$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json) Hash identifier: zDp8bUlbZnSLnwBf1XwzSl6ULOPvVsfQh+Scar4aiKU= Subject key identifier: AA:1B:E3:8F:22:6F:B4:6A:D7:23:E3:9D:B1:F3:FC:62:25:2A:9C:88 Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB Certificate serial: 112C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft Manifest number: 111C Signing time: Mon 12 May 2025 17:12:34 +0000 Manifest this update: Mon 12 May 2025 17:12:34 +0000 Manifest next update: Mon 19 May 2025 17:12:34 +0000 Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: rg6foKQgGTv+pt9jABloCimRwtp2+YSlmoszaZOV0ZU=) 2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=) 3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4396 (0x112c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB Validity Not Before: May 12 17:12:34 2025 GMT Not After : May 19 17:12:34 2025 GMT Subject: CN=68222c02-2e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:0a:62:1a:5e:15:78:d3:2f:60:75:05:c7: 46:eb:ac:d2:ab:50:90:41:e2:92:9b:bb:08:b6:b7: 70:ae:f4:00:8b:c6:70:67:ba:78:25:8a:67:af:52: d1:16:fd:60:2a:7f:96:21:fb:74:73:68:38:ad:8c: 89:7e:97:32:fc:f8:7d:ef:f9:31:b2:f5:67:5c:89: d8:c2:c8:52:33:9e:8a:33:92:5e:fe:51:a8:eb:14: a2:6b:a8:69:65:f5:73:a6:8a:95:9c:61:81:fe:8e: 10:3d:2f:a5:cf:cc:6f:ca:64:7b:98:70:1b:d2:f4: 9b:03:c0:8c:4c:0b:83:36:db:f7:04:7f:0f:91:16: fe:ce:94:e0:aa:31:18:8c:ef:94:1a:f7:ec:f3:f9: 16:cb:44:51:75:eb:4f:fc:4e:d6:58:dd:45:42:10: 2f:48:c7:fd:4c:7b:ea:60:b9:6b:3a:89:4b:cd:a0: 3d:19:a2:e8:28:af:c0:5e:36:78:2c:38:40:2c:b8: 15:19:25:ad:8e:7e:18:d3:6c:74:ef:2b:b8:6c:39: 47:b9:38:a0:0c:de:b4:63:e2:cb:32:14:cb:71:9e: c4:93:98:d9:73:0e:ec:fe:b5:83:9b:26:1d:78:bb: a3:19:1e:95:81:ba:2d:5a:f5:a0:c0:48:d7:75:23: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1B:E3:8F:22:6F:B4:6A:D7:23:E3:9D:B1:F3:FC:62:25:2A:9C:88 X509v3 Authority Key Identifier: keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:eb:99:a2:eb:0c:f1:3c:d3:35:d0:59:92:3f:54:8f:4f:03: 71:cf:11:19:62:af:15:30:f2:90:a9:2f:68:95:25:13:d8:47: 4b:f3:6c:e1:06:f5:d2:b9:3d:46:89:43:7c:8a:cb:c8:2f:f4: 6d:8a:f0:f2:6d:1c:cf:68:c7:20:0b:e3:32:90:0a:4e:39:7b: 75:0a:85:be:54:bf:0d:38:cc:8d:fd:4b:fc:a0:c3:3b:f3:34: da:59:da:12:c5:75:ec:2e:75:25:84:3a:20:23:5b:30:cb:83: 8e:65:6a:35:b4:e6:85:d9:08:c4:b4:c1:32:23:29:10:ee:bb: 63:b6:f0:0f:a3:1d:96:77:c9:35:eb:ef:78:e8:d2:8d:09:4a: c3:6d:19:f8:bb:b9:81:7c:15:7b:3d:43:d2:a1:3a:f4:b9:07: 9b:11:e4:c1:f0:4a:94:f8:e0:26:83:2b:5b:46:7b:e8:eb:83: 92:3c:aa:b0:b4:49:fa:98:39:95:38:6a:65:bb:dc:cc:ff:6d: 97:e2:40:46:da:d1:15:db:7b:e0:8b:c5:13:f3:36:75:6f:d4: 46:82:9b:d9:c6:05:16:45:6f:69:18:d3:80:1e:10:3c:3b:92: 79:7e:7b:81:01:f0:91:e1:30:2e:ba:28:f4:07:30:0d:6f:d4: c0:d7:1c:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE MDBDNDQ3REIwHhcNMjUwNTEyMTcxMjM0WhcNMjUwNTE5MTcxMjM0WjAYMRYwFAYD VQQDEw02ODIyMmMwMi0yZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sgKYhpeFXjTL2B1BcdG66zSq1CQQeKSm7sItrdwrvQAi8ZwZ7p4JYpnr1LR Fv1gKn+WIft0c2g4rYyJfpcy/Ph97/kxsvVnXInYwshSM56KM5Je/lGo6xSia6hp ZfVzpoqVnGGB/o4QPS+lz8xvymR7mHAb0vSbA8CMTAuDNtv3BH8PkRb+zpTgqjEY jO+UGvfs8/kWy0RRdetP/E7WWN1FQhAvSMf9THvqYLlrOolLzaA9GaLoKK/AXjZ4 LDhALLgVGSWtjn4Y02x07yu4bDlHuTigDN60Y+LLMhTLcZ7Ek5jZcw7s/rWDmyYd eLujGR6VgbotWvWgwEjXdSPazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKob448i b7Rq1yPjnbHz/GIlKpyIMB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2 WmpXOXItQWkxNFhRREVSOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/65mi6wzxPNM10FmSP1SPTwNxzxEZYq8VMPKQqS9olSUT2EdL82zh BvXSuT1GiUN8isvIL/RtivDybRzPaMcgC+MykApOOXt1CoW+VL8NOMyN/Uv8oMM7 8zTaWdoSxXXsLnUlhDogI1swy4OOZWo1tOaF2QjEtMEyIykQ7rtjtvAPox2Wd8k1 6+946NKNCUrDbRn4u7mBfBV7PUPSoTr0uQebEeTB8EqU+OAmgytbRnvo64OSPKqw tEn6mDmVOGplu9zM/22X4kBG2tEV23vgi8UT8zZ1b9RGgpvZxgUWRW9pGNOAHhA8 O5J5fnuBAfCR4TAuuij0BzANb9TA1xwG -----END CERTIFICATE-----Generated at Wed May 14 01:15:22 2025 by rpki-client