$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json) Hash identifier: ynCpV+DTxAFbgNGRQ1O6iEbVZD/f5L39538L8XlXyak= Subject key identifier: BB:6A:04:34:40:1D:84:15:4C:68:8D:1C:FB:11:23:C0:76:6B:6F:5B Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft Manifest number: F0 Signing time: Sat 31 May 2025 04:57:31 +0000 Manifest this update: Sat 31 May 2025 04:57:30 +0000 Manifest next update: Sat 07 Jun 2025 04:57:30 +0000 Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: 7ifDKKLFhRTwpfJvyK/FmUO6T5s4ve3LGh4N3n2T3oI=) 2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Validity Not Before: May 31 04:57:30 2025 GMT Not After : Jun 7 04:57:30 2025 GMT Subject: CN=683a8c3a-a9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:1e:5e:f6:ca:34:fe:06:15:d6:ac:82:ea: 09:d0:57:6a:a5:c7:c5:dc:bf:60:5b:bc:5b:c8:c6: 2e:33:1a:f5:22:da:0b:33:f6:53:3b:60:2e:79:10: 27:90:fc:26:b9:ca:4c:38:90:93:9b:8e:b9:72:4f: 9b:b4:92:36:5d:5b:6a:15:22:74:6f:9c:5f:e9:02: 77:f8:ef:a4:70:f3:5d:1b:a8:92:f5:d9:2d:30:54: 04:87:73:7f:c8:39:ab:8b:fb:66:54:8d:7f:b8:f1: 13:bb:74:29:ad:0b:be:ca:ff:5f:7c:f5:9b:46:25: 49:ae:eb:e7:c1:90:99:0f:13:47:71:eb:39:fb:7c: f9:41:01:25:18:55:20:88:52:d6:2f:81:a7:0a:85: 27:d5:98:cc:0b:c6:56:25:39:e0:d5:9a:7d:49:02: 65:7d:10:02:25:32:ab:6b:66:ce:cf:15:99:e7:7b: 12:11:66:33:e1:59:e4:df:35:3d:18:04:85:10:c4: b9:f3:af:f8:ba:f3:41:60:c1:bb:ce:00:00:1a:48: 42:73:8c:42:e9:84:4c:e7:95:48:c8:94:30:57:9e: c2:f8:74:0a:1f:00:5c:c9:70:20:c2:70:09:0e:05: 17:ed:17:a3:c6:5e:97:70:37:0a:38:3e:9f:f8:54: 72:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:04:34:40:1D:84:15:4C:68:8D:1C:FB:11:23:C0:76:6B:6F:5B X509v3 Authority Key Identifier: keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0c:9d:4f:e7:9c:7b:4d:4f:f8:14:38:cc:13:fc:93:26:04: ab:38:5e:8a:b6:e8:8f:a4:62:ae:72:ed:be:4c:e5:c7:b9:de: 5c:a4:60:5e:e7:b3:ff:ef:46:05:a7:22:17:26:45:01:d8:27: 26:25:81:10:f9:d4:65:95:11:38:b1:8d:08:fe:cf:9d:c5:a8: 07:67:2d:c0:ad:ec:97:fc:2d:38:9b:53:60:f6:c1:3b:28:b1: 0d:2d:23:95:11:37:0e:22:74:a1:a4:a3:5b:b4:42:94:1d:8e: a7:6a:13:b8:51:78:41:40:c7:c8:cc:e6:bd:a2:12:f5:d3:e8: fa:fe:9e:4b:f2:5d:37:2b:f5:4e:cf:bb:16:67:e1:7b:80:14: 31:fc:25:42:63:f5:dc:39:68:57:4b:96:bc:f8:a2:70:b6:18: 22:fa:88:71:c1:7d:cc:8a:05:b1:20:82:b6:b5:15:3e:51:2b: 09:81:10:7a:65:c0:4e:3e:81:b9:fd:4c:e4:d5:02:0c:87:08: 6f:9e:8a:fb:76:e1:f5:51:b2:99:8b:c9:07:4c:b8:7e:fa:31: fe:bd:58:48:8b:c1:f8:93:0b:5d:ef:b6:a7:20:09:b4:6d:d5: 3e:b3:ce:bf:57:9e:75:15:20:0e:5d:bd:93:30:db:b9:66:ca: e2:c4:eb:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz NDYzQjgzQ0YwHhcNMjUwNTMxMDQ1NzMwWhcNMjUwNjA3MDQ1NzMwWjAYMRYwFAYD VQQDEw02ODNhOGMzYS1hOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PMeXvbKNP4GFdasguoJ0FdqpcfF3L9gW7xbyMYuMxr1ItoLM/ZTO2AueRAn kPwmucpMOJCTm465ck+btJI2XVtqFSJ0b5xf6QJ3+O+kcPNdG6iS9dktMFQEh3N/ yDmri/tmVI1/uPETu3QprQu+yv9ffPWbRiVJruvnwZCZDxNHces5+3z5QQElGFUg iFLWL4GnCoUn1ZjMC8ZWJTng1Zp9SQJlfRACJTKra2bOzxWZ53sSEWYz4Vnk3zU9 GASFEMS586/4uvNBYMG7zgAAGkhCc4xC6YRM55VIyJQwV57C+HQKHwBcyXAgwnAJ DgUX7Rejxl6XcDcKOD6f+FRy5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtqBDRA HYQVTGiNHPsRI8B2a29bMB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNX Tl9wdVRqSWQ0YlkwWTdnODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaDJ1P55x7TU/4FDjME/yTJgSrOF6KtuiPpGKucu2+TOXHud5cpGBe 57P/70YFpyIXJkUB2CcmJYEQ+dRllRE4sY0I/s+dxagHZy3AreyX/C04m1Ng9sE7 KLENLSOVETcOInShpKNbtEKUHY6nahO4UXhBQMfIzOa9ohL10+j6/p5L8l03K/VO z7sWZ+F7gBQx/CVCY/XcOWhXS5a8+KJwthgi+ohxwX3MigWxIIK2tRU+USsJgRB6 ZcBOPoG5/Uzk1QIMhwhvnor7duH1UbKZi8kHTLh++jH+vVhIi8H4kwtd77anIAm0 bdU+s86/V551FSAOXb2TMNu5ZsrixOsy -----END CERTIFICATE-----Generated at Sat May 31 17:23:34 2025 by rpki-client