$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: fEFISTn/LPUbJo7BUu3qkteo82DVUwWrMm6OGDD3xP0= Subject key identifier: B5:07:E9:C8:16:F3:00:C8:26:70:BE:92:2A:40:0F:4C:A6:F0:42:1D Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 1185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 1181 Signing time: Thu 24 Apr 2025 17:13:34 +0000 Manifest this update: Thu 24 Apr 2025 17:13:34 +0000 Manifest next update: Thu 01 May 2025 17:13:34 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: fPeesY2IPGrRDReTuFEEdpE5iVa38QKu1bxFMDLaWKQ=) 2: FEA22F60A5F111EF9C230280C4F9AE02.roa (hash: Jbt7n2ZRFDuS80TPLIamwTYwNZ2fv7lYVuWS7NZ1xLU=) 3: 113E8FC0A5F111EFABB09F7DC4F9AE02.roa (hash: jK4kVBYkhuumATZBB1rJMfMRjn7ETtAHz010Y63PbKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4485 (0x1185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Apr 24 17:13:34 2025 GMT Not After : May 1 17:13:34 2025 GMT Subject: CN=680a713e-84c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:a0:4a:13:9f:e9:6f:fe:42:90:ad:ff:76: db:83:40:71:0f:6c:62:1a:f1:80:e2:a0:54:15:96: 0f:cb:a1:64:bb:11:1e:8e:44:98:8e:df:d5:80:2e: 03:3c:37:0d:95:4b:68:da:2f:45:17:fc:74:3b:2e: 6c:88:ef:6b:26:bb:0e:5f:11:da:29:ca:dd:66:c6: 7b:60:08:12:9c:80:e7:e2:ab:a4:95:90:93:ee:d0: 3c:d1:af:dc:76:c8:67:e5:65:85:a0:e2:75:79:39: f1:17:a7:03:0c:6d:bd:c1:40:77:26:7a:6f:4f:7a: a1:b6:5a:f0:2b:0b:ba:9c:df:bd:20:9b:bf:2e:3e: 08:77:71:25:3c:eb:02:1a:ea:5d:ca:a5:7b:15:67: 64:a2:9a:a6:b5:5c:85:71:01:c9:8f:35:3a:25:22: 49:72:37:31:97:a7:5e:ec:5c:ee:1c:4c:f8:ec:f5: 92:a6:44:a0:0e:5b:a5:29:2b:8d:c3:0e:55:a4:90: d2:dc:47:04:ab:90:7b:24:02:06:bd:00:ea:9c:34: b1:b1:ac:6d:48:21:ea:b3:9e:c4:55:04:11:2f:ba: 86:88:7d:a7:54:5b:6a:14:d9:1e:95:c6:ce:cf:3e: d0:37:dd:d2:57:a0:79:b9:38:83:9d:cf:95:f7:59: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:E9:C8:16:F3:00:C8:26:70:BE:92:2A:40:0F:4C:A6:F0:42:1D X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:3a:b7:bd:0e:1c:a2:bc:3e:da:b0:c1:41:9c:cd:be:9d:c5: 49:c8:45:54:78:e8:54:7f:83:c5:21:cc:0c:fc:e1:39:f2:9d: ba:31:d6:2e:98:f6:fc:c5:13:4d:60:66:98:b4:c6:cf:c0:12: a2:d3:30:3c:d4:02:2f:9a:18:cd:19:37:a3:30:70:52:ee:82: 89:8c:4d:55:6c:32:19:8f:37:5d:72:d2:1b:fb:11:cd:58:b2: bf:0b:2d:f6:77:97:11:74:3d:a4:e7:1c:c4:30:d5:f4:ca:a3: 64:e0:75:0b:3f:09:0f:d1:fe:da:10:50:0b:ce:1d:f1:8a:90: 2c:c8:a3:a5:2f:68:a0:57:6f:c9:63:19:f2:7d:c6:7e:55:4a: 73:21:d3:7d:35:0b:87:bc:de:18:29:1c:4c:5e:7a:f5:58:bc: 34:6e:23:01:cf:68:f0:57:2a:f6:6a:f3:38:97:be:62:cb:63: a5:0a:60:df:56:f0:f7:eb:f5:31:13:84:ec:a2:0a:19:e1:43: 96:be:e2:9a:d3:30:77:9c:17:8a:ad:7c:eb:72:e9:6d:7e:ca: 28:29:00:50:52:d9:70:8f:06:00:2f:1b:23:03:83:51:0d:25: bd:64:fe:00:ba:f5:fa:e7:5c:27:b2:ef:a0:87:a7:41:2c:e9: f4:e1:b2:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNDI0MTcxMzM0WhcNMjUwNTAxMTcxMzM0WjAYMRYwFAYD VQQDEw02ODBhNzEzZS04NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05WgShOf6W/+QpCt/3bbg0BxD2xiGvGA4qBUFZYPy6FkuxEejkSYjt/VgC4D PDcNlUto2i9FF/x0Oy5siO9rJrsOXxHaKcrdZsZ7YAgSnIDn4quklZCT7tA80a/c dshn5WWFoOJ1eTnxF6cDDG29wUB3JnpvT3qhtlrwKwu6nN+9IJu/Lj4Id3ElPOsC GupdyqV7FWdkopqmtVyFcQHJjzU6JSJJcjcxl6de7FzuHEz47PWSpkSgDlulKSuN ww5VpJDS3EcEq5B7JAIGvQDqnDSxsaxtSCHqs57EVQQRL7qGiH2nVFtqFNkelcbO zz7QN93SV6B5uTiDnc+V91mJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUH6cgW 8wDIJnC+kipAD0ym8EIdMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnOre9DhyivD7asMFBnM2+ncVJyEVUeOhUf4PFIcwM/OE58p26MdYu mPb8xRNNYGaYtMbPwBKi0zA81AIvmhjNGTejMHBS7oKJjE1VbDIZjzddctIb+xHN WLK/Cy32d5cRdD2k5xzEMNX0yqNk4HULPwkP0f7aEFALzh3xipAsyKOlL2igV2/J YxnyfcZ+VUpzIdN9NQuHvN4YKRxMXnr1WLw0biMBz2jwVyr2avM4l75iy2OlCmDf VvD36/UxE4TsogoZ4UOWvuKa0zB3nBeKrXzrcultfsooKQBQUtlwjwYALxsjA4NR DSW9ZP4AuvX651wnsu+gh6dBLOn04bLe -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:52 2025 by rpki-client