$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: 8lApCkcMvfHRSKthwy86xN56kBlylWKTz7jIcMbEQJ0= Subject key identifier: 41:9D:E9:2E:CB:1F:FE:12:CA:57:58:57:FA:6B:4B:CB:24:C6:E4:7E Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 0165 Signing time: Mon 09 Jun 2025 03:01:15 +0000 Manifest this update: Mon 09 Jun 2025 03:01:15 +0000 Manifest next update: Mon 16 Jun 2025 03:01:15 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: Cu8g97//9MGzD5oQg0rUqVe/RnI/themrh6Q90IVCos=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dKoEMXA8fRTWxjeYqmYYgyMSw9H1lwIw8Fa9EYm/xNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Jun 9 03:01:15 2025 GMT Not After : Jun 16 03:01:15 2025 GMT Subject: CN=68464e7b-1064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:67:af:2b:11:bf:00:c9:33:d4:f9:3a:b5: 5a:d9:8a:98:8a:a8:e7:08:1a:cb:35:3f:a9:c7:f8: 54:1c:50:7d:8b:ef:bd:b6:29:c5:3a:40:54:45:99: 1d:33:fa:7c:42:91:a4:65:6a:6b:86:8c:a3:03:28: 6b:ac:78:dc:27:e2:30:dd:ae:17:e2:25:78:c7:39: 92:31:8b:d0:31:95:71:67:17:a5:52:06:8c:2d:3b: f6:ab:a7:8e:a5:b9:99:9d:4a:db:a2:a2:ef:28:c8: a2:93:9c:6b:7b:cb:54:11:c6:10:41:92:8d:a5:6d: 4b:dd:c3:45:f9:af:76:9a:87:51:c4:d0:68:db:20: 97:01:4f:df:0e:a0:bf:d6:b6:4d:d4:91:c7:d7:6a: 3c:99:7c:be:42:be:da:07:22:84:d6:ad:76:81:f4: 7a:36:53:74:9e:06:d0:99:d5:93:82:df:1a:fe:3e: 1d:20:79:64:c3:3d:ab:35:ef:75:04:8b:ef:f8:1d: b5:26:c2:78:ed:2f:08:37:b1:ad:3f:f9:da:fe:60: fe:67:b7:04:d5:d9:6b:cb:6e:35:b5:e6:63:c2:5f: 29:22:9d:ae:8d:7a:8a:0d:81:95:7a:bd:54:5b:d2: 1b:eb:6a:2a:c4:6b:9c:cb:99:7d:bd:bc:30:45:10: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:E9:2E:CB:1F:FE:12:CA:57:58:57:FA:6B:4B:CB:24:C6:E4:7E X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e8:27:a7:d1:a5:4b:a4:0d:b9:7d:c4:04:9e:1e:64:b5:48: 5a:83:2d:e6:20:ca:2e:a5:c3:8b:5b:e5:d3:a4:3c:5c:90:6c: 1e:8e:1f:d5:e3:72:d0:98:00:3a:cd:cc:2a:0b:14:ea:71:d0: 29:6e:5a:23:95:4a:4e:6e:e8:62:9c:e7:c1:1f:3a:b6:a4:5a: dc:23:3c:81:95:5a:53:4e:52:74:df:86:ca:d2:04:e1:86:8c: be:f0:7a:8f:ba:df:00:81:19:de:f4:6b:56:42:89:3a:78:d2: e9:c8:14:f8:15:c2:6d:1b:fe:e1:f0:57:a0:42:07:3b:7d:e0: bb:62:1c:b2:b1:fb:52:86:7c:86:f1:64:6c:30:a5:2a:fe:f5: 1b:c6:63:8e:72:e1:00:96:71:13:e5:7f:4e:ea:6a:ed:18:62: 39:fc:00:2c:05:c0:f4:b0:79:06:6a:ae:6f:e0:fe:de:69:1a: fe:7a:d9:2a:ca:f7:e5:ce:24:3b:71:67:95:1b:1e:67:72:f6: 18:84:a3:e1:98:d7:f2:ab:e2:8b:1e:01:58:b6:f9:69:9a:96: 13:2d:9f:15:74:45:41:ad:ae:5c:6e:b6:f2:00:16:75:74:7b: 8d:5f:a3:b7:eb:e6:42:7c:8d:c4:ef:9e:88:56:6d:e3:08:c6: 02:2e:4a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUwNjA5MDMwMTE1WhcNMjUwNjE2MDMwMTE1WjAYMRYwFAYD VQQDEw02ODQ2NGU3Yi0xMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupdnrysRvwDJM9T5OrVa2YqYiqjnCBrLNT+px/hUHFB9i++9tinFOkBURZkd M/p8QpGkZWprhoyjAyhrrHjcJ+Iw3a4X4iV4xzmSMYvQMZVxZxelUgaMLTv2q6eO pbmZnUrboqLvKMiik5xre8tUEcYQQZKNpW1L3cNF+a92modRxNBo2yCXAU/fDqC/ 1rZN1JHH12o8mXy+Qr7aByKE1q12gfR6NlN0ngbQmdWTgt8a/j4dIHlkwz2rNe91 BIvv+B21JsJ47S8IN7GtP/na/mD+Z7cE1dlry241teZjwl8pIp2ujXqKDYGVer1U W9Ib62oqxGucy5l9vbwwRRBTZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGd6S7L H/4SyldYV/prS8skxuR+MB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA6Cen0aVLpA25fcQEnh5ktUhagy3mIMoupcOLW+XTpDxckGwejh/V 43LQmAA6zcwqCxTqcdApblojlUpObuhinOfBHzq2pFrcIzyBlVpTTlJ034bK0gTh hoy+8HqPut8AgRne9GtWQok6eNLpyBT4FcJtG/7h8FegQgc7feC7YhyysftShnyG 8WRsMKUq/vUbxmOOcuEAlnET5X9O6mrtGGI5/AAsBcD0sHkGaq5v4P7eaRr+etkq yvflziQ7cWeVGx5ncvYYhKPhmNfyq+KLHgFYtvlpmpYTLZ8VdEVBra5cbrbyABZ1 dHuNX6O36+ZCfI3E756IVm3jCMYCLkoW -----END CERTIFICATE-----Generated at Mon Jun 9 19:05:57 2025 by rpki-client