$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: 3J/jKV9tmMJboe2pseGI08Ay6EydVMqBLKjwinSJpnY= Subject key identifier: 4E:BF:F0:C5:2C:C6:D8:FB:5B:47:35:FA:E5:75:D5:95:8B:1F:E6:06 Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 2199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 2180 Signing time: Wed 14 May 2025 15:59:34 +0000 Manifest this update: Wed 14 May 2025 15:59:34 +0000 Manifest next update: Wed 21 May 2025 15:59:34 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: 1kqEiSLB1QOHGF47DDxzsnJk0Jj1jidjNMFy6g+krYY=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: xq1A/DwEya72JUauXcCDXoZyXlE8M2olRWGCrYUUkIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8601 (0x2199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: May 14 15:59:34 2025 GMT Not After : May 21 15:59:34 2025 GMT Subject: CN=6824bde6-c133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:9f:1b:1d:8c:a9:15:2a:a2:cc:fc:71:bc: 41:bb:80:88:76:d5:80:ad:78:f6:9a:cf:82:06:e9: bc:0e:62:97:7e:39:c6:e6:6a:a0:1d:e4:ce:4c:b9: 93:5a:4d:f7:85:6a:2b:36:30:2a:b9:9d:67:47:6f: 72:cc:35:07:28:af:c8:3f:93:31:46:14:61:80:d4: e5:12:70:25:64:32:ad:90:b9:01:0d:17:e1:3c:c9: 35:28:3a:8b:60:99:9b:2c:0a:fe:d3:1b:ba:17:18: d4:a7:4e:e1:5d:ca:2e:e7:db:06:53:29:c0:27:93: 07:21:a0:d1:7f:c5:4f:c8:16:99:c9:04:d3:a3:6c: c4:d3:e1:9c:26:a1:e2:dd:06:e3:25:47:5e:2e:19: 21:6e:ef:37:a9:2a:63:d7:9f:fe:39:7d:06:7d:0d: e6:43:df:51:e3:a0:27:62:17:b6:5d:b4:9a:24:6c: 0c:70:bc:72:5d:c9:d0:9e:f7:8b:3a:6f:6e:3f:83: ea:a1:7e:c1:05:f3:ed:ae:0e:1d:4b:75:b6:3c:66: f4:03:8d:fa:b9:80:cd:d2:66:13:cc:0a:9a:1e:1d: a1:10:53:c5:fc:df:ee:2b:bf:27:46:b6:1d:e9:3d: e4:34:1e:f0:65:07:2b:b2:af:a5:d2:50:53:4b:5c: 7c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:F0:C5:2C:C6:D8:FB:5B:47:35:FA:E5:75:D5:95:8B:1F:E6:06 X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5f:92:b4:73:69:f7:69:fd:c6:8f:9a:a1:42:d0:a9:2b:6b: 31:89:23:dc:47:a0:4f:ae:a7:19:96:62:f6:f6:9f:d1:52:13: 19:16:38:ef:ec:d3:8b:67:59:cc:c6:5e:96:f5:60:2a:a2:cd: 4d:8b:2d:e4:1f:64:a4:6c:b0:ed:fd:28:d7:ee:5b:61:9a:d1: d6:61:b9:66:ad:44:9b:77:e2:8c:40:e9:bb:a9:9a:e8:32:f4: 6b:87:28:55:fd:86:96:67:11:32:6d:97:97:6e:eb:a5:2c:ff: a3:fd:d4:32:b4:34:c5:1f:97:22:10:a8:5c:d7:6d:56:0d:05: b2:68:56:3f:3a:cc:5d:cb:6b:74:a8:eb:27:90:50:28:fa:07: c4:6a:46:67:2c:00:35:19:bc:86:e8:0d:b0:c1:b1:61:a4:5e: 41:61:16:4e:67:35:71:9d:e6:dd:21:08:49:7e:23:4c:a1:a9: d3:1b:8c:db:c8:2e:bc:46:ec:79:c7:0f:c3:11:a9:eb:40:db: 81:41:f5:9b:c5:e7:7b:19:0b:ac:ac:9b:0d:b0:35:e6:9a:21: e3:0a:77:5d:25:7b:ec:aa:34:12:86:83:eb:91:4d:11:b4:79: 06:7b:af:ce:68:9c:2c:b1:15:d6:22:6e:69:0d:b7:7c:68:0c: ac:88:1b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjUwNTE0MTU1OTM0WhcNMjUwNTIxMTU1OTM0WjAYMRYwFAYD VQQDEw02ODI0YmRlNi1jMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG+fGx2MqRUqosz8cbxBu4CIdtWArXj2ms+CBum8DmKXfjnG5mqgHeTOTLmT Wk33hWorNjAquZ1nR29yzDUHKK/IP5MxRhRhgNTlEnAlZDKtkLkBDRfhPMk1KDqL YJmbLAr+0xu6FxjUp07hXcou59sGUynAJ5MHIaDRf8VPyBaZyQTTo2zE0+GcJqHi 3QbjJUdeLhkhbu83qSpj15/+OX0GfQ3mQ99R46AnYhe2XbSaJGwMcLxyXcnQnveL Om9uP4PqoX7BBfPtrg4dS3W2PGb0A436uYDN0mYTzAqaHh2hEFPF/N/uK78nRrYd 6T3kNB7wZQcrsq+l0lBTS1x8vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6/8MUs xtj7W0c1+uV11ZWLH+YGMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKX5K0c2n3af3Gj5qhQtCpK2sxiSPcR6BPrqcZlmL29p/RUhMZFjjv 7NOLZ1nMxl6W9WAqos1Niy3kH2SkbLDt/SjX7lthmtHWYblmrUSbd+KMQOm7qZro MvRrhyhV/YaWZxEybZeXbuulLP+j/dQytDTFH5ciEKhc121WDQWyaFY/Osxdy2t0 qOsnkFAo+gfEakZnLAA1GbyG6A2wwbFhpF5BYRZOZzVxnebdIQhJfiNMoanTG4zb yC68Rux5xw/DEanrQNuBQfWbxed7GQusrJsNsDXmmiHjCnddJXvsqjQShoPrkU0R tHkGe6/OaJwssRXWIm5pDbd8aAysiBvQ -----END CERTIFICATE-----Generated at Fri May 16 05:30:54 2025 by rpki-client