$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json) Hash identifier: gdfbOFAlzZC2UY8UaTBG53PweNOodHqVCJfJuuC361E= Subject key identifier: DD:C2:3A:2A:1C:A4:B2:23:FD:17:5F:4F:E6:DA:C3:C4:86:48:3B:38 Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft Manifest number: 01E3 Signing time: Thu 15 May 2025 02:07:44 +0000 Manifest this update: Thu 15 May 2025 02:07:43 +0000 Manifest next update: Thu 22 May 2025 02:07:43 +0000 Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: J/12JS9a5094nrEq7SG4zBx+IAQ3mt2r+ZcwtcxkDmg=) 2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: QhihCyN5bbG8v0q4aS9nZCy8ZGeOjrQ8K/ICbkjXPrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: May 15 02:07:43 2025 GMT Not After : May 22 02:07:43 2025 GMT Subject: CN=68254c6f-f21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:31:2e:9e:ce:0e:76:fd:ff:b5:7a:91:a3:d0: 17:d6:72:63:d8:b1:cb:d6:65:c6:d3:2c:0b:3f:88: 91:3f:d4:ef:57:a1:22:cb:a3:ce:34:24:26:c5:3c: d8:7f:6b:f4:69:6f:e7:43:e5:67:e0:83:f0:02:b1: e2:1a:f4:05:bf:89:b5:e4:84:eb:95:b4:3f:75:ed: 70:b7:f3:4e:72:66:ee:76:fc:8b:58:a3:a8:94:f5: b4:15:89:f7:df:e4:ac:fb:7c:59:59:9b:c7:b3:34: 47:09:02:b7:51:28:b5:d1:1e:88:9e:b3:8d:70:bb: f5:dd:99:de:c0:30:e8:27:ab:10:95:68:2c:a3:af: e1:87:bd:10:54:4c:fa:37:2d:8b:9e:5c:1e:62:40: b3:82:1f:41:8d:37:9c:dd:5e:bc:21:f8:29:68:f7: 05:91:27:fd:b2:5a:a1:fb:05:7a:0d:e4:e1:c5:f2: 68:cc:c0:68:cf:fa:eb:e1:42:fc:c1:b3:cf:12:19: 5f:08:41:f5:92:78:1c:fa:39:8a:85:47:6a:9a:67: a0:bc:1a:3e:ac:ed:9a:33:e4:2b:5d:35:b6:83:6d: ed:ca:73:17:12:43:5a:f6:1a:fd:99:7f:4b:da:0f: 5f:72:cf:2d:d7:d5:45:01:bf:c1:a4:f4:82:41:2f: 26:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:3A:2A:1C:A4:B2:23:FD:17:5F:4F:E6:DA:C3:C4:86:48:3B:38 X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:81:e2:07:20:db:58:4e:5c:9e:e0:40:f8:a7:a5:56:fb:8b: 2b:e2:e7:25:36:5c:8d:b7:d9:7c:82:16:57:8c:f5:10:d0:f6: 48:91:45:b2:10:17:90:df:78:50:0f:ba:fd:7d:0d:a9:97:a7: ee:2e:e6:ba:15:b5:86:8e:54:0e:5e:3c:08:0e:bd:5a:31:ed: d2:bd:b9:61:d3:5f:ed:35:66:01:9f:bc:cd:41:de:e4:fb:92: 3a:14:88:4a:68:67:dc:d9:1f:b0:58:d8:8d:b8:8a:92:58:54: 57:db:43:85:81:69:9a:ab:66:89:b0:98:fc:81:4d:38:de:6b: 77:e9:1a:56:f0:de:58:54:2c:0d:d2:7a:56:67:f3:d9:5e:b8: 08:c7:86:cb:27:46:15:44:fc:87:19:ad:b0:1e:96:0b:12:c9: 24:9a:09:c7:83:c1:9e:27:2c:f3:88:65:fa:ea:b2:4f:08:b8: 18:d5:5a:77:04:0c:f0:af:f5:4e:a7:1b:09:13:5d:ff:1b:e6: 6a:07:57:d4:1f:06:ae:2f:75:d9:98:06:07:df:6f:c9:e0:23: 07:bc:6a:25:2b:02:30:85:3d:16:9b:c4:df:46:13:c8:76:74: 7c:f8:df:3a:fb:4f:0a:ae:1d:d7:aa:fe:f2:f8:64:60:ca:d0: 3f:d5:03:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUwNTE1MDIwNzQzWhcNMjUwNTIyMDIwNzQzWjAYMRYwFAYD VQQDEw02ODI1NGM2Zi1mMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9zEuns4Odv3/tXqRo9AX1nJj2LHL1mXG0ywLP4iRP9TvV6Eiy6PONCQmxTzY f2v0aW/nQ+Vn4IPwArHiGvQFv4m15ITrlbQ/de1wt/NOcmbudvyLWKOolPW0FYn3 3+Ss+3xZWZvHszRHCQK3USi10R6InrONcLv13ZnewDDoJ6sQlWgso6/hh70QVEz6 Ny2LnlweYkCzgh9BjTec3V68IfgpaPcFkSf9slqh+wV6DeThxfJozMBoz/rr4UL8 wbPPEhlfCEH1kngc+jmKhUdqmmegvBo+rO2aM+QrXTW2g23tynMXEkNa9hr9mX9L 2g9fcs8t19VFAb/BpPSCQS8mhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3COioc pLIj/RdfT+baw8SGSDs4MB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBgeIHINtYTlye4ED4p6VW+4sr4uclNlyNt9l8ghZXjPUQ0PZIkUWy EBeQ33hQD7r9fQ2pl6fuLua6FbWGjlQOXjwIDr1aMe3Svblh01/tNWYBn7zNQd7k +5I6FIhKaGfc2R+wWNiNuIqSWFRX20OFgWmaq2aJsJj8gU043mt36RpW8N5YVCwN 0npWZ/PZXrgIx4bLJ0YVRPyHGa2wHpYLEskkmgnHg8GeJyzziGX66rJPCLgY1Vp3 BAzwr/VOpxsJE13/G+ZqB1fUHwauL3XZmAYH32/J4CMHvGolKwIwhT0Wm8TfRhPI dnR8+N86+08Krh3Xqv7y+GRgytA/1QMp -----END CERTIFICATE-----Generated at Thu May 15 22:22:00 2025 by rpki-client