$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: AGgNzGixshs0To9lTrByFm2ukI1bFunU4t57298JP8A= Subject key identifier: 55:E9:3D:52:75:DD:9C:9C:C0:C0:70:C2:3E:99:41:06:B9:B9:AA:69 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 0666 Signing time: Fri 30 May 2025 22:37:08 +0000 Manifest this update: Fri 30 May 2025 22:37:07 +0000 Manifest next update: Fri 06 Jun 2025 22:37:07 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: ZakjYyMKt+0Cv80eo04b8WoWCAu5F1gwrH9fGckgKZg=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: 9X7s4Zr8J67+2NJv1oqimpUYFSW3VJpeiZEh6uYKUO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: May 30 22:37:07 2025 GMT Not After : Jun 6 22:37:07 2025 GMT Subject: CN=683a3314-3c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:34:4f:47:ff:c4:7b:21:3c:7f:9d:46:d2: c0:3a:13:6f:e1:ed:cd:b3:62:81:e4:1d:9e:d7:28: 11:d5:e4:80:be:20:8a:8f:bf:b9:28:92:b4:83:4d: ae:cc:f4:40:1c:6a:b0:af:94:dc:73:11:d3:f2:d6: 08:49:ac:94:4c:e6:86:9a:4f:bc:d6:7b:89:4b:ea: 9a:99:6b:7a:6d:a7:94:24:69:0c:93:e7:2d:89:2a: f4:99:a6:3f:98:7e:7b:ac:3d:8d:b9:48:72:d8:d1: 86:86:77:09:22:f7:97:29:47:6c:51:05:7c:c6:86: 0b:a2:ea:41:d3:62:f9:6b:79:92:c6:5c:bb:73:6f: 21:a1:b9:d7:4c:e0:5d:54:02:f1:76:93:03:3d:c1: bb:64:32:90:ae:71:3a:db:40:c0:ba:c1:62:25:f9: cb:17:eb:42:ab:12:9e:25:d4:7e:19:f3:16:6f:2b: 4f:e0:a5:dc:ac:cd:68:ac:fc:16:5d:d2:f0:e9:92: 1a:34:c9:35:57:26:05:dc:95:68:b9:ce:f2:33:68: 2c:a0:38:33:99:88:7f:2a:7e:d0:37:a6:e8:a1:80: a4:de:51:8e:38:b9:4f:40:03:1a:ea:2d:dd:83:5a: c9:99:17:b5:e5:da:29:26:06:2d:67:a0:10:94:74: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E9:3D:52:75:DD:9C:9C:C0:C0:70:C2:3E:99:41:06:B9:B9:AA:69 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a2:0d:42:ac:3c:c3:f8:b6:de:46:bc:ea:2b:ea:c4:a9:d4: 07:72:f7:d8:13:55:a7:47:77:ba:e3:5d:c4:58:f2:35:d2:2f: e2:ee:29:27:10:54:ef:fb:42:19:11:b5:93:5c:bf:01:8d:c0: 7d:03:57:1d:c2:db:c1:a2:46:8e:37:59:68:62:1b:72:35:1a: 22:93:49:8f:05:3a:9f:f2:ed:ac:3a:14:a1:0e:05:34:88:fd: 0e:aa:3e:15:2d:58:ab:7e:3e:25:0e:60:87:d9:00:1e:db:6f: c2:c3:5b:fa:df:6d:9f:df:f4:14:88:8f:a1:3d:ea:6b:5a:ee: 08:3d:d0:c3:e7:53:75:4c:df:b0:a2:d9:65:9f:9d:02:0f:37: 40:c3:5c:bf:30:1f:ba:d4:ca:c9:56:69:d9:93:55:e6:ea:9c: 04:0d:cc:72:1a:84:9d:7b:3c:7e:e0:dc:79:b0:59:0e:ca:61: 95:0f:fa:48:35:a1:de:e3:ef:d4:04:c8:b5:58:cc:f1:33:49: 7c:0e:e9:a2:69:1c:29:74:59:eb:cf:8d:d9:0d:e6:36:cb:b1: 6a:c3:d2:23:43:a7:c6:73:f4:a7:3e:a0:b0:2b:51:99:b2:83: bc:9a:43:7a:fa:dc:d8:db:bc:76:96:d9:f9:63:71:b0:64:4a: 10:b6:85:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjUwNTMwMjIzNzA3WhcNMjUwNjA2MjIzNzA3WjAYMRYwFAYD VQQDEw02ODNhMzMxNC0zYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyc0T0f/xHshPH+dRtLAOhNv4e3Ns2KB5B2e1ygR1eSAviCKj7+5KJK0g02u zPRAHGqwr5TccxHT8tYISayUTOaGmk+81nuJS+qamWt6baeUJGkMk+ctiSr0maY/ mH57rD2NuUhy2NGGhncJIveXKUdsUQV8xoYLoupB02L5a3mSxly7c28hobnXTOBd VALxdpMDPcG7ZDKQrnE620DAusFiJfnLF+tCqxKeJdR+GfMWbytP4KXcrM1orPwW XdLw6ZIaNMk1VyYF3JVouc7yM2gsoDgzmYh/Kn7QN6booYCk3lGOOLlPQAMa6i3d g1rJmRe15dopJgYtZ6AQlHSAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXpPVJ1 3ZycwMBwwj6ZQQa5uappMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiog1CrDzD+LbeRrzqK+rEqdQHcvfYE1WnR3e6413EWPI10i/i7ikn EFTv+0IZEbWTXL8BjcB9A1cdwtvBokaON1loYhtyNRoik0mPBTqf8u2sOhShDgU0 iP0Oqj4VLVirfj4lDmCH2QAe22/Cw1v6322f3/QUiI+hPeprWu4IPdDD51N1TN+w otlln50CDzdAw1y/MB+61MrJVmnZk1Xm6pwEDcxyGoSdezx+4Nx5sFkOymGVD/pI NaHe4+/UBMi1WMzxM0l8DumiaRwpdFnrz43ZDeY2y7Fqw9IjQ6fGc/SnPqCwK1GZ soO8mkN6+tzY27x2ltn5Y3GwZEoQtoVk -----END CERTIFICATE-----Generated at Sat May 31 17:10:13 2025 by rpki-client