$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: dVn3f58lwUZb5VDcVgOgFt9fozJPlDmpjeqD9Tbc3Ek= Subject key identifier: 7A:35:83:A8:20:6F:26:07:6F:15:0D:D5:94:27:91:87:11:5B:AE:54 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 10FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 10F5 Signing time: Thu 24 Apr 2025 17:18:30 +0000 Manifest this update: Thu 24 Apr 2025 17:18:29 +0000 Manifest next update: Thu 01 May 2025 17:18:29 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: hH3d7A1NLEfFfLyt30xYPlrrM1QVCgsI+ePo/+5HXqU=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4349 (0x10fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Apr 24 17:18:29 2025 GMT Not After : May 1 17:18:29 2025 GMT Subject: CN=680a7266-093f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:22:8f:d0:9d:c0:5a:81:03:5e:e1:3f:56: 44:d9:7e:30:e0:b5:a5:86:eb:4d:92:55:4d:33:9e: c1:71:b4:90:0c:02:da:8a:ac:44:60:c7:be:de:36: ea:7e:71:5d:8e:2a:e4:e5:87:cb:9e:bc:4d:ce:52: bd:f3:93:65:7e:b2:03:94:cf:21:d9:fd:ff:b8:42: 63:3b:1a:1c:c4:52:73:27:34:79:76:ed:67:aa:c9: ee:cd:c0:8f:eb:0d:72:57:86:f1:81:29:0b:fe:5c: bb:42:49:cb:2a:1d:fa:35:c3:9d:d7:06:e3:95:9e: a4:3b:7d:c2:7e:e8:fc:ad:9c:ac:6e:48:cf:bb:58: 69:7c:6e:53:ce:63:c3:8a:19:2c:62:c6:a6:b8:1e: 1f:23:ce:59:44:ae:2d:0d:4e:aa:48:a9:bd:76:db: bb:cc:e6:1d:a1:d9:04:e4:b0:6b:a2:48:d0:c7:30: 02:ab:17:a3:f9:29:39:e1:68:87:21:64:90:53:7b: 88:cd:87:0d:6f:df:bb:73:43:e1:ca:14:ae:ad:c8: 7b:7e:9b:f2:61:7a:7b:ae:87:33:80:df:17:21:a3: 56:8d:f8:09:6e:cb:9b:ae:a3:84:ec:91:2e:76:77: c6:9c:d9:97:35:af:01:c1:91:e0:5a:ec:f7:fc:51: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:83:A8:20:6F:26:07:6F:15:0D:D5:94:27:91:87:11:5B:AE:54 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:6c:80:f3:c0:9f:ea:6a:ed:84:4a:0b:5c:c7:ef:34:4e:58: 30:70:09:2c:08:91:95:db:40:6e:75:4a:e6:aa:cb:43:26:0a: 30:db:a2:85:a2:87:5e:07:49:59:15:72:2a:67:81:f3:8c:7b: fa:2c:a2:c4:22:32:cf:4f:a9:73:2f:36:29:ad:1f:8e:93:2a: 65:ea:fb:cd:3b:72:fc:96:b7:84:1a:f6:af:7e:4c:e8:6a:fb: 21:e7:1f:b7:62:d3:85:0b:8c:dd:bb:73:0a:b9:3c:b6:30:51: ce:68:e4:af:92:b5:17:1a:f1:11:74:7f:b9:09:65:bd:04:36: 42:dd:cc:c1:61:e6:f7:a0:58:21:08:93:ef:5b:12:36:b4:b0: 18:78:46:7e:ad:e6:93:c1:1e:a0:4b:47:e4:03:89:97:c5:da: 8c:9b:9e:71:83:83:50:40:84:e5:2f:f6:1e:fe:58:f4:18:31: 26:11:b4:d7:81:8a:44:a9:6d:c3:0d:29:d3:85:27:14:a6:6b: 5d:98:77:6f:54:34:87:ae:d7:e1:64:13:3f:07:e2:55:69:10: dd:86:f3:ea:d2:a6:31:79:50:67:9c:16:5f:8a:af:1b:01:ce: 43:69:48:0b:5b:2d:87:7a:ca:24:8e:61:2e:cc:06:41:30:77: f3:f0:06:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwNDI0MTcxODI5WhcNMjUwNTAxMTcxODI5WjAYMRYwFAYD VQQDEw02ODBhNzI2Ni0wOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvwij9CdwFqBA17hP1ZE2X4w4LWlhutNklVNM57BcbSQDALaiqxEYMe+3jbq fnFdjirk5YfLnrxNzlK985NlfrIDlM8h2f3/uEJjOxocxFJzJzR5du1nqsnuzcCP 6w1yV4bxgSkL/ly7QknLKh36NcOd1wbjlZ6kO33Cfuj8rZysbkjPu1hpfG5TzmPD ihksYsamuB4fI85ZRK4tDU6qSKm9dtu7zOYdodkE5LBrokjQxzACqxej+Sk54WiH IWSQU3uIzYcNb9+7c0PhyhSurch7fpvyYXp7roczgN8XIaNWjfgJbsubrqOE7JEu dnfGnNmXNa8BwZHgWuz3/FGtjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo1g6gg byYHbxUN1ZQnkYcRW65UMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjbIDzwJ/qau2ESgtcx+80TlgwcAksCJGV20BudUrmqstDJgow26KF oodeB0lZFXIqZ4HzjHv6LKLEIjLPT6lzLzYprR+Okypl6vvNO3L8lreEGvavfkzo avsh5x+3YtOFC4zdu3MKuTy2MFHOaOSvkrUXGvERdH+5CWW9BDZC3czBYeb3oFgh CJPvWxI2tLAYeEZ+reaTwR6gS0fkA4mXxdqMm55xg4NQQITlL/Ye/lj0GDEmEbTX gYpEqW3DDSnThScUpmtdmHdvVDSHrtfhZBM/B+JVaRDdhvPq0qYxeVBnnBZfiq8b Ac5DaUgLWy2HesokjmEuzAZBMHfz8AZt -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:06 2025 by rpki-client