$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: wJBQuiIso42bzmPiNHtj4T6/g5rxZrf231YdxYX/cTA= Subject key identifier: A0:9D:E8:3D:81:58:E2:4A:97:BB:8E:FA:62:92:2F:60:9B:CE:1F:8D Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 01A3 Signing time: Sat 31 May 2025 03:09:10 +0000 Manifest this update: Sat 31 May 2025 03:09:09 +0000 Manifest next update: Sat 07 Jun 2025 03:09:09 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: wwOsTLCL5h81h5w48Sq3cvecen1JbcTWIiRXVF32Ryg=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: BWLI/lFMOk0gs1uM9uMc8V3aTl6ezInYU2HutDGOR1Y=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: WszDeDtt2pA1qPuCttmdMd6CqUvx9wc+SucMvuhAFvE=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: KfEf5+IVw2cc5iVIvA+8UOcszxul9bOLbJUOX0WGbIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: May 31 03:09:09 2025 GMT Not After : Jun 7 03:09:09 2025 GMT Subject: CN=683a72d6-5397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:4d:69:af:89:17:66:e9:fb:8a:ff:8e:1c: 0a:95:f2:e2:1a:28:36:f3:be:12:bb:25:6c:fb:23: 8a:2d:54:e9:f3:3c:76:56:d6:5f:3d:b9:6f:e7:f2: 9d:3e:69:09:5d:9a:bf:10:62:e4:6e:46:2c:bf:a5: 4b:eb:4f:c5:5d:56:2c:dc:ee:bf:f9:01:30:3f:bb: d7:2c:99:2c:34:c5:3f:e7:42:9b:51:95:bf:84:7b: 89:35:fd:6c:42:a3:99:9e:58:2b:da:93:cb:4e:4f: 3a:8c:07:a2:f9:a9:0a:d2:08:45:77:d2:5c:f7:f8: 22:ba:70:28:be:95:af:c3:c4:02:7a:71:6f:92:f9: 2c:55:40:78:91:db:e6:9e:fe:da:56:2f:67:a0:50: d0:8a:81:2a:6e:7c:41:38:1c:95:2a:ae:e7:34:1f: 14:e1:f7:a5:17:46:ea:09:a5:40:cd:9a:65:33:51: d1:f0:2a:8c:4e:c6:30:3b:aa:42:09:76:71:1f:77: af:18:ac:33:42:d9:e0:a4:36:f2:80:06:59:f5:01: 5b:88:ac:b0:35:b9:c8:92:46:27:e4:3f:60:16:5d: 56:16:48:dd:9c:5a:4c:4c:c0:a8:f8:7e:6f:07:ee: fd:cd:d6:de:c3:22:53:92:30:1c:96:bd:52:d0:df: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:E8:3D:81:58:E2:4A:97:BB:8E:FA:62:92:2F:60:9B:CE:1F:8D X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:94:33:bf:f5:73:f7:34:bd:16:7e:c8:53:91:5d:17:d3:87: 23:14:72:53:38:a0:91:20:d0:b0:45:29:0e:8b:5e:b8:7a:d6: 88:21:47:e4:54:e4:33:87:a6:a0:17:ac:ac:dd:86:e7:49:a2: 82:c9:5d:3a:cd:d4:e7:6f:04:52:24:4c:c5:89:00:fa:32:dc: 34:3d:a6:45:d4:c8:6c:d8:e6:eb:e8:b6:97:3b:c5:b1:d3:e9: e5:7e:68:a6:b6:71:27:14:33:bd:38:da:60:66:29:ad:81:95: 44:44:dc:07:0d:1e:75:ac:f2:8f:65:d4:26:46:80:3d:20:2d: e6:bc:7f:8d:75:93:1e:17:28:59:c6:6c:49:f9:7d:86:eb:b9: 9b:cb:ed:46:dc:26:d1:c6:31:47:7c:fc:e6:5d:a3:5b:8c:47: 29:66:05:c6:2e:29:4c:7e:91:a6:48:e5:07:e5:a8:33:1e:c6: 2e:ec:44:2f:a0:07:7a:af:6e:d8:b2:30:c5:51:52:f1:3b:89: 95:cb:62:56:56:1a:ba:ef:09:4f:ec:d3:d8:22:88:89:41:ec: b7:46:1e:71:57:35:51:74:37:cc:5e:54:e7:cf:38:ee:e9:57: 3d:c4:28:cf:71:1a:7c:47:0e:c2:44:ee:47:e1:d0:73:49:54: fe:47:43:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUwNTMxMDMwOTA5WhcNMjUwNjA3MDMwOTA5WjAYMRYwFAYD VQQDEw02ODNhNzJkNi01Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWBNaa+JF2bp+4r/jhwKlfLiGig2874SuyVs+yOKLVTp8zx2VtZfPblv5/Kd PmkJXZq/EGLkbkYsv6VL60/FXVYs3O6/+QEwP7vXLJksNMU/50KbUZW/hHuJNf1s QqOZnlgr2pPLTk86jAei+akK0ghFd9Jc9/giunAovpWvw8QCenFvkvksVUB4kdvm nv7aVi9noFDQioEqbnxBOByVKq7nNB8U4felF0bqCaVAzZplM1HR8CqMTsYwO6pC CXZxH3evGKwzQtngpDbygAZZ9QFbiKywNbnIkkYn5D9gFl1WFkjdnFpMTMCo+H5v B+79zdbewyJTkjAclr1S0N+Q8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCd6D2B WOJKl7uO+mKSL2Cbzh+NMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCglDO/9XP3NL0WfshTkV0X04cjFHJTOKCRINCwRSkOi164etaIIUfk VOQzh6agF6ys3YbnSaKCyV06zdTnbwRSJEzFiQD6Mtw0PaZF1Mhs2Obr6LaXO8Wx 0+nlfmimtnEnFDO9ONpgZimtgZVERNwHDR51rPKPZdQmRoA9IC3mvH+NdZMeFyhZ xmxJ+X2G67mby+1G3CbRxjFHfPzmXaNbjEcpZgXGLilMfpGmSOUH5agzHsYu7EQv oAd6r27YsjDFUVLxO4mVy2JWVhq67wlP7NPYIoiJQey3Rh5xVzVRdDfMXlTnzzju 6Vc9xCjPcRp8Rw7CRO5H4dBzSVT+R0MQ -----END CERTIFICATE-----Generated at Sat May 31 17:53:07 2025 by rpki-client