$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: adraeVV/pIyUMueKRzLWW3/xJYj1XAzSmXCjYj7fEyU= Subject key identifier: 55:A2:A2:34:39:97:36:95:C0:15:A7:AE:B1:46:F7:4A:80:C9:70:5C Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: 98 Signing time: Sat 31 May 2025 05:51:59 +0000 Manifest this update: Sat 31 May 2025 05:51:58 +0000 Manifest next update: Sat 07 Jun 2025 05:51:58 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: 8Y0eap/zbpdzHnEsczgH4H/tsovwsHRP/Unh2SniskE=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: May 31 05:51:58 2025 GMT Not After : Jun 7 05:51:58 2025 GMT Subject: CN=683a98ff-0d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:6a:4a:43:c2:69:bb:9f:85:67:e3:aa:11: 8d:d1:23:25:a6:87:a8:c6:28:93:b6:2a:0c:f3:7d: c2:04:9b:d5:f7:14:d5:de:62:88:ea:62:41:69:5d: 49:d3:2a:1b:86:a9:ff:df:2b:85:f1:7d:5d:3f:ba: 5c:13:26:e6:5d:3e:33:7a:ab:21:ff:8e:68:53:60: 80:f8:1f:d0:f4:b4:7d:ba:84:d4:0f:b1:a6:e1:c1: c4:e0:20:e0:46:6e:35:48:db:5b:9c:89:f8:4d:20: c8:55:49:33:5f:5e:0c:cd:18:ac:ad:aa:dc:64:cd: de:1d:5a:25:b5:a8:17:35:35:93:02:b8:3b:1b:c0: f4:c7:5f:1e:d4:01:e8:de:4a:50:91:ba:fb:b2:05: 7e:75:b9:54:4d:97:59:5c:dd:f5:71:05:49:46:af: 70:8c:08:e9:c5:0e:f4:53:84:3d:be:5a:90:a2:f5: b7:d1:ba:6f:58:ff:ba:99:7f:e6:28:55:78:4e:41: 2e:35:ac:e6:fc:db:7f:cf:90:07:98:4b:eb:c1:19: 02:c8:f5:7b:b3:7f:ef:cc:fb:e7:53:f7:00:ec:5b: c2:1d:ba:89:55:a7:04:33:be:52:c6:f1:25:50:3f: 0c:3f:a9:84:e9:ac:c6:a3:f5:86:ae:ec:6a:d9:3d: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:A2:34:39:97:36:95:C0:15:A7:AE:B1:46:F7:4A:80:C9:70:5C X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:15:f8:ab:73:4e:c9:40:26:5a:75:4d:7e:38:76:e1:7d:ae: 04:1a:90:e8:6c:b3:3b:e6:83:13:15:54:08:a1:7f:84:30:1a: c0:0c:e7:ee:86:26:2b:b9:09:3d:fc:92:8b:6f:9d:de:fe:16: 35:04:2d:c4:c5:e3:ae:13:07:0c:ba:b1:c8:a8:07:5a:a2:95: 9b:0a:d0:53:ef:8d:f6:5b:48:26:54:da:87:6b:49:f9:f0:e8: 6b:06:04:6c:e0:24:6b:39:fd:45:2f:75:2f:0f:27:cd:f5:61: 7f:64:9f:46:2b:28:46:17:f3:7c:51:90:d1:7c:5f:e2:27:57: 80:e1:ac:3b:d9:f5:d0:24:f9:90:d5:b4:3e:bb:16:74:fc:2a: d2:d8:b2:1e:9f:4a:56:dc:c0:27:4e:73:6f:d3:7e:58:0e:19: 2d:f6:0b:45:b2:4c:a6:4e:12:57:65:f9:60:c3:29:6e:b5:70: 73:a4:ad:48:26:2b:16:7e:59:0a:c3:45:ba:ef:f9:db:74:d3: 96:0f:bb:6c:65:9c:b2:da:77:54:e6:1a:c2:81:1b:26:f2:9c: 31:37:c5:4d:c7:4f:bc:bd:90:1f:1f:d8:74:8b:c9:7a:d9:d0: 2f:95:b0:68:26:f6:cd:8c:e4:cd:96:8e:35:b8:06:99:c9:5b: 2c:96:fc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUwNTMxMDU1MTU4WhcNMjUwNjA3MDU1MTU4WjAYMRYwFAYD VQQDEw02ODNhOThmZi0wZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EZqSkPCabufhWfjqhGN0SMlpoeoxiiTtioM833CBJvV9xTV3mKI6mJBaV1J 0yobhqn/3yuF8X1dP7pcEybmXT4zeqsh/45oU2CA+B/Q9LR9uoTUD7Gm4cHE4CDg Rm41SNtbnIn4TSDIVUkzX14MzRisrarcZM3eHVoltagXNTWTArg7G8D0x18e1AHo 3kpQkbr7sgV+dblUTZdZXN31cQVJRq9wjAjpxQ70U4Q9vlqQovW30bpvWP+6mX/m KFV4TkEuNazm/Nt/z5AHmEvrwRkCyPV7s3/vzPvnU/cA7FvCHbqJVacEM75SxvEl UD8MP6mE6azGo/WGruxq2T28YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWiojQ5 lzaVwBWnrrFG90qAyXBcMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlFfirc07JQCZadU1+OHbhfa4EGpDobLM75oMTFVQIoX+EMBrADOfu hiYruQk9/JKLb53e/hY1BC3ExeOuEwcMurHIqAdaopWbCtBT7432W0gmVNqHa0n5 8OhrBgRs4CRrOf1FL3UvDyfN9WF/ZJ9GKyhGF/N8UZDRfF/iJ1eA4aw72fXQJPmQ 1bQ+uxZ0/CrS2LIen0pW3MAnTnNv035YDhkt9gtFskymThJXZflgwylutXBzpK1I JisWflkKw0W67/nbdNOWD7tsZZyy2ndU5hrCgRsm8pwxN8VNx0+8vZAfH9h0i8l6 2dAvlbBoJvbNjOTNlo41uAaZyVsslvxW -----END CERTIFICATE-----Generated at Sat May 31 17:42:33 2025 by rpki-client