$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: 16UnobQXGjOnkNsqrptV9fpSAotoIz/6rqDdHGP13go= Subject key identifier: C5:F1:69:4A:9B:D0:DD:04:F5:33:A7:68:B9:55:43:75:52:23:BD:64 Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: 0183 Signing time: Sat 31 May 2025 03:21:25 +0000 Manifest this update: Sat 31 May 2025 03:21:24 +0000 Manifest next update: Sat 07 Jun 2025 03:21:24 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: hJu8xsW25z3dll1nV6C5fRCLBuvz/UPlpsGO/TZeQ4w=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: 306udLdXsDXkERPewXDbNH98O47h8mfNTv4RCgj1cHQ=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: coH1x8KY/cq3OGm3WBXbeivefI4OPLTpBCpIkFV1i7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Validity Not Before: May 31 03:21:24 2025 GMT Not After : Jun 7 03:21:24 2025 GMT Subject: CN=683a75b5-26df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:40:b4:b0:53:74:dd:07:2d:d1:ee:fc:cc: 74:9c:94:1e:6b:1d:66:a5:bf:d2:2a:3a:0c:13:99: 20:76:4c:a2:19:42:8e:28:83:3f:b5:20:06:57:d8: 1c:00:03:44:b4:24:54:23:3e:af:ce:1a:2d:75:cf: cf:3b:bf:0f:16:aa:32:b7:08:c0:9d:f3:9c:c2:bf: 5f:15:3b:a0:7a:bb:4c:4b:50:f5:4e:c4:f3:4e:2a: 33:04:86:41:94:60:0d:8e:f0:c3:70:a6:ea:9d:12: 73:b2:9e:cd:8a:50:67:5e:ee:b8:26:e1:5e:d5:9a: 4a:c3:8c:61:91:4b:20:ba:e0:aa:24:88:8f:b6:a1: 13:bd:d2:6d:78:2a:da:73:14:08:3f:37:fa:ec:f1: 2a:c2:ce:8f:4b:8b:b3:6e:8f:6f:76:e7:3c:9f:bf: 23:0c:7b:a2:2c:f3:6d:8b:da:59:3f:eb:34:df:d7: 0f:57:60:ff:b3:dc:09:f0:be:e5:eb:e7:d9:d5:5e: a6:eb:2a:04:ce:72:4d:e7:ea:ac:84:c6:b8:6b:de: 71:08:eb:41:4f:86:82:25:c4:16:ab:ec:79:de:61: ad:63:b7:7f:9f:50:c5:8c:bc:33:90:98:70:15:7f: 36:1f:e3:2f:54:b6:94:d1:6f:15:1f:f5:21:08:f7: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:69:4A:9B:D0:DD:04:F5:33:A7:68:B9:55:43:75:52:23:BD:64 X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:35:c6:a7:37:7a:b9:34:28:7e:df:74:ef:51:a7:d9:53:cb: 2e:23:27:97:0e:31:bc:4a:c6:9b:bc:8c:e3:c9:3c:37:c8:d3: 3e:e9:3e:f8:20:c5:42:b2:a8:4a:25:e4:71:04:8b:6e:36:e2: 54:c5:ee:69:7a:82:d5:1d:d1:ee:3e:eb:10:cf:91:8a:50:a9: 31:bc:8f:e4:32:98:a9:7e:39:fe:ec:5c:51:0f:d0:6c:16:06: 10:72:e1:a8:b8:6a:11:7d:92:b2:d9:bd:b9:ea:b8:f1:05:b5: 60:f4:4a:72:4a:85:99:5b:7f:fd:66:aa:f3:5b:84:52:a9:6a: 50:bc:65:a7:f2:f9:58:f3:a9:5c:c3:ae:2b:00:6c:fb:82:95: f3:27:ae:32:fb:92:99:c1:6f:ce:83:79:63:87:bb:2f:df:c9: 68:7b:44:ea:a3:9e:a5:8e:af:13:38:58:a2:e2:6e:94:d2:dd: 3d:47:36:47:b1:17:9c:e9:84:b9:0b:98:11:5a:c5:d3:af:39: f4:60:e8:e9:ab:ab:5c:55:72:7e:51:b6:f8:b0:b6:5c:bd:66: 4e:9d:52:d5:05:1e:2d:ef:43:8c:f9:1b:af:af:1a:2f:dd:1c: 7b:c6:96:d5:6b:a9:1b:be:20:c0:2b:41:bb:b7:22:b5:77:39: 5e:b4:20:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjUwNTMxMDMyMTI0WhcNMjUwNjA3MDMyMTI0WjAYMRYwFAYD VQQDEw02ODNhNzViNS0yNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOxAtLBTdN0HLdHu/Mx0nJQeax1mpb/SKjoME5kgdkyiGUKOKIM/tSAGV9gc AANEtCRUIz6vzhotdc/PO78PFqoytwjAnfOcwr9fFTugertMS1D1TsTzTiozBIZB lGANjvDDcKbqnRJzsp7NilBnXu64JuFe1ZpKw4xhkUsguuCqJIiPtqETvdJteCra cxQIPzf67PEqws6PS4uzbo9vduc8n78jDHuiLPNti9pZP+s039cPV2D/s9wJ8L7l 6+fZ1V6m6yoEznJN5+qshMa4a95xCOtBT4aCJcQWq+x53mGtY7d/n1DFjLwzkJhw FX82H+MvVLaU0W8VH/UhCPcMGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXxaUqb 0N0E9TOnaLlVQ3VSI71kMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4NcanN3q5NCh+33TvUafZU8suIyeXDjG8SsabvIzjyTw3yNM+6T74 IMVCsqhKJeRxBItuNuJUxe5peoLVHdHuPusQz5GKUKkxvI/kMpipfjn+7FxRD9Bs FgYQcuGouGoRfZKy2b256rjxBbVg9EpySoWZW3/9ZqrzW4RSqWpQvGWn8vlY86lc w64rAGz7gpXzJ64y+5KZwW/Og3ljh7sv38loe0Tqo56ljq8TOFii4m6U0t09RzZH sRec6YS5C5gRWsXTrzn0YOjpq6tcVXJ+Ubb4sLZcvWZOnVLVBR4t70OM+Ruvrxov 3Rx7xpbVa6kbviDAK0G7tyK1dzletCCb -----END CERTIFICATE-----Generated at Sat May 31 17:48:40 2025 by rpki-client