$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: W9yDGK1n/GhZ4EVCPcURpLYPtFd0ykS1i0xExE705/w= Subject key identifier: DE:F6:19:69:B9:44:00:13:A9:D1:3D:2C:B1:52:EE:F3:48:38:2A:61 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 01A3 Signing time: Sat 07 Jun 2025 02:53:29 +0000 Manifest this update: Sat 07 Jun 2025 02:53:29 +0000 Manifest next update: Sat 14 Jun 2025 02:53:29 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: Axjy0bslhMnPBkpkkkXwpGJWxu9kYAbrMI+JxPFQGg0=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Jun 7 02:53:29 2025 GMT Not After : Jun 14 02:53:29 2025 GMT Subject: CN=6843a9a9-54a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:b7:83:d7:f8:01:40:96:71:34:5f:98:6e: 51:22:61:4e:92:cd:95:61:84:ae:55:11:0c:9f:c0: 7d:99:87:fe:37:04:cf:fe:ba:7d:08:f6:ad:ae:b6: 67:50:8a:97:bf:fe:aa:c4:0f:6a:b2:47:da:bc:76: ab:8b:24:9d:12:1d:a6:99:44:08:6c:da:50:85:11: 41:59:16:e4:0a:40:5e:b7:91:3c:60:f2:8f:a0:f9: 84:b4:36:58:c5:12:00:8e:65:fc:39:08:bc:81:42: 8c:f1:1a:86:8b:e1:a3:1e:fb:73:e1:1a:ee:28:c6: b1:3f:41:0d:63:cc:da:40:ec:32:3c:6c:4e:a7:66: b9:95:48:f9:3e:22:88:28:ca:92:97:36:77:00:6a: 62:dc:b6:f7:53:de:63:fe:c6:90:f1:01:b2:12:44: 21:93:57:01:e6:61:92:d4:c2:26:5a:06:73:91:aa: 9d:f5:5b:d8:82:36:39:86:95:1c:09:e1:e9:69:75: 71:29:fc:e6:21:8f:6d:48:ac:30:ef:aa:6f:5d:3e: 1a:c4:8b:06:1e:fa:55:ba:f3:47:39:9b:4b:39:7f: b1:da:5a:c1:36:3d:1c:8c:d2:81:4a:38:6d:90:3e: a7:7f:df:3e:d9:ee:8d:0f:44:b2:1b:ac:7b:96:85: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:19:69:B9:44:00:13:A9:D1:3D:2C:B1:52:EE:F3:48:38:2A:61 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6a:d5:ff:46:70:a1:93:f3:ad:45:0b:91:51:2a:8e:49:5c: 07:c9:ba:4f:88:09:e3:04:33:aa:96:33:6d:e9:8d:50:5a:6d: 02:79:2a:c2:b8:1b:d6:ea:d3:63:a7:18:c7:b8:9a:48:b5:b4: ce:e4:92:3d:e6:b6:52:97:56:8f:84:f8:37:43:d6:d3:51:20: 56:73:a1:40:1a:7f:4c:b7:3a:bd:07:91:79:fd:77:bd:f3:13: 09:66:c0:12:70:bd:d4:95:cc:05:44:de:13:ef:08:41:eb:1b: e7:3a:80:00:2d:5e:25:61:7a:ad:2d:35:55:97:c5:25:03:b1: 8f:86:5e:88:76:80:73:32:47:29:a7:02:a3:50:15:af:7f:74: e5:65:71:ac:4d:ec:fb:88:81:27:f0:68:45:70:7b:b0:74:48: d7:13:d2:08:24:14:3c:d2:27:2d:8e:6d:ee:7d:ea:2b:b0:8b: c6:2f:11:46:55:da:10:26:81:c5:1c:66:fd:b7:ef:61:86:55: 9a:fc:19:2e:c7:4c:80:cc:8c:35:b6:73:22:3f:1d:d9:1c:68: f6:6f:1f:93:1f:ba:65:88:e7:1f:11:03:15:5c:9c:ec:1d:2b: 11:9e:b0:ea:38:de:c7:76:d2:11:ef:b8:cd:bf:8b:85:10:3f: e3:86:68:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjUwNjA3MDI1MzI5WhcNMjUwNjE0MDI1MzI5WjAYMRYwFAYD VQQDEw02ODQzYTlhOS01NGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi+3g9f4AUCWcTRfmG5RImFOks2VYYSuVREMn8B9mYf+NwTP/rp9CPatrrZn UIqXv/6qxA9qskfavHariySdEh2mmUQIbNpQhRFBWRbkCkBet5E8YPKPoPmEtDZY xRIAjmX8OQi8gUKM8RqGi+GjHvtz4RruKMaxP0ENY8zaQOwyPGxOp2a5lUj5PiKI KMqSlzZ3AGpi3Lb3U95j/saQ8QGyEkQhk1cB5mGS1MImWgZzkaqd9VvYgjY5hpUc CeHpaXVxKfzmIY9tSKww76pvXT4axIsGHvpVuvNHOZtLOX+x2lrBNj0cjNKBSjht kD6nf98+2e6ND0SyG6x7loWP7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN72GWm5 RAATqdE9LLFS7vNIOCphMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkatX/RnChk/OtRQuRUSqOSVwHybpPiAnjBDOqljNt6Y1QWm0CeSrC uBvW6tNjpxjHuJpItbTO5JI95rZSl1aPhPg3Q9bTUSBWc6FAGn9Mtzq9B5F5/Xe9 8xMJZsAScL3UlcwFRN4T7whB6xvnOoAALV4lYXqtLTVVl8UlA7GPhl6IdoBzMkcp pwKjUBWvf3TlZXGsTez7iIEn8GhFcHuwdEjXE9IIJBQ80ictjm3ufeorsIvGLxFG VdoQJoHFHGb9t+9hhlWa/Bkux0yAzIw1tnMiPx3ZHGj2bx+TH7pliOcfEQMVXJzs HSsRnrDqON7HdtIR77jNv4uFED/jhmhW -----END CERTIFICATE-----Generated at Sat Jun 7 12:27:36 2025 by rpki-client