$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: RlCB0n5rSSeNFI1R4H/IdKB/9Z0Id7BpXNd4ilF0Mfg= Subject key identifier: 11:CC:68:1D:63:D5:83:08:D4:36:9E:9C:9D:A6:A3:A1:89:6D:A1:45 Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0C67 Signing time: Fri 30 May 2025 18:29:58 +0000 Manifest this update: Fri 30 May 2025 18:29:57 +0000 Manifest next update: Fri 06 Jun 2025 18:29:57 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: O/6tP4iJucuKCcWh4kmH0qvnaxw9vCPRWovnS0Axz40=) 2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: NrdZbVMd1dHy2FEEAMNxWeknBO6BNRI5lNG3a+z4IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: May 30 18:29:57 2025 GMT Not After : Jun 6 18:29:57 2025 GMT Subject: CN=6839f926-e19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:89:d0:ec:ac:c6:ce:b6:99:03:95:f6:32:3a: 07:06:6f:b0:db:ab:cb:b3:f3:70:6e:b3:e7:56:bc: b1:38:87:34:7a:35:e4:10:3b:90:00:31:d0:60:e5: 8c:43:55:7a:d2:93:09:8e:62:45:bc:65:42:16:10: 48:b9:c1:b8:51:ee:e0:a4:03:f0:57:d5:95:01:81: bb:e1:e8:5e:e0:e0:99:7a:e6:b9:95:af:a0:68:2e: 99:90:4a:3c:ef:2d:19:98:44:7e:3c:c6:bd:6a:cb: 98:7a:de:15:24:81:74:de:07:a8:f1:45:25:e9:40: 3c:5a:16:4d:6a:c3:cd:2b:f1:6a:f4:9f:a4:e2:de: f2:0f:b0:fe:14:57:91:c0:01:cc:e3:9d:73:70:04: 5a:a6:20:d3:4a:e5:a0:dd:c4:fd:7c:13:7f:6f:6b: 1c:17:5d:09:10:cb:b0:81:c1:8d:61:24:07:bc:0e: 3c:ed:43:fc:6f:a4:78:5b:8b:eb:70:e1:01:0d:9d: 60:ba:e7:3b:ef:92:8c:33:fb:d8:ef:5e:10:04:08: 29:0a:3d:51:8c:1e:c7:04:25:27:70:30:e9:08:6c: 85:9d:d6:05:76:9b:56:8c:b4:6b:4c:30:95:61:15: fd:7b:69:61:a3:fc:7c:9d:0b:cd:70:f2:bb:85:87: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:68:1D:63:D5:83:08:D4:36:9E:9C:9D:A6:A3:A1:89:6D:A1:45 X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:46:10:31:e2:f5:89:e3:f3:1f:0d:23:05:9b:5c:71:2b:85: 96:40:18:7b:60:c5:1d:b3:be:4a:05:fa:e2:64:44:8c:46:75: 41:3e:2f:62:06:dd:c1:28:1c:6e:98:7c:9f:64:b8:a0:6c:78: 13:47:4c:5a:ab:4a:08:72:ea:bb:85:59:44:ea:7e:0d:55:80: a6:91:c3:8e:66:ce:e6:95:c2:56:a2:9c:e9:e8:2c:be:1f:4e: 80:64:60:55:b4:99:59:5f:99:95:c8:d2:a5:2c:3a:c3:aa:b0: 0d:64:ed:09:ba:1f:46:65:b1:62:c0:fd:b8:82:02:e7:61:a0: a4:63:28:d8:69:75:e1:6a:73:bd:31:78:24:ca:02:a2:b3:5f: e7:ba:0b:f6:14:0b:7d:ff:14:9e:43:5f:c4:e2:c8:4e:5f:88: 77:cf:be:9e:42:7b:09:e7:39:82:47:92:9e:d4:d4:d2:48:33: 3f:78:de:6e:ee:e0:2f:9c:15:db:cd:1e:4c:6a:80:7d:b6:56: d0:94:84:44:e2:67:45:3b:c8:e3:b5:b0:51:d8:8d:3f:01:75: fc:b2:9e:de:54:6d:73:61:63:6b:3c:3a:e1:fb:f8:c7:b9:33: aa:90:f2:17:11:b2:f9:2b:dc:75:48:a3:4f:bd:da:b9:86:30: 6e:07:a7:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjUwNTMwMTgyOTU3WhcNMjUwNjA2MTgyOTU3WjAYMRYwFAYD VQQDEw02ODM5ZjkyNi1lMTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7onQ7KzGzraZA5X2MjoHBm+w26vLs/NwbrPnVryxOIc0ejXkEDuQADHQYOWM Q1V60pMJjmJFvGVCFhBIucG4Ue7gpAPwV9WVAYG74ehe4OCZeua5la+gaC6ZkEo8 7y0ZmER+PMa9asuYet4VJIF03geo8UUl6UA8WhZNasPNK/Fq9J+k4t7yD7D+FFeR wAHM451zcARapiDTSuWg3cT9fBN/b2scF10JEMuwgcGNYSQHvA487UP8b6R4W4vr cOEBDZ1guuc775KMM/vY714QBAgpCj1RjB7HBCUncDDpCGyFndYFdptWjLRrTDCV YRX9e2lho/x8nQvNcPK7hYctLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHMaB1j 1YMI1DaenJ2mo6GJbaFFMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpRhAx4vWJ4/MfDSMFm1xxK4WWQBh7YMUds75KBfriZESMRnVBPi9i Bt3BKBxumHyfZLigbHgTR0xaq0oIcuq7hVlE6n4NVYCmkcOOZs7mlcJWopzp6Cy+ H06AZGBVtJlZX5mVyNKlLDrDqrANZO0Juh9GZbFiwP24ggLnYaCkYyjYaXXhanO9 MXgkygKis1/nugv2FAt9/xSeQ1/E4shOX4h3z76eQnsJ5zmCR5Ke1NTSSDM/eN5u 7uAvnBXbzR5MaoB9tlbQlIRE4mdFO8jjtbBR2I0/AXX8sp7eVG1zYWNrPDrh+/jH uTOqkPIXEbL5K9x1SKNPvdq5hjBuB6fB -----END CERTIFICATE-----Generated at Sat May 31 16:00:17 2025 by rpki-client