$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft File: p93zVatoEjcBpb3RX2W6lktd4DU.mft (raw, json) Hash identifier: tsHS8eFb5HnfrOGeDzxLojLdqsX8W9F6LDalCYvnk+0= Subject key identifier: DB:4D:90:91:72:10:2B:FA:F5:71:85:6D:BB:9F:9C:A3:5A:35:F0:27 Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35 Certificate issuer: /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft Manifest number: 7C Signing time: Tue 13 May 2025 05:53:16 +0000 Manifest this update: Tue 13 May 2025 05:53:16 +0000 Manifest next update: Tue 20 May 2025 05:53:16 +0000 Files and hashes: 1: p93zVatoEjcBpb3RX2W6lktd4DU.crl (hash: VLppPI1CIMgXApXIjxwgZAmSy3Ydt50zy2uqBe6koFE=) 2: 77BC7D3A74F411EF8B9E1067C4F9AE02.roa (hash: TnDDPyuYfLyHK//K+Hn8T0/qN9TuFXBURI4PhKRtzFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035 Validity Not Before: May 13 05:53:16 2025 GMT Not After : May 20 05:53:16 2025 GMT Subject: CN=6822de4c-0e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:6e:3b:9b:bb:78:ff:4c:1c:49:9d:3d:df: 43:3a:7d:7a:b8:72:f9:07:d8:fc:0a:36:59:5c:8c: d3:11:04:7c:5b:75:65:80:7b:65:8d:21:3d:7d:f3: cb:7c:48:aa:50:96:75:f1:d1:59:c1:e5:05:5e:4a: 95:a2:8c:69:f2:31:c4:5a:0f:25:97:9c:e1:33:f5: 29:9f:57:c8:65:a4:01:cc:38:31:ab:64:70:e5:7c: 61:fb:bd:d7:f9:5f:85:b1:35:e6:48:c6:42:99:44: 3d:ef:8a:62:66:fb:de:70:81:62:5a:24:0a:cd:f7: 8f:2a:e2:2c:1b:e2:ba:09:1d:b8:9b:84:9d:0a:1f: 71:91:23:e8:27:fa:49:61:57:17:81:67:2c:73:12: 94:d6:8c:59:81:2d:76:ab:38:1b:c3:21:34:68:49: af:1a:2f:d8:48:01:5d:cd:c2:d7:28:6d:f5:2c:a5: 1d:e3:6c:f8:df:61:45:9d:b1:a8:d5:21:81:f7:f5: e3:0e:c8:63:cd:a2:89:11:6b:35:e7:57:f4:01:a5: 8e:b4:4f:6e:b6:d2:14:38:4f:3c:c7:1a:77:c1:1e: a3:00:c0:21:5c:74:2e:48:85:1f:c2:59:9c:fc:8a: 0f:e2:1a:63:9f:64:ec:49:2d:c2:69:65:b8:94:19: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4D:90:91:72:10:2B:FA:F5:71:85:6D:BB:9F:9C:A3:5A:35:F0:27 X509v3 Authority Key Identifier: keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f5:4c:b9:ee:e2:c7:91:05:26:5c:8f:ce:ed:b3:a5:5e:ed: a7:0a:e5:3d:7b:15:95:86:c7:2f:c9:9f:14:26:0f:08:65:55: 3f:da:4b:64:71:8a:78:e2:fa:41:e3:9d:79:d6:03:f4:07:8e: 84:72:b3:47:c9:fa:1c:66:f1:7b:92:a2:94:46:41:6a:15:ad: a3:d0:61:7d:41:86:34:5e:6a:b3:63:46:f4:a1:de:7b:ec:4d: 9c:e5:2e:84:82:e9:63:90:22:98:55:01:ec:5c:bf:e5:ad:e5: a0:1b:36:c9:6b:a2:0f:a2:f9:7d:95:f1:a3:fe:6a:56:8d:cf: b6:4d:f2:26:ae:bc:2e:e0:df:82:cb:87:24:1e:ac:99:2f:57: b1:4b:38:ee:61:b0:d4:e8:ff:29:ab:1f:5a:7a:49:a1:fa:44: 4e:fd:c3:8b:35:f7:ed:ae:e0:1c:16:3a:a6:5e:58:d1:9a:20: e7:39:f2:ff:2b:3a:23:2f:40:03:89:a7:5d:32:f2:78:72:55: 7d:b7:01:05:ce:48:01:3d:60:b5:dd:52:07:38:d0:1a:d7:2b: 5f:0c:6d:94:c9:37:93:1e:63:26:fc:f8:27:c0:9f:cc:c9:31: ca:9e:a1:f5:f6:69:5a:08:da:82:b5:bd:39:15:0b:f2:95:88: de:ec:41:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NUExQTExMC8GA1UEBRMoQTdEREYzNTVBQjY4MTIzNzAxQTVCREQxNUY2NUJBOTY0 QjVERTAzNTAeFw0yNTA1MTMwNTUzMTZaFw0yNTA1MjAwNTUzMTZaMBgxFjAUBgNV BAMTDTY4MjJkZTRjLTBlODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4dW47m7t4/0wcSZ0930M6fXq4cvkH2PwKNllcjNMRBHxbdWWAe2WNIT1988t8 SKpQlnXx0VnB5QVeSpWijGnyMcRaDyWXnOEz9SmfV8hlpAHMODGrZHDlfGH7vdf5 X4WxNeZIxkKZRD3vimJm+95wgWJaJArN948q4iwb4roJHbibhJ0KH3GRI+gn+klh VxeBZyxzEpTWjFmBLXarOBvDITRoSa8aL9hIAV3NwtcobfUspR3jbPjfYUWdsajV IYH39eMOyGPNookRazXnV/QBpY60T2620hQ4TzzHGnfBHqMAwCFcdC5IhR/CWZz8 ig/iGmOfZOxJLcJpZbiUGUPJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU202QkXIQ K/r1cYVtu5+co1o18CcwHwYDVR0jBBgwFoAUp93zVatoEjcBpb3RX2W6lktd4DUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1QTFBL0MyRjRFRTIwNzRB NjExRUZBRTU0NzgzQ0M0RjlBRTAyL3A5M3pWYXRvRWpjQnBiM1JYMlc2bGt0ZDRE VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDkzelZhdG9FamNCcGIzUlgyVzZsa3RkNERVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 QTFBL0MyRjRFRTIwNzRBNjExRUZBRTU0NzgzQ0M0RjlBRTAyL3A5M3pWYXRvRWpj QnBiM1JYMlc2bGt0ZDREVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALf1TLnu4seRBSZcj87ts6Ve7acK5T17FZWGxy/JnxQmDwhlVT/aS2Rx inji+kHjnXnWA/QHjoRys0fJ+hxm8XuSopRGQWoVraPQYX1BhjRearNjRvSh3nvs TZzlLoSC6WOQIphVAexcv+Wt5aAbNslrog+i+X2V8aP+alaNz7ZN8iauvC7g34LL hyQerJkvV7FLOO5hsNTo/ymrH1p6SaH6RE79w4s19+2u4BwWOqZeWNGaIOc58v8r OiMvQAOJp10y8nhyVX23AQXOSAE9YLXdUgc40BrXK18MbZTJN5MeYyb8+CfAn8zJ McqeofX2aVoI2oK1vTkVC/KViN7sQXo= -----END CERTIFICATE-----Generated at Tue May 13 15:24:02 2025 by rpki-client