$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: FV3AJFKKIqhLDp/H0w3nG6R6xwcn2QWw0MshMDDyMZo= Subject key identifier: 50:D9:37:0C:96:CF:36:22:4D:74:24:91:B1:69:1E:52:84:34:4E:59 Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 011A Signing time: Fri 25 Apr 2025 03:52:55 +0000 Manifest this update: Fri 25 Apr 2025 03:52:54 +0000 Manifest next update: Fri 02 May 2025 03:52:54 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: +0xXWdIXPu4/MHJEBKSqzF0BVuRrW9i9xvVVTfCOjNk=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Apr 25 03:52:54 2025 GMT Not After : May 2 03:52:54 2025 GMT Subject: CN=680b0716-3ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:4c:de:24:f2:16:90:84:c9:ae:37:0d:36: 89:ed:07:fb:c0:33:06:29:07:06:4c:f9:c7:c2:a8: e9:45:a3:ed:65:a6:e7:4f:82:0e:25:e9:76:5d:8f: 21:64:b6:90:27:24:5a:32:27:fd:68:ac:2c:20:71: 4b:80:1e:be:d0:7c:61:51:24:7f:4a:89:d7:c9:dc: ed:0c:9d:4f:0a:fb:6b:8f:65:b3:2b:86:78:b2:87: 0a:7f:24:ef:e8:95:73:f7:55:f7:df:6f:fc:b4:0a: 6c:4e:ca:72:47:34:a1:34:23:35:86:51:c8:7a:6b: d7:d0:8b:66:81:08:26:e7:b5:0d:00:fe:c6:6c:11: 0e:e1:3a:38:44:ec:9f:c3:72:64:a0:e8:ff:88:d1: f9:54:fb:c1:ca:95:01:6f:38:42:38:20:5f:da:05: 91:be:06:b2:a1:fd:99:40:82:5c:cb:db:40:cd:5c: 9d:eb:bc:f8:03:fc:aa:1c:ee:0e:f6:5d:06:69:26: 6a:f5:95:a5:61:27:d0:63:e2:46:9a:d9:f5:b1:cc: 5a:9f:1a:bd:f1:91:36:85:87:c7:22:2e:77:51:8c: 91:ad:59:30:b5:a4:ad:79:46:4f:18:ff:89:1c:e0: 0f:0c:85:87:46:3a:c3:38:d4:c3:e7:fb:0b:16:0f: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:37:0C:96:CF:36:22:4D:74:24:91:B1:69:1E:52:84:34:4E:59 X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c0:67:5d:98:0a:46:2f:8f:2c:0f:23:35:58:98:22:4f:f3: f5:20:fc:aa:51:23:d4:85:cf:e2:03:0e:dd:2f:bd:48:82:c1: 9f:29:7d:6f:54:db:dc:56:24:2a:51:d0:99:54:f5:fd:ed:5e: bc:2c:1a:7e:f2:f4:88:4c:11:46:ce:7d:b3:a2:be:af:3e:90: ca:d7:2a:94:51:09:9d:7b:db:45:da:ae:25:43:75:59:54:6f: 01:89:33:46:1c:23:be:9a:e4:c4:5a:98:90:5a:7d:08:f3:9b: 4e:56:76:e9:05:ab:d7:c8:85:a0:bf:c9:e6:b0:d9:cf:eb:97: 85:44:32:11:d7:0c:76:09:56:65:a1:b1:4d:52:0f:5b:04:8e: 33:26:6f:3d:17:40:ab:b7:ab:43:32:ea:1f:5f:1e:98:78:84: b0:fc:12:4c:fb:f1:cf:f3:47:e2:c5:82:c9:95:eb:55:ba:b5: e4:75:d2:63:69:70:86:0a:df:13:c5:b7:0d:4c:c3:14:0f:89: 77:3a:e0:94:6e:54:31:9e:1f:dd:67:86:c8:a0:60:3a:fe:1e: 33:80:97:70:ad:3e:16:e4:c8:9d:4e:bd:68:36:e8:81:8a:54: 19:07:1e:b2:1e:b3:b7:a2:e0:71:55:09:13:36:f3:6e:22:ef: 91:a6:4a:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwNDI1MDM1MjU0WhcNMjUwNTAyMDM1MjU0WjAYMRYwFAYD VQQDEw02ODBiMDcxNi0zZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEhM3iTyFpCEya43DTaJ7Qf7wDMGKQcGTPnHwqjpRaPtZabnT4IOJel2XY8h ZLaQJyRaMif9aKwsIHFLgB6+0HxhUSR/SonXydztDJ1PCvtrj2WzK4Z4socKfyTv 6JVz91X332/8tApsTspyRzShNCM1hlHIemvX0ItmgQgm57UNAP7GbBEO4To4ROyf w3JkoOj/iNH5VPvBypUBbzhCOCBf2gWRvgayof2ZQIJcy9tAzVyd67z4A/yqHO4O 9l0GaSZq9ZWlYSfQY+JGmtn1scxanxq98ZE2hYfHIi53UYyRrVkwtaSteUZPGP+J HOAPDIWHRjrDONTD5/sLFg/nywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDZNwyW zzYiTXQkkbFpHlKENE5ZMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfwGddmApGL48sDyM1WJgiT/P1IPyqUSPUhc/iAw7dL71IgsGfKX1v VNvcViQqUdCZVPX97V68LBp+8vSITBFGzn2zor6vPpDK1yqUUQmde9tF2q4lQ3VZ VG8BiTNGHCO+muTEWpiQWn0I85tOVnbpBavXyIWgv8nmsNnP65eFRDIR1wx2CVZl obFNUg9bBI4zJm89F0Crt6tDMuofXx6YeISw/BJM+/HP80fixYLJletVurXkddJj aXCGCt8TxbcNTMMUD4l3OuCUblQxnh/dZ4bIoGA6/h4zgJdwrT4W5MidTr1oNuiB ilQZBx6yHrO3ouBxVQkTNvNuIu+RpkoB -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:07 2025 by rpki-client