$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: e5G0LjZ8N6aQ8XkbxqldyEmHOoppMgOcRIUenW5T2W8= Subject key identifier: 6D:36:31:11:F1:25:9C:F9:2C:9A:EC:7A:DE:FA:41:8A:C7:08:E5:96 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 0134 Signing time: Tue 13 May 2025 03:41:07 +0000 Manifest this update: Tue 13 May 2025 03:41:06 +0000 Manifest next update: Tue 20 May 2025 03:41:06 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: hPnpzK7ngbLW+gSYS/KvcJhAIbutlDJJJaNBzTPgUlc=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: May 13 03:41:06 2025 GMT Not After : May 20 03:41:06 2025 GMT Subject: CN=6822bf53-6beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:b5:6d:c2:59:5c:69:41:87:48:fd:9d:8b: 5d:97:2a:b0:af:97:d5:95:a2:3c:05:7a:06:3e:55: cf:ed:71:79:1a:22:75:17:d0:03:1a:a0:56:60:ac: 85:57:9a:57:65:20:4c:62:4f:9e:99:0f:54:65:a9: 1c:9c:2c:ee:cf:19:ad:81:ed:8f:28:bf:f3:5d:74: 0c:be:ce:21:6c:e0:f8:cf:1b:b8:de:24:e4:0b:ca: 82:93:1b:6a:47:40:d2:dd:0f:8d:a0:ff:07:6c:dc: fc:09:5a:5f:c5:4e:c2:16:89:f3:04:cb:73:38:a4: 17:6d:75:d8:bd:11:20:ac:04:a8:bb:0c:c4:8e:28: b4:c6:da:5e:00:e5:ad:bf:48:25:90:53:24:b8:56: d3:51:13:c3:7d:92:c6:b3:8d:26:4b:78:54:17:80: c7:5d:49:4a:af:af:6b:7d:e3:e2:09:4a:bd:27:2f: b7:31:ea:af:8c:ae:7d:22:15:73:3f:85:14:c8:3b: b4:5b:15:f2:f8:b4:b2:9a:7a:cc:2b:4d:3c:55:44: e6:fa:4c:13:29:45:64:42:f2:eb:02:74:2a:4b:35: 9c:b4:85:52:2a:e1:39:e2:c6:35:45:09:b3:ea:e8: d5:fd:08:d6:0e:dc:3d:9a:6b:ab:5f:31:5e:97:e2: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:36:31:11:F1:25:9C:F9:2C:9A:EC:7A:DE:FA:41:8A:C7:08:E5:96 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:74:ba:84:2a:ab:24:6e:48:07:13:7b:9d:09:f0:e9:28:eb: 44:0b:de:fd:a0:90:bc:1c:28:63:ad:9a:06:87:70:07:ba:c2: 3c:aa:07:7a:e8:92:57:03:eb:b0:c8:35:1c:3e:e5:92:d1:30: 9b:02:0a:d7:b0:32:e6:46:20:09:87:83:9f:02:78:2b:7a:60: 76:38:04:8d:be:42:d2:5e:53:22:16:4c:ab:69:cf:64:20:8f: 17:6f:6f:db:72:3c:a5:38:ef:13:3c:a4:55:a3:76:4e:1f:d7: 69:37:df:3e:59:30:1d:2c:a2:33:a7:a7:f8:ca:a0:59:0f:b9: 06:73:9a:f8:44:8a:da:8a:31:3b:fe:5c:57:41:bf:04:79:2d: 30:63:0c:f4:05:db:e5:57:7e:e0:b4:6a:fb:dd:9f:9a:ec:a5: 5f:49:25:67:5b:4a:90:a9:34:aa:d9:01:4e:60:cd:c9:92:41: e4:e4:da:74:f4:18:02:b0:89:66:d2:6d:b0:62:a3:c7:4d:1f: 0f:40:8a:84:0c:1b:89:98:d6:20:94:d4:86:ab:e0:0f:de:12: 0b:da:f1:80:01:87:97:66:21:74:a4:a9:43:7a:1f:2b:5b:4b: a2:d3:cc:92:84:92:3b:8f:a1:ab:d5:08:cb:66:2b:46:db:86: 76:7c:d8:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwNTEzMDM0MTA2WhcNMjUwNTIwMDM0MTA2WjAYMRYwFAYD VQQDEw02ODIyYmY1My02YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+W1bcJZXGlBh0j9nYtdlyqwr5fVlaI8BXoGPlXP7XF5GiJ1F9ADGqBWYKyF V5pXZSBMYk+emQ9UZakcnCzuzxmtge2PKL/zXXQMvs4hbOD4zxu43iTkC8qCkxtq R0DS3Q+NoP8HbNz8CVpfxU7CFonzBMtzOKQXbXXYvREgrASouwzEjii0xtpeAOWt v0glkFMkuFbTURPDfZLGs40mS3hUF4DHXUlKr69rfePiCUq9Jy+3MeqvjK59IhVz P4UUyDu0WxXy+LSymnrMK008VUTm+kwTKUVkQvLrAnQqSzWctIVSKuE54sY1RQmz 6ujV/QjWDtw9mmurXzFel+IdLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG02MRHx JZz5LJrset76QYrHCOWWMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBndLqEKqskbkgHE3udCfDpKOtEC979oJC8HChjrZoGh3AHusI8qgd6 6JJXA+uwyDUcPuWS0TCbAgrXsDLmRiAJh4OfAngremB2OASNvkLSXlMiFkyrac9k II8Xb2/bcjylOO8TPKRVo3ZOH9dpN98+WTAdLKIzp6f4yqBZD7kGc5r4RIraijE7 /lxXQb8EeS0wYwz0BdvlV37gtGr73Z+a7KVfSSVnW0qQqTSq2QFOYM3JkkHk5Np0 9BgCsIlm0m2wYqPHTR8PQIqEDBuJmNYglNSGq+AP3hIL2vGAAYeXZiF0pKlDeh8r W0ui08yShJI7j6Gr1QjLZitG24Z2fNgB -----END CERTIFICATE-----Generated at Tue May 13 18:38:39 2025 by rpki-client