$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json) Hash identifier: ycpQ4ZJrpsrTOqK3tU2iU3eUgiOYm+WYMF60fYCA3qo= Subject key identifier: 50:C0:1E:A2:06:6B:57:F8:D7:86:91:DE:BB:01:CE:70:55:FC:A2:29 Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft Manifest number: 017E Signing time: Sat 31 May 2025 03:24:32 +0000 Manifest this update: Sat 31 May 2025 03:24:31 +0000 Manifest next update: Sat 07 Jun 2025 03:24:31 +0000 Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: 74kde2K01P0MrInYwdmySxPvIaJ9KOgviNeu/9Lhi7g=) 2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: Odfpid+S8/X10dkHkByuVcfAeQDpGtmiKeMq57hIa04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: May 31 03:24:31 2025 GMT Not After : Jun 7 03:24:31 2025 GMT Subject: CN=683a7670-6e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:a2:1b:da:ba:64:43:3c:5b:47:78:fc:13: d9:19:40:aa:52:05:d1:d8:d6:a0:5a:57:bb:3d:a3: 44:a5:ce:fc:43:0a:28:f8:c3:5b:3d:30:7c:96:f6: 1c:9b:b3:e8:dd:24:49:0e:8d:5b:9d:d0:d8:4a:ba: ee:0c:e2:2b:3b:eb:2f:a7:7d:53:cf:fa:47:a2:4b: b3:67:19:b0:cb:a4:50:d3:23:8a:da:73:ac:a1:22: 95:58:07:ad:f9:ca:a5:59:a5:1b:49:09:07:fb:54: 1b:0d:88:9b:21:ac:91:4c:02:b3:5d:c7:4d:99:ab: a1:d0:10:bc:0f:9f:a6:33:d1:70:ca:d4:e9:74:8d: e9:9e:fc:90:72:f2:cf:48:71:fd:91:2e:f5:99:a1: dc:4d:88:76:67:76:03:72:6c:ff:6b:2b:d7:00:9a: c1:94:84:21:74:74:42:8d:8a:27:56:bd:24:e0:b8: 19:43:f7:ae:2d:e7:37:4e:22:4d:1d:56:1e:a2:0e: 3e:07:9c:4c:45:5c:10:a8:18:95:1e:8c:f3:b4:ca: 9e:45:f0:10:cc:01:9c:1f:62:28:0d:c0:36:ea:2a: f8:fb:f7:21:1b:46:30:38:64:c9:ba:04:f6:fd:1a: 2b:c4:f3:20:c6:71:35:1c:ab:89:83:49:09:ac:83: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:1E:A2:06:6B:57:F8:D7:86:91:DE:BB:01:CE:70:55:FC:A2:29 X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:93:3c:28:e6:5d:1f:45:92:4f:75:1f:78:06:d1:55:76:6f: 89:8a:82:fa:56:14:4b:70:dc:31:96:a2:9f:ec:da:3d:d4:37: 19:10:f2:f7:cc:7a:7f:4b:f7:9f:d5:d6:20:db:7c:92:24:9d: 7e:36:36:f9:ce:8e:2c:a9:83:34:5e:7f:d3:fc:59:b3:af:8b: c4:9d:16:53:69:57:20:75:51:cb:d6:c4:9d:ef:92:58:80:76: db:97:a7:2b:49:df:3d:58:4e:b2:f1:b1:97:2c:f1:2d:0c:45: bf:9d:8e:d7:eb:c7:cf:d8:0f:3c:d8:10:dc:cc:0c:4f:72:48: 8e:0b:b1:ba:a3:35:49:aa:c5:c8:03:5f:25:7c:23:a3:84:6d: 53:24:a4:fa:e5:00:f1:34:1c:74:0a:63:99:63:6f:86:cf:13: d7:64:0c:b8:6f:6d:b2:8b:20:d0:fd:d9:7b:f4:38:58:06:31: e5:0d:d9:a0:6e:45:84:75:b3:23:32:20:aa:7e:e3:d7:44:6c: c3:fc:a8:b2:64:00:e5:a0:18:ec:bd:b2:e8:8f:e6:d5:4e:1c: 86:5d:50:0b:97:ac:ee:ca:97:e2:bf:22:9e:49:6e:f4:81:89: 62:2a:47:a0:39:fb:6d:24:ba:8a:d1:a1:e0:34:a0:18:38:03: 69:d7:8e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjUwNTMxMDMyNDMxWhcNMjUwNjA3MDMyNDMxWjAYMRYwFAYD VQQDEw02ODNhNzY3MC02ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOaiG9q6ZEM8W0d4/BPZGUCqUgXR2NagWle7PaNEpc78Qwoo+MNbPTB8lvYc m7Po3SRJDo1bndDYSrruDOIrO+svp31Tz/pHokuzZxmwy6RQ0yOK2nOsoSKVWAet +cqlWaUbSQkH+1QbDYibIayRTAKzXcdNmauh0BC8D5+mM9FwytTpdI3pnvyQcvLP SHH9kS71maHcTYh2Z3YDcmz/ayvXAJrBlIQhdHRCjYonVr0k4LgZQ/euLec3TiJN HVYeog4+B5xMRVwQqBiVHozztMqeRfAQzAGcH2IoDcA26ir4+/chG0YwOGTJugT2 /RorxPMgxnE1HKuJg0kJrIP1LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDAHqIG a1f414aR3rsBznBV/KIpMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk ME9kNWk4Nkx5N09XWXFKXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmkzwo5l0fRZJPdR94BtFVdm+JioL6VhRLcNwxlqKf7No91DcZEPL3 zHp/S/ef1dYg23ySJJ1+Njb5zo4sqYM0Xn/T/Fmzr4vEnRZTaVcgdVHL1sSd75JY gHbbl6crSd89WE6y8bGXLPEtDEW/nY7X68fP2A882BDczAxPckiOC7G6ozVJqsXI A18lfCOjhG1TJKT65QDxNBx0CmOZY2+GzxPXZAy4b22yiyDQ/dl79DhYBjHlDdmg bkWEdbMjMiCqfuPXRGzD/KiyZADloBjsvbLoj+bVThyGXVALl6zuypfivyKeSW70 gYliKkegOfttJLqK0aHgNKAYOANp144d -----END CERTIFICATE-----Generated at Sat May 31 17:39:11 2025 by rpki-client