$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: UDDbWjYeGHn1MlFvTw+2OY2sOlp2JuONi+wpc1g2EZc= Subject key identifier: 89:70:5E:94:E9:0D:3E:D1:6F:01:EA:B9:F6:49:50:CD:49:D9:EE:CB Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: 0105 Signing time: Tue 03 Jun 2025 04:45:34 +0000 Manifest this update: Tue 03 Jun 2025 04:45:34 +0000 Manifest next update: Tue 10 Jun 2025 04:45:34 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: E9mr+c2KePO/rUwcEZQ4rXTO5/20q46GmdSOvxOJCwc=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Jun 3 04:45:34 2025 GMT Not After : Jun 10 04:45:34 2025 GMT Subject: CN=683e7dee-27ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:cc:38:9a:94:04:42:67:6e:67:72:20:8f: 89:7b:ad:2f:f6:ae:2d:4d:b1:c4:f7:ac:1d:7c:52: f5:1c:b5:d3:cb:a2:cc:c2:a3:2e:58:fc:76:6c:00: fc:03:cf:3f:a2:5b:dd:bc:01:d0:88:85:69:e0:fa: 70:8f:eb:c4:2d:51:c6:c0:2d:15:04:7a:f1:7b:03: 63:24:39:79:07:4c:85:a2:b4:1a:c0:b4:c1:b2:dd: be:49:e3:ab:74:39:f4:ac:d7:97:93:25:a9:f5:63: a0:e5:d2:5a:69:27:b2:e7:8a:12:d2:e7:7f:fd:24: 1c:49:01:3c:0f:6a:4e:60:a6:a1:ac:c8:87:cf:1e: 5d:3e:4d:1a:fe:8f:5d:a6:96:89:7d:9b:c5:03:7b: 7e:99:d9:59:dc:07:fe:89:69:c3:cf:b2:62:fd:71: 17:8d:14:4a:b4:7d:c3:cc:76:6d:0e:6b:90:0d:40: 68:97:3f:ae:8b:92:9e:b7:3c:1b:84:b6:00:53:58: 33:07:80:81:1b:5e:14:13:97:3c:56:a5:6e:20:a3: e8:3a:22:89:0c:79:5b:6a:5f:00:31:a8:71:4d:41: 98:f0:f0:46:ca:60:ea:f8:e3:94:5c:ee:6d:c9:36: e3:df:14:81:20:50:73:77:d4:cb:b5:27:23:34:cc: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:70:5E:94:E9:0D:3E:D1:6F:01:EA:B9:F6:49:50:CD:49:D9:EE:CB X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f4:fb:d0:f0:5c:79:41:16:4f:ce:3c:f8:a0:64:b9:4b:56: b0:74:48:83:f1:20:98:0a:b8:4e:b8:9e:99:91:7b:40:81:82: e2:e8:5e:f4:c0:12:55:48:70:f7:80:4f:8e:92:cc:6d:b5:48: de:f0:f4:c9:bd:bb:9a:ac:0d:9f:21:f2:4b:be:49:14:ae:a6: 16:94:5a:10:71:9c:40:cd:b3:f6:d2:a1:5b:0c:f6:1f:1d:16: 2b:70:29:bc:54:fd:c5:a3:87:4a:d1:54:fe:4b:31:b9:9e:33: a5:3c:6b:59:00:7c:61:83:c7:a0:4f:70:5e:df:7a:7d:68:3b: ec:01:57:95:ff:69:6f:1d:b2:31:5b:e1:38:8e:53:3d:91:2b: 32:97:92:3a:e0:46:9b:60:21:58:13:96:f8:11:d5:ec:88:36: 54:ff:cf:5f:e1:0b:73:22:8e:25:fb:75:03:99:45:b3:8b:bb: 9b:9f:fa:b8:28:33:d1:a9:d9:47:32:63:8f:00:3a:6f:80:4c: ea:26:c2:c0:9e:a6:38:b5:4a:ce:bb:50:38:75:e3:a9:ca:4e: f5:99:bb:75:ff:00:63:8f:38:82:3b:69:c5:96:3c:3f:bb:c7: 5a:8e:61:aa:98:e9:ef:7c:5e:8e:ff:a9:c4:bb:07:39:28:4e: 5a:96:7f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUwNjAzMDQ0NTM0WhcNMjUwNjEwMDQ0NTM0WjAYMRYwFAYD VQQDEw02ODNlN2RlZS0yN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4HMOJqUBEJnbmdyII+Je60v9q4tTbHE96wdfFL1HLXTy6LMwqMuWPx2bAD8 A88/olvdvAHQiIVp4Ppwj+vELVHGwC0VBHrxewNjJDl5B0yForQawLTBst2+SeOr dDn0rNeXkyWp9WOg5dJaaSey54oS0ud//SQcSQE8D2pOYKahrMiHzx5dPk0a/o9d ppaJfZvFA3t+mdlZ3Af+iWnDz7Ji/XEXjRRKtH3DzHZtDmuQDUBolz+ui5Ketzwb hLYAU1gzB4CBG14UE5c8VqVuIKPoOiKJDHlbal8AMahxTUGY8PBGymDq+OOUXO5t yTbj3xSBIFBzd9TLtScjNMwYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlwXpTp DT7RbwHqufZJUM1J2e7LMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb9PvQ8Fx5QRZPzjz4oGS5S1awdEiD8SCYCrhOuJ6ZkXtAgYLi6F70 wBJVSHD3gE+OksxttUje8PTJvbuarA2fIfJLvkkUrqYWlFoQcZxAzbP20qFbDPYf HRYrcCm8VP3Fo4dK0VT+SzG5njOlPGtZAHxhg8egT3Be33p9aDvsAVeV/2lvHbIx W+E4jlM9kSsyl5I64EabYCFYE5b4EdXsiDZU/89f4QtzIo4l+3UDmUWzi7ubn/q4 KDPRqdlHMmOPADpvgEzqJsLAnqY4tUrOu1A4deOpyk71mbt1/wBjjziCO2nFljw/ u8dajmGqmOnvfF6O/6nEuwc5KE5aln9Y -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:52 2025 by rpki-client