$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json) Hash identifier: mUy5zKJJdugUxLhEnJSL+4RMffRFTLha9zqQrulg5H0= Subject key identifier: A4:0F:9D:8E:14:43:7A:6F:90:76:91:2E:C3:12:29:10:0C:95:96:02 Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 1087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft Manifest number: 106E Signing time: Sat 10 May 2025 17:14:34 +0000 Manifest this update: Sat 10 May 2025 17:14:33 +0000 Manifest next update: Sat 17 May 2025 17:14:33 +0000 Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: RkpksRheDJB3Zxjib9Iu7Ouq99NgYpOekFlHcFycFvM=) 2: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=) 3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=) 4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: May 10 17:14:33 2025 GMT Not After : May 17 17:14:33 2025 GMT Subject: CN=681f8979-03ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:b9:f5:af:a5:b1:cd:7a:90:b5:66:3f:89: 37:6d:9c:ab:5f:47:06:a2:9f:b1:ba:c1:bd:26:5c: 5b:be:32:7f:dc:4e:4c:18:13:cc:fc:02:d8:d9:5a: b9:6c:fc:1c:31:44:81:61:c3:9f:99:80:7f:ae:e4: 99:54:1f:84:ae:80:45:e0:41:e3:eb:4e:66:47:00: 18:b4:66:18:b3:c2:30:1f:87:fb:25:c2:65:f2:c9: a6:53:6d:41:96:ac:84:94:98:45:1c:be:da:dc:c9: c0:f6:7f:51:e5:8e:31:49:8b:45:98:45:ab:dc:bd: a5:a3:c8:ab:21:b6:93:4c:06:b0:a5:60:ff:15:99: fa:eb:7b:29:88:11:c5:73:0b:f1:14:bd:e1:aa:8e: 37:79:b9:bb:cb:49:70:8d:db:87:c9:4e:b6:7e:bf: 76:f9:f9:6d:96:ca:53:bd:da:d6:f8:0d:5b:d9:d7: f2:0c:22:af:f7:57:46:c3:8f:01:07:1e:50:5e:23: d1:e9:ce:ce:3e:3f:fd:d0:22:58:ad:0a:a1:1b:d3: 0e:c1:33:e8:12:b4:23:26:7c:2a:21:0d:ff:0c:7b: 5d:f6:5f:93:e0:a7:02:17:21:6c:d8:de:12:cd:3d: c4:7f:78:d1:c0:53:55:0b:e3:42:68:6e:28:9e:3a: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0F:9D:8E:14:43:7A:6F:90:76:91:2E:C3:12:29:10:0C:95:96:02 X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:1d:04:f6:f5:07:7d:93:b8:28:32:9f:ff:f8:c1:13:5c: 8b:ea:7e:8d:89:e0:56:2f:3b:43:28:62:94:3b:56:66:85:15: 3e:7c:5d:ed:e3:ec:2a:f5:8a:d1:89:95:eb:33:cf:c5:44:c0: 31:bd:3c:3a:d1:a2:c1:7f:52:c2:95:ec:78:b9:3e:c7:12:5c: 35:28:5a:8d:07:2b:3b:5d:34:f8:04:a0:e2:c6:73:8e:bf:ec: a1:c7:79:be:e0:cc:da:b7:d2:76:07:4e:e4:ac:45:b6:bf:44: 32:c6:d4:6f:3c:04:5f:60:02:98:e5:6e:38:e9:d0:cb:56:c2: 68:23:de:6b:96:1a:f2:d0:79:82:3c:76:d5:5d:c6:00:d8:44: d1:b0:3c:7d:f4:9d:5b:40:cd:ca:c5:71:df:0d:ad:39:75:29: 09:6d:5e:f0:8a:15:84:c3:b8:35:1b:10:70:16:c9:16:1e:2e: f7:13:aa:fa:5b:71:07:76:8d:04:86:12:ec:75:d0:41:81:f3: 92:e8:60:ca:fb:99:74:14:2e:23:f0:ed:1a:58:d5:48:24:10: 76:84:1e:3b:0b:98:72:b3:10:d0:96:ae:a2:01:74:38:4d:2a: 16:8e:19:83:0c:f6:4a:aa:51:d4:35:70:53:ad:ad:60:9a:73: 46:c5:b3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUwNTEwMTcxNDMzWhcNMjUwNTE3MTcxNDMzWjAYMRYwFAYD VQQDEw02ODFmODk3OS0wM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyy59a+lsc16kLVmP4k3bZyrX0cGop+xusG9JlxbvjJ/3E5MGBPM/ALY2Vq5 bPwcMUSBYcOfmYB/ruSZVB+EroBF4EHj605mRwAYtGYYs8IwH4f7JcJl8smmU21B lqyElJhFHL7a3MnA9n9R5Y4xSYtFmEWr3L2lo8irIbaTTAawpWD/FZn663spiBHF cwvxFL3hqo43ebm7y0lwjduHyU62fr92+fltlspTvdrW+A1b2dfyDCKv91dGw48B Bx5QXiPR6c7OPj/90CJYrQqhG9MOwTPoErQjJnwqIQ3/DHtd9l+T4KcCFyFs2N4S zT3Ef3jRwFNVC+NCaG4onjqXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQPnY4U Q3pvkHaRLsMSKRAMlZYCMB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNFOS82Q0JCODRGNDMxRjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJO MHVkZ05MN0wwMnFJSERlSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/x0E9vUHfZO4KDKf//jBE1yL6n6NieBWLztDKGKUO1ZmhRU+fF3t 4+wq9YrRiZXrM8/FRMAxvTw60aLBf1LClex4uT7HElw1KFqNBys7XTT4BKDixnOO v+yhx3m+4Mzat9J2B07krEW2v0QyxtRvPARfYAKY5W446dDLVsJoI95rlhry0HmC PHbVXcYA2ETRsDx99J1bQM3KxXHfDa05dSkJbV7wihWEw7g1GxBwFskWHi73E6r6 W3EHdo0EhhLsddBBgfOS6GDK+5l0FC4j8O0aWNVIJBB2hB47C5hysxDQlq6iAXQ4 TSoWjhmDDPZKqlHUNXBTra1gmnNGxbOH -----END CERTIFICATE-----Generated at Sun May 11 20:02:51 2025 by rpki-client