$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: xdyrdogXmia6fg5cmwlM4La1F3XHaTH4IFpUu4mL0E8= Subject key identifier: 0E:C0:80:CB:55:D9:56:26:0A:5A:B9:E3:69:3E:3C:52:F1:08:8B:8C Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 05DA Signing time: Thu 24 Apr 2025 22:47:42 +0000 Manifest this update: Thu 24 Apr 2025 22:47:42 +0000 Manifest next update: Thu 01 May 2025 22:47:42 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: qse0lKVYrM3Ku370OdhW0BwxPF01SeQ861ZqFaKbNwg=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: Apr 24 22:47:42 2025 GMT Not After : May 1 22:47:42 2025 GMT Subject: CN=680abf8e-06f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:9a:dc:f6:96:22:ad:36:2e:8c:e2:81:63: 81:80:94:45:39:0f:37:55:6d:ba:1e:f7:4a:96:6f: 02:00:5b:5a:b3:d0:3b:4d:07:a4:92:47:78:69:b2: 77:18:f5:72:ef:93:71:80:c6:03:28:d9:f4:66:d3: 0a:de:66:5e:be:65:0a:a0:ed:54:ff:d3:87:dd:14: ad:24:15:17:94:b6:e1:80:5c:3f:4a:94:f5:c3:e8: 4b:f9:ce:8a:1f:b8:69:e5:96:eb:81:bf:70:bc:59: b4:23:88:b4:cd:70:fa:53:f1:78:da:e6:18:18:0f: a0:e7:48:e0:b3:7d:c3:92:81:b2:8c:92:3a:e9:3c: 69:24:1f:05:52:58:30:b7:09:29:46:26:5b:ad:de: c1:27:68:ba:69:ce:26:4d:fe:f2:99:b0:83:4d:e2: c0:c2:c3:a4:b3:4f:1a:5a:68:eb:a6:0c:9e:32:86: eb:f3:75:9c:58:00:a2:51:2b:95:ac:98:0c:e6:61: ec:42:45:5c:44:d5:fa:1e:3f:aa:3f:a2:67:07:53: 3b:35:34:25:0a:70:19:7d:9d:a0:55:d9:22:80:c0: 07:13:25:a5:7e:20:88:49:54:ad:d7:ef:5a:dd:19: f6:e9:f7:17:37:b7:11:7e:95:77:73:1f:c1:92:a7: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C0:80:CB:55:D9:56:26:0A:5A:B9:E3:69:3E:3C:52:F1:08:8B:8C X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:76:73:4e:ae:04:5f:70:37:0c:25:df:49:a2:ef:59:b3:3e: 3c:67:64:47:5e:34:2f:a5:e5:c3:80:04:4d:2b:13:55:33:5a: 74:5a:f4:4a:d3:d9:1a:a4:7a:4a:8a:b7:70:8c:13:1e:a2:f4: 82:d7:8b:86:3e:83:f4:d9:02:d3:dd:14:d0:f9:b3:e7:8d:5d: 40:7e:56:3d:30:66:6f:50:95:dc:d7:2c:48:8f:2e:94:17:b9: ba:79:28:1e:6f:8f:72:fb:57:7a:90:b0:c9:d9:13:3a:d0:4d: 12:2c:31:28:e8:6c:af:48:b9:89:3b:b2:ad:9f:27:21:0b:18: 1c:b6:b3:40:ce:06:12:5a:76:3a:70:06:23:f5:86:fc:79:5e: 2c:57:40:db:bb:3a:e6:c3:6e:31:a7:2b:56:90:14:8c:b7:bd: 51:0e:35:1d:ed:b6:69:34:9c:ca:b3:7c:57:93:bb:1a:cf:41: 42:2f:4b:02:8a:c9:b0:3f:0a:9c:06:51:9e:55:79:5c:b4:11: 69:9d:aa:37:45:83:f6:ef:9d:69:13:17:cd:02:ce:c9:bc:f7: e8:a5:0b:7f:bd:6f:ec:92:a4:78:70:1a:33:ae:df:a6:cb:94: 73:8a:e8:35:55:b6:fb:72:2e:8c:5f:a0:5d:f7:cb:70:c1:ec: 6e:f7:4a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjUwNDI0MjI0NzQyWhcNMjUwNTAxMjI0NzQyWjAYMRYwFAYD VQQDEw02ODBhYmY4ZS0wNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcqa3PaWIq02LozigWOBgJRFOQ83VW26HvdKlm8CAFtas9A7TQekkkd4abJ3 GPVy75NxgMYDKNn0ZtMK3mZevmUKoO1U/9OH3RStJBUXlLbhgFw/SpT1w+hL+c6K H7hp5Zbrgb9wvFm0I4i0zXD6U/F42uYYGA+g50jgs33DkoGyjJI66TxpJB8FUlgw twkpRiZbrd7BJ2i6ac4mTf7ymbCDTeLAwsOks08aWmjrpgyeMobr83WcWACiUSuV rJgM5mHsQkVcRNX6Hj+qP6JnB1M7NTQlCnAZfZ2gVdkigMAHEyWlfiCISVSt1+9a 3Rn26fcXN7cRfpV3cx/BkqeytwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7AgMtV 2VYmClq542k+PFLxCIuMMB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgdnNOrgRfcDcMJd9Jou9Zsz48Z2RHXjQvpeXDgARNKxNVM1p0WvRK 09kapHpKirdwjBMeovSC14uGPoP02QLT3RTQ+bPnjV1AflY9MGZvUJXc1yxIjy6U F7m6eSgeb49y+1d6kLDJ2RM60E0SLDEo6GyvSLmJO7KtnychCxgctrNAzgYSWnY6 cAYj9Yb8eV4sV0Dbuzrmw24xpytWkBSMt71RDjUd7bZpNJzKs3xXk7saz0FCL0sC ismwPwqcBlGeVXlctBFpnao3RYP2751pExfNAs7JvPfopQt/vW/skqR4cBozrt+m y5Rziug1Vbb7ci6MX6Bd98twwexu90qv -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:23 2025 by rpki-client