$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: Vc2hmaGVIvzPZhD6Z+UjOePJJsxlzLKQbjqvhLdD3FI= Subject key identifier: 31:8C:CB:74:94:69:65:42:CF:3C:02:67:C6:63:B1:1D:12:A4:72:93 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 023C Signing time: Thu 19 Jun 2025 01:43:36 +0000 Manifest this update: Thu 19 Jun 2025 01:43:35 +0000 Manifest next update: Thu 26 Jun 2025 01:43:35 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: /2IZOK65pL4qOAbfKrgJotb5q5xTamXSVCP/bD2FxCQ=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Jun 19 01:43:35 2025 GMT Not After : Jun 26 01:43:35 2025 GMT Subject: CN=68536b47-19d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:1e:e1:3a:b0:a3:cd:95:15:38:b2:21:4f: 00:99:e3:a7:87:76:15:de:8c:53:f4:9d:d2:1e:55: 4d:62:9a:5e:df:40:8c:02:20:cd:6e:5d:5b:ac:52: 89:2c:d4:e1:39:d9:00:62:d3:ef:c2:b4:29:45:f3: 36:f2:eb:db:2f:c7:28:7c:a0:74:a7:5b:1f:26:e1: a6:c6:cc:2d:ff:d0:b3:fa:bd:ad:6e:42:0a:0b:79: 2e:90:00:0c:8f:41:03:f5:1d:e8:a7:55:9d:b3:30: e1:a9:2d:ea:6b:76:22:e7:1e:ec:81:95:3e:70:68: 44:db:ad:8a:e0:ce:16:f2:f4:38:a1:a5:71:3b:ec: 38:44:54:30:4c:3a:e8:1b:f2:e5:79:ba:43:04:cf: 7c:06:a5:c9:44:de:6d:81:0c:79:a2:89:44:19:ac: 04:13:b6:97:ed:a7:7b:fe:5c:2e:86:82:bb:22:1c: c2:27:80:a3:c9:0b:a0:6b:1b:dc:dc:f8:d5:a3:8b: a2:4a:17:e1:2c:3b:78:14:e5:06:cc:20:5e:e2:14: fa:38:15:b5:5b:0f:05:52:a1:a1:ac:f4:6b:33:5f: 9e:fd:3e:8a:88:44:af:c5:d6:3e:da:99:7f:80:4f: c6:2b:4a:90:91:91:76:ed:c8:1b:c2:ef:4e:41:79: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8C:CB:74:94:69:65:42:CF:3C:02:67:C6:63:B1:1D:12:A4:72:93 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cf:f5:0e:30:d8:bc:73:a0:1d:12:59:6e:5e:1c:54:ff:4a: 28:ca:12:d9:3b:22:6b:42:b4:c6:7f:5b:2c:69:b6:ae:a3:e4: 61:68:a8:eb:75:ce:91:91:e1:be:0f:6c:3e:83:56:34:75:ba: 22:95:2b:a7:8a:7a:6b:40:88:26:23:7a:6d:74:b4:0b:ed:bd: 8c:5e:f6:9d:ec:47:41:ec:b9:79:98:2e:ca:5a:e6:f1:53:13: 1d:82:32:7d:1f:61:0f:1c:3c:df:5c:e6:eb:28:d7:6e:f3:a3: 1c:ac:5a:f5:3e:02:ca:0f:05:3d:a9:07:b8:ac:fd:d7:1b:09: e9:c9:54:72:f6:97:90:44:91:e6:cb:4c:74:c5:68:b5:3d:f5: d3:ef:13:1f:e1:2b:04:d8:a7:70:47:b5:da:45:c8:39:28:34: 28:ef:56:d2:29:d0:f2:b8:a3:5a:0d:0a:b5:63:35:41:61:2e: d5:d5:a6:c6:e4:dc:3b:17:a9:40:09:36:5d:57:e2:77:e4:50: 1d:61:af:00:a2:10:28:2b:bf:15:9e:43:57:4a:93:83:45:49: 3d:79:a2:67:7f:5d:45:07:08:68:f5:63:54:d0:f7:b4:31:aa: 9c:d2:84:ff:6a:2a:0a:a0:96:80:35:e8:ea:2b:ad:cb:0e:23: b6:7f:65:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwNjE5MDE0MzM1WhcNMjUwNjI2MDE0MzM1WjAYMRYwFAYD VQQDEw02ODUzNmI0Ny0xOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2Ye4Tqwo82VFTiyIU8AmeOnh3YV3oxT9J3SHlVNYppe30CMAiDNbl1brFKJ LNThOdkAYtPvwrQpRfM28uvbL8cofKB0p1sfJuGmxswt/9Cz+r2tbkIKC3kukAAM j0ED9R3op1WdszDhqS3qa3Yi5x7sgZU+cGhE262K4M4W8vQ4oaVxO+w4RFQwTDro G/LlebpDBM98BqXJRN5tgQx5oolEGawEE7aX7ad7/lwuhoK7IhzCJ4CjyQugaxvc 3PjVo4uiShfhLDt4FOUGzCBe4hT6OBW1Ww8FUqGhrPRrM1+e/T6KiESvxdY+2pl/ gE/GK0qQkZF27cgbwu9OQXnzEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGMy3SU aWVCzzwCZ8ZjsR0SpHKTMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9z/UOMNi8c6AdElluXhxU/0ooyhLZOyJrQrTGf1ssabauo+RhaKjr dc6RkeG+D2w+g1Y0dboilSuninprQIgmI3ptdLQL7b2MXvad7EdB7Ll5mC7KWubx UxMdgjJ9H2EPHDzfXObrKNdu86McrFr1PgLKDwU9qQe4rP3XGwnpyVRy9peQRJHm y0x0xWi1PfXT7xMf4SsE2KdwR7XaRcg5KDQo71bSKdDyuKNaDQq1YzVBYS7V1abG 5Nw7F6lACTZdV+J35FAdYa8AohAoK78VnkNXSpODRUk9eaJnf11FBwho9WNU0Pe0 Maqc0oT/aioKoJaANejqK63LDiO2f2US -----END CERTIFICATE-----Generated at Thu Jun 19 07:34:33 2025 by rpki-client