$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: YC8+UgzdPjQxYlRHcv+auEH4Hgu9HD1eGJd8I106S9Q= Subject key identifier: 0F:6B:DB:F3:30:30:F8:21:CD:7A:A5:99:6F:9E:10:86:AF:36:93:BF Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 15 Signing time: Thu 19 Jun 2025 07:23:50 +0000 Manifest this update: Thu 19 Jun 2025 07:23:49 +0000 Manifest next update: Thu 26 Jun 2025 07:23:49 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: q+bf3f7lOP6/4XJA7dL2fNSL50NoL/q8taq7O3pE4nE=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Jun 19 07:23:49 2025 GMT Not After : Jun 26 07:23:49 2025 GMT Subject: CN=6853bb05-0699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:71:d9:3f:c7:11:97:0a:4c:49:10:68:19: 54:9e:33:8d:a6:f1:7b:ad:60:85:09:21:ba:a5:df: 0b:f8:d8:f5:64:d1:56:72:15:7f:d5:13:be:01:4e: cc:71:f2:a9:82:57:bb:4e:4a:f2:4b:67:5a:88:91: 1c:fa:e9:d1:e8:ad:ae:56:05:ec:86:bd:8f:97:19: a6:ea:f3:f0:33:f1:30:d8:a7:c4:32:a1:0d:18:ec: 9d:81:cc:d7:34:d8:2e:a6:11:07:18:a3:01:b1:93: dc:7a:a1:78:30:c3:91:79:e1:93:af:38:5e:b2:6e: 59:d1:b2:09:b1:75:c6:9a:9f:2f:db:a2:e5:f5:08: ea:7f:b3:b5:84:36:c5:32:30:eb:ad:e2:e8:5d:68: 9e:90:67:ce:99:63:43:20:89:7b:98:fd:de:0a:61: 65:92:53:4f:48:df:57:5b:da:3b:cf:5d:ae:ca:f1: 16:44:72:fb:54:7f:38:97:85:71:1b:1b:37:ce:db: 74:30:7d:5d:2e:9e:56:af:71:00:d5:e1:5f:a6:97: c1:c5:be:47:54:5e:78:f3:96:40:eb:02:15:a6:21: 62:36:da:88:4c:e4:91:9a:0d:cf:3d:68:12:19:c5: 75:ae:32:73:67:7d:db:27:cd:84:bf:c6:97:5e:7d: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:DB:F3:30:30:F8:21:CD:7A:A5:99:6F:9E:10:86:AF:36:93:BF X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b4:c6:2c:0c:25:b8:30:d3:57:81:c3:ef:f7:09:ad:5b:4d: 6c:e9:24:f4:99:39:b3:c4:37:bd:07:0c:49:45:90:ad:df:bf: b2:3c:92:66:9f:8c:33:e6:8b:e4:8f:6b:30:c3:cc:7e:38:99: 2c:05:28:fe:f4:ce:87:af:58:d1:23:c4:ea:8c:00:7f:44:53: f4:6d:a1:76:dc:27:44:79:e8:df:34:c0:08:84:7b:f2:3d:96: 72:fe:51:13:4a:ef:53:f2:7e:fd:4f:7a:a9:d9:88:d0:6f:d6: a7:4d:a5:47:2e:1f:77:ec:6f:a0:b2:35:75:01:4d:7a:21:5f: 9e:8c:2d:48:0a:dd:b0:71:7d:d3:48:1d:b7:9e:c3:a9:a5:2b: 7d:96:63:ee:f6:e1:a6:27:a8:1c:b6:04:8b:49:fc:6d:62:75: f9:5f:24:04:c8:94:49:83:2b:53:0f:1e:31:7f:a0:14:2e:29: 94:7e:c5:d4:d2:b6:c2:79:31:b2:93:1e:9d:99:b2:2c:70:b1: f1:1f:c9:6d:46:81:44:f7:ec:af:42:06:9b:df:81:c6:79:b2: c5:6e:8a:79:86:52:c4:44:c2:d9:bb:3d:6c:8a:8b:35:67:27: f8:83:f1:a1:70:ed:91:5f:9d:4d:5e:71:cb:28:90:90:c6:02: 50:2f:b2:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTA2MTkwNzIzNDlaFw0yNTA2MjYwNzIzNDlaMBgxFjAUBgNV BAMTDTY4NTNiYjA1LTA2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe8XHZP8cRlwpMSRBoGVSeM42m8XutYIUJIbql3wv42PVk0VZyFX/VE74BTsxx 8qmCV7tOSvJLZ1qIkRz66dHora5WBeyGvY+XGabq8/Az8TDYp8QyoQ0Y7J2BzNc0 2C6mEQcYowGxk9x6oXgww5F54ZOvOF6yblnRsgmxdcaany/bouX1COp/s7WENsUy MOut4uhdaJ6QZ86ZY0MgiXuY/d4KYWWSU09I31db2jvPXa7K8RZEcvtUfziXhXEb GzfO23QwfV0unlavcQDV4V+ml8HFvkdUXnjzlkDrAhWmIWI22ohM5JGaDc89aBIZ xXWuMnNnfdsnzYS/xpdefVCTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD2vb8zAw +CHNeqWZb54Qhq82k78wHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGO0xiwMJbgw01eBw+/3Ca1bTWzpJPSZObPEN70HDElFkK3fv7I8kmaf jDPmi+SPazDDzH44mSwFKP70zoevWNEjxOqMAH9EU/RtoXbcJ0R56N80wAiEe/I9 lnL+URNK71Pyfv1PeqnZiNBv1qdNpUcuH3fsb6CyNXUBTXohX56MLUgK3bBxfdNI Hbeew6mlK32WY+724aYnqBy2BItJ/G1idflfJATIlEmDK1MPHjF/oBQuKZR+xdTS tsJ5MbKTHp2ZsixwsfEfyW1GgUT37K9CBpvfgcZ5ssVuinmGUsREwtm7PWyKizVn J/iD8aFw7ZFfnU1eccsokJDGAlAvsrA= -----END CERTIFICATE-----Generated at Fri Jun 20 03:30:04 2025 by rpki-client