75:a4:c1:11:2c:25:1a:7e:1c:ee:bf:60: 28:72:99:76:34:ba:fd:bd:95:93:87:10:cc:92:f0: 8b:94:7b:24:23:fa:92:76:33:2b:64:52:73:9f:ea: e5:9c:87:62:c7:2c:bc:ef:00:90:20:32:95:67:a7: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FF:B9:90:C9:7F:DF:E7:F2:A2:97:A7:E0:48:D8:48:FF:6E:26:72 X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b1:fe:38:d9:d0:7c:a8:33:70:d5:15:9b:d8:90:72:c5:67: 4f:10:6f:ab:2f:88:e6:0a:f5:ff:87:f3:49:17:6f:37:16:ad: 3c:e8:21:8d:53:99:64:04:28:89:02:54:28:ab:df:1f:cf:ff: eb:2c:41:49:d4:56:30:a4:13:b2:e5:8b:27:01:2a:05:54:26: 88:42:a2:cd:8d:d4:e0:1d:3a:1d:4e:77:a5:07:ea:3e:53:02: 12:2a:e9:9f:23:11:cb:a6:e5:b0:1e:40:86:ba:bd:0c:a1:61: b5:9a:76:7a:a3:21:27:e8:36:72:38:40:0a:54:72:39:d8:40: f9:ce:21:fa:2f:92:f8:bc:94:dc:8c:de:a9:06:ca:ac:6c:86: 1d:be:d3:80:35:6c:51:01:28:b0:1b:5f:88:e3:b8:f6:26:d7: cf:0c:a7:1c:c5:75:43:33:fc:5f:6d:57:31:62:6b:92:1a:9e: 96:81:51:55:d5:ba:5c:ee:3a:3c:9c:b6:3a:75:b3:fa:16:65: d8:ba:c1:8e:04:58:65:dd:1f:7b:8d:de:21:cc:fd:1f:29:07: 32:c2:b2:19:b2:75:f1:3a:3c:10:5a:8f:77:56:ee:3e:41:a7: f7:84:d0:27:7e:70:19:0e:12:53:b6:b6:25:dc:7e:42:17:60: 5f:aa:2f:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjUwNTEwMjEwNDU2WhcNMjUwNTE3MjEwNDU2WjAYMRYwFAYD VQQDEw02ODFmYmY3OS0zMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9zoeKhPTmKEqqf6YYhysQQumenT5mQaz5C31eaVQxpvb/EZ1ebm1MWBCTeKD v1UnvHTL7LRk0LSg5RGrDygR5ALZ+mEeeo7fyLDB4Jap9/ZkBeWawbLa7BLodzmI T4u3U61vCEjL9KMCC0e4rzI9aBjxG7GdDg97pg7TdQc+Muiwr0vt8EkYvKtjwGHW hlcNtdO+DPjLCIM/ezDc7xI5JVfCU19F93xv3WYMGi6AHIaPRMVbpRRti4/KbxZ9 MSdzw6/1MOt1pMERLCUafhzuv2Aocpl2NLr9vZWThxDMkvCLlHskI/qSdjMrZFJz n+rlnIdixyy87wCQIDKVZ6dZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr/uZDJ f9/n8qKXp+BI2Ej/biZyMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGsf442dB8qDNw1RWb2JByxWdPEG+rL4jmCvX/h/NJF283Fq086CGN U5lkBCiJAlQoq98fz//rLEFJ1FYwpBOy5YsnASoFVCaIQqLNjdTgHTodTnelB+o+ UwISKumfIxHLpuWwHkCGur0MoWG1mnZ6oyEn6DZyOEAKVHI52ED5ziH6L5L4vJTc jN6pBsqsbIYdvtOANWxRASiwG1+I47j2JtfPDKccxXVDM/xfbVcxYmuSGp6WgVFV 1bpc7jo8nLY6dbP6FmXYusGOBFhl3R97jd4hzP0fKQcywrIZsnXxOjwQWo93Vu4+ Qaf3hNAnfnAZDhJTtrYl3H5CF2Bfqi/k -----END CERTIFICATE-----Generated at Sun May 11 02:24:00 2025 by rpki-client