$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: bgp/mHeJ1TlbOXYKSXUjAX/YWgarvd/rn34hfZcepPg= Subject key identifier: 2B:70:DF:BF:47:72:39:E4:E6:67:2C:0B:99:16:66:1E:31:95:6B:55 Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: 82 Signing time: Tue 03 Jun 2025 06:27:37 +0000 Manifest this update: Tue 03 Jun 2025 06:27:36 +0000 Manifest next update: Tue 10 Jun 2025 06:27:36 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: erwYmlk9NLZGU6LSuIYxR9NiJrmXpSGvwNyNpiYbGI4=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Jun 3 06:27:36 2025 GMT Not After : Jun 10 06:27:36 2025 GMT Subject: CN=683e95d9-4ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:c3:9d:1a:5c:f6:68:21:51:f1:f1:43:45: 66:3a:07:ce:1e:d7:08:2b:af:f9:b7:1b:67:85:4e: bb:3a:de:9e:ed:dd:1e:d9:ee:40:35:de:b2:0a:b2: 46:00:53:b5:c5:42:2c:13:9a:39:04:22:e8:56:ae: ff:4d:c2:cb:e9:5b:09:56:23:86:c8:06:8f:96:2a: 3b:2a:0d:79:08:26:a0:bf:54:7e:85:c6:be:d5:ef: 64:37:0f:df:d4:3e:5e:29:29:ac:62:fb:65:d5:2b: e4:ac:e0:a3:0a:12:de:1c:68:84:6b:cd:e4:44:67: f2:93:f7:8f:2d:4a:d3:2b:ed:70:8e:d0:65:25:e8: c6:02:98:48:08:42:35:eb:4b:f7:c5:1d:37:49:40: 1f:19:64:62:b6:ba:eb:44:fd:53:8b:76:eb:07:64: 3f:f5:9b:38:70:bf:50:2a:3f:3b:f7:f7:d4:c1:f4: d7:b2:f6:be:d2:1c:e7:5b:86:71:ea:b0:24:34:e6: b4:0d:25:e1:35:fe:65:a6:bd:97:e1:f3:e1:9d:3a: 21:13:76:67:e3:0b:cb:57:d6:2c:ca:54:55:eb:50: db:4b:18:08:b4:16:9d:59:b1:31:4b:78:a4:b3:1d: ae:0c:6e:d8:dc:ff:b3:a0:6f:61:90:30:55:fb:05: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:70:DF:BF:47:72:39:E4:E6:67:2C:0B:99:16:66:1E:31:95:6B:55 X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:63:81:50:90:17:c2:15:c3:dd:48:45:06:e4:06:9b:fd:a9: 5e:13:e8:40:52:e3:f0:5e:be:e4:44:6e:7f:88:df:10:a7:2c: 3e:62:2c:b8:43:12:49:6c:5b:2c:06:0c:6b:63:e2:91:91:ac: 43:bf:fc:21:bb:64:0e:c5:9c:cd:ea:78:b8:4b:a1:c4:09:77: 78:a8:04:bd:fb:d2:ea:11:01:94:af:17:99:95:c2:8c:f3:a9: 41:9d:87:65:b6:ce:58:4e:4f:37:59:45:19:f4:94:81:07:5a: 6e:cd:b1:bb:27:f9:cc:d7:05:01:2f:7e:8a:52:f3:ae:1f:e2: 1a:a7:a7:58:3e:cc:b4:8f:cc:10:da:b6:55:44:4a:db:64:67: 4a:9d:3c:58:2d:a0:dc:9a:86:43:05:4e:1e:78:b2:38:2d:d8: 19:fb:61:e8:4d:21:66:8c:25:2a:de:58:1a:38:db:6f:fd:b9: 4a:60:74:8a:e3:b1:aa:87:04:5d:86:97:2c:62:f0:f4:cc:42: e2:c9:45:0d:e6:72:6c:08:17:e2:ef:24:15:ec:94:aa:12:4e: 48:ff:f2:2e:8e:f1:44:7a:7a:0e:20:fe:c8:4b:09:72:6b:3e: 38:af:ad:4f:eb:8e:9c:f0:71:fd:85:04:99:3b:8c:cb:3f:57: 76:6b:33:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDFCREVCMEMyNzVDOTBFODFCRkEzQUFGRTIxM0U0RTcx MjFFQjczNEEwHhcNMjUwNjAzMDYyNzM2WhcNMjUwNjEwMDYyNzM2WjAYMRYwFAYD VQQDEw02ODNlOTVkOS00ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAvDnRpc9mghUfHxQ0VmOgfOHtcIK6/5txtnhU67Ot6e7d0e2e5ANd6yCrJG AFO1xUIsE5o5BCLoVq7/TcLL6VsJViOGyAaPlio7Kg15CCagv1R+hca+1e9kNw/f 1D5eKSmsYvtl1SvkrOCjChLeHGiEa83kRGfyk/ePLUrTK+1wjtBlJejGAphICEI1 60v3xR03SUAfGWRitrrrRP1Ti3brB2Q/9Zs4cL9QKj879/fUwfTXsva+0hznW4Zx 6rAkNOa0DSXhNf5lpr2X4fPhnTohE3Zn4wvLV9YsylRV61DbSxgItBadWbExS3ik sx2uDG7Y3P+zoG9hkDBV+wU/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtw379H cjnk5mcsC5kWZh4xlWtVMB8GA1UdIwQYMBaAFBvesMJ1yQ6Bv6Oq/iE+TnEh63NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS8xM0Q4MDYwODgy NDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRvR19vNnItSVQ1T2NTSHJj MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS8xM0Q4MDYwODgyNDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRv R19vNnItSVQ1T2NTSHJjMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIY4FQkBfCFcPdSEUG5Aab/aleE+hAUuPwXr7kRG5/iN8Qpyw+Yiy4 QxJJbFssBgxrY+KRkaxDv/whu2QOxZzN6ni4S6HECXd4qAS9+9LqEQGUrxeZlcKM 86lBnYdlts5YTk83WUUZ9JSBB1puzbG7J/nM1wUBL36KUvOuH+Iap6dYPsy0j8wQ 2rZVRErbZGdKnTxYLaDcmoZDBU4eeLI4LdgZ+2HoTSFmjCUq3lgaONtv/blKYHSK 47GqhwRdhpcsYvD0zELiyUUN5nJsCBfi7yQV7JSqEk5I//IujvFEenoOIP7ISwly az44r61P646c8HH9hQSZO4zLP1d2azPH -----END CERTIFICATE-----Generated at Wed Jun 4 00:03:19 2025 by rpki-client