$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: Wf1H1FXQAwKzVJAQjwdUiLRTdFHTd/GjktSPp2k1IH8= Subject key identifier: 8E:8A:7C:0B:AA:59:0B:88:1B:8F:D8:05:8E:E6:13:57:14:83:E9:25 Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 04F3 Signing time: Wed 30 Apr 2025 23:17:39 +0000 Manifest this update: Wed 30 Apr 2025 23:17:38 +0000 Manifest next update: Wed 07 May 2025 23:17:38 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: 9sP5zd5pm4mbxECeWTXtSOtnZjI/bvASGqwYwS8IToQ=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: KLqg7iCkQ2UJ+0JMC/UQM8HaP6cn0IInutZRj+9bWr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: Apr 30 23:17:38 2025 GMT Not After : May 7 23:17:38 2025 GMT Subject: CN=6812af93-24de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:17:b8:71:4d:cd:3f:28:2f:42:83:6f:5c: 43:7e:be:eb:21:ab:f1:7f:ba:cb:6d:6a:2e:ba:d0: 3f:ee:d7:64:ef:ed:c9:83:28:8c:f4:6f:7f:09:d0: e9:f1:b0:dd:b3:ae:c2:46:81:5a:20:45:db:05:42: 0a:2a:f7:dd:f7:62:59:90:a6:49:16:ae:ef:b4:74: b5:17:78:e8:41:6d:20:df:ae:5e:00:20:ef:ed:e0: 29:03:ce:06:40:ae:fa:f0:90:e4:6f:04:d9:11:d0: 26:e5:23:e3:37:5e:31:32:60:f7:23:d4:94:38:32: dc:5f:2f:83:e2:0e:ab:1c:28:04:d3:19:b8:73:9a: ca:d9:d3:41:56:2e:e8:9b:c7:56:6f:a5:59:66:c8: 65:6d:2f:78:96:e8:b5:55:ba:4b:31:f9:2d:1d:ce: 20:38:d9:06:6a:7b:85:ed:3d:c4:9a:c3:44:7c:11: 8d:ef:84:1f:ae:6c:d4:ba:29:49:b6:38:9f:87:9e: 4b:b9:c0:34:64:ad:1d:e2:37:7d:7d:72:46:be:35: f9:ab:6b:b7:fb:2d:e4:ab:8b:92:de:0e:39:27:14: 14:72:7c:10:5d:c6:ee:6b:27:b9:44:d0:3a:58:4e: 0c:4b:32:0a:f5:93:f8:74:5f:b7:ee:60:9e:ca:0b: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:7C:0B:AA:59:0B:88:1B:8F:D8:05:8E:E6:13:57:14:83:E9:25 X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:08:99:76:b0:d6:74:f8:54:9f:6d:ea:8d:03:01:c6:e8:f0: c7:b3:bb:02:fb:a0:22:3c:2c:59:a6:4a:c9:c0:12:a3:27:cf: 09:be:d9:38:ae:b4:2c:f7:ad:10:e3:ba:10:f9:4b:9d:17:23: eb:74:65:46:04:e8:e0:4e:77:b2:32:e4:e8:c5:36:08:a7:5f: ea:40:5e:d7:02:5c:8b:ed:bc:b0:c3:6b:76:43:af:0c:12:75: ac:65:97:31:46:91:8c:f4:35:9a:85:c6:35:47:64:57:80:4d: 0c:ec:97:73:7d:d1:29:27:2c:2f:30:b2:e4:fb:8e:8b:35:7a: cc:82:e0:b1:52:7c:2d:73:3e:86:c5:80:f4:68:60:26:40:4a: 2a:94:88:df:9d:9e:4e:af:d7:58:f3:76:80:44:30:b3:d9:2d: 5b:27:1e:de:b2:21:ff:01:a0:20:42:57:2b:15:98:22:65:8d: b0:45:fd:39:e2:33:37:7f:ae:93:5d:32:80:f7:35:d5:f9:fa: 0d:1e:7f:57:f7:df:97:69:b2:62:49:a5:9b:4a:de:9f:2d:a3: 84:da:7d:f6:f8:78:e7:d7:3a:aa:a7:1b:dc:64:fd:e8:fc:c9: 54:59:f2:c2:85:ef:83:c1:ea:63:9d:dc:14:c1:a0:8e:56:c4: d7:3b:f6:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUwNDMwMjMxNzM4WhcNMjUwNTA3MjMxNzM4WjAYMRYwFAYD VQQDEw02ODEyYWY5My0yNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphEXuHFNzT8oL0KDb1xDfr7rIavxf7rLbWouutA/7tdk7+3JgyiM9G9/CdDp 8bDds67CRoFaIEXbBUIKKvfd92JZkKZJFq7vtHS1F3joQW0g365eACDv7eApA84G QK768JDkbwTZEdAm5SPjN14xMmD3I9SUODLcXy+D4g6rHCgE0xm4c5rK2dNBVi7o m8dWb6VZZshlbS94lui1VbpLMfktHc4gONkGanuF7T3EmsNEfBGN74QfrmzUuilJ tjifh55LucA0ZK0d4jd9fXJGvjX5q2u3+y3kq4uS3g45JxQUcnwQXcbuaye5RNA6 WE4MSzIK9ZP4dF+37mCeygtVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6KfAuq WQuIG4/YBY7mE1cUg+klMB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbCJl2sNZ0+FSfbeqNAwHG6PDHs7sC+6AiPCxZpkrJwBKjJ88Jvtk4 rrQs960Q47oQ+UudFyPrdGVGBOjgTneyMuToxTYIp1/qQF7XAlyL7byww2t2Q68M EnWsZZcxRpGM9DWahcY1R2RXgE0M7JdzfdEpJywvMLLk+46LNXrMguCxUnwtcz6G xYD0aGAmQEoqlIjfnZ5Or9dY83aARDCz2S1bJx7esiH/AaAgQlcrFZgiZY2wRf05 4jM3f66TXTKA9zXV+foNHn9X99+XabJiSaWbSt6fLaOE2n32+Hjn1zqqpxvcZP3o /MlUWfLChe+DwepjndwUwaCOVsTXO/bc -----END CERTIFICATE-----Generated at Thu May 1 11:50:57 2025 by rpki-client