$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: ZE3IweKVR9kI2+UfWVjVmLnHXjq2In0+nQbMlsWWa9w= Subject key identifier: 91:5B:13:05:60:92:E6:D1:6D:92:60:A7:F9:DF:CC:A1:DD:9C:FE:83 Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: 0185 Signing time: Tue 03 Jun 2025 03:26:01 +0000 Manifest this update: Tue 03 Jun 2025 03:26:01 +0000 Manifest next update: Tue 10 Jun 2025 03:26:01 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: 0wB+cLDZDDgKD/aDWLtmhChnQlf+xgdxMSUKPW24BU4=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Validity Not Before: Jun 3 03:26:01 2025 GMT Not After : Jun 10 03:26:01 2025 GMT Subject: CN=683e6b49-93c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:4d:06:b7:8c:b7:bd:ad:e9:12:87:7e:dd: 5e:d8:07:16:81:45:98:1a:2a:8e:a5:25:92:ee:3a: 5d:0a:ed:e5:1b:45:81:78:9c:fa:72:f4:5a:22:42: 71:bb:0e:4e:1c:30:13:fd:39:93:bf:a1:ba:6f:fa: 75:df:3b:d9:5f:31:22:d3:0e:57:31:00:17:2f:01: 5c:78:63:a0:55:52:46:04:85:84:b7:53:fe:49:f3: 04:f1:fe:e9:d5:5b:94:cd:58:54:3f:a9:79:d1:3a: 66:3e:d5:d3:67:11:fd:f7:c2:b9:59:ed:5a:43:97: 22:a9:08:f3:4a:37:50:cb:e0:e5:55:d3:04:fc:06: 9c:0b:bd:98:58:71:1e:9f:92:ce:b1:cc:32:45:9e: 32:8e:46:d8:1b:8c:c9:ec:1f:90:9c:84:3f:0f:1b: be:0b:11:8f:f0:c1:c3:93:2c:a1:ec:e6:99:14:46: fb:86:3a:15:ca:dc:62:bb:88:c9:69:04:8b:2f:be: 2e:1e:68:aa:ab:97:40:0f:c4:d6:01:7c:90:b2:b5: 59:1b:6d:2a:f0:ae:a5:95:19:a4:3f:cc:a2:85:b4: da:b0:ef:33:f1:e2:ac:d2:19:b9:98:9d:6b:50:7c: be:99:21:ea:a6:cb:ab:11:f4:fe:60:75:50:b6:c2: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5B:13:05:60:92:E6:D1:6D:92:60:A7:F9:DF:CC:A1:DD:9C:FE:83 X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ca:a6:ba:3d:d1:5e:95:5b:83:15:c3:43:6f:a8:35:42:c8: 89:9f:6b:f2:37:72:9e:17:29:3c:f1:45:f5:0c:1f:43:c9:66: 56:cc:92:91:6a:cf:46:0e:8b:ea:dc:44:43:52:d2:e7:b3:19: 49:f0:a4:9c:03:d4:c0:62:fd:00:5b:8e:22:e9:c1:fc:10:c7: 30:b8:7a:89:03:d1:8a:55:0c:a0:0a:a8:e7:0c:9f:1e:d2:49: 0f:e5:ab:8e:34:13:fe:01:a2:72:38:62:1a:e0:66:21:19:af: 57:a9:34:88:d0:4b:f0:b7:3e:c1:57:8e:83:cf:e2:c3:e0:ad: 8b:03:cc:a7:d2:90:49:06:85:95:ad:c6:ec:72:bc:2b:69:c0: a3:af:54:e1:18:c1:52:85:e8:4e:6e:a0:43:9d:46:76:e3:60: f9:93:06:a2:45:31:d5:90:04:b6:28:5b:08:8e:ca:05:b4:ad: ef:22:ce:84:83:59:31:5d:51:8b:a9:c1:80:50:9f:38:ed:15: 07:d5:e7:fc:94:47:fc:20:27:ca:36:6c:87:34:34:5a:c0:4b: c2:00:6b:ad:2e:ee:ad:a4:e7:66:b7:1d:f9:0b:2f:6d:17:4d: 10:a6:0a:0d:30:38:11:e7:3c:a8:df:95:8d:36:25:70:a4:a1: 71:ff:5e:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjUwNjAzMDMyNjAxWhcNMjUwNjEwMDMyNjAxWjAYMRYwFAYD VQQDEw02ODNlNmI0OS05M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM1NBreMt72t6RKHft1e2AcWgUWYGiqOpSWS7jpdCu3lG0WBeJz6cvRaIkJx uw5OHDAT/TmTv6G6b/p13zvZXzEi0w5XMQAXLwFceGOgVVJGBIWEt1P+SfME8f7p 1VuUzVhUP6l50TpmPtXTZxH998K5We1aQ5ciqQjzSjdQy+DlVdME/AacC72YWHEe n5LOscwyRZ4yjkbYG4zJ7B+QnIQ/Dxu+CxGP8MHDkyyh7OaZFEb7hjoVytxiu4jJ aQSLL74uHmiqq5dAD8TWAXyQsrVZG20q8K6llRmkP8yihbTasO8z8eKs0hm5mJ1r UHy+mSHqpsurEfT+YHVQtsIvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFbEwVg kubRbZJgp/nfzKHdnP6DMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1yqa6PdFelVuDFcNDb6g1QsiJn2vyN3KeFyk88UX1DB9DyWZWzJKR as9GDovq3ERDUtLnsxlJ8KScA9TAYv0AW44i6cH8EMcwuHqJA9GKVQygCqjnDJ8e 0kkP5auONBP+AaJyOGIa4GYhGa9XqTSI0Evwtz7BV46Dz+LD4K2LA8yn0pBJBoWV rcbscrwracCjr1ThGMFShehObqBDnUZ242D5kwaiRTHVkAS2KFsIjsoFtK3vIs6E g1kxXVGLqcGAUJ847RUH1ef8lEf8ICfKNmyHNDRawEvCAGutLu6tpOdmtx35Cy9t F00QpgoNMDgR5zyo35WNNiVwpKFx/15m -----END CERTIFICATE-----Generated at Wed Jun 4 00:03:40 2025 by rpki-client