$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: U4B5otoxBbZoIJOUNXSmTLMbEs4dcSmPBUTCf44oYgE= Subject key identifier: A1:3B:73:BF:3D:FB:68:0A:17:F3:BD:E8:5D:EC:2C:7F:9D:0A:74:16 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: C9 Signing time: Sun 15 Jun 2025 04:56:20 +0000 Manifest this update: Sun 15 Jun 2025 04:56:19 +0000 Manifest next update: Sun 22 Jun 2025 04:56:19 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: hBwhePlVAgwor84EyXw889RuVebn5Tmebe2U0bTknDY=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Jun 15 04:56:19 2025 GMT Not After : Jun 22 04:56:19 2025 GMT Subject: CN=684e5273-9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:5a:0a:81:e6:8c:6c:7d:cc:1c:a6:2a:fd: 80:3d:7e:d7:59:ab:21:d8:2f:b2:bb:8d:d8:4f:a0: 71:1e:b4:e4:9e:08:cf:6d:dd:c4:11:a5:cc:36:38: 1f:05:f6:20:c9:0a:b8:e0:1e:f6:be:93:17:29:ba: 90:95:91:e5:dd:88:d7:ac:b5:73:14:1d:7a:1a:90: 6e:50:9d:98:46:d6:7b:32:6f:74:d1:a1:19:04:04: fd:62:d3:43:7d:bd:00:99:cd:8f:0a:18:bb:70:ed: fd:ba:13:3a:4d:84:1f:52:e5:56:94:ae:2c:2e:0a: e6:79:67:60:4d:31:96:02:91:c0:6b:ca:7d:a9:c8: 6f:93:c8:ca:01:73:a9:cd:c8:ba:0a:4b:64:bf:5f: ce:b5:e7:7b:6f:05:c7:15:0f:70:70:32:f2:f4:b1: 20:b2:60:b3:ca:63:ca:d3:fe:96:03:d6:5a:e7:2d: cd:18:47:2b:83:94:e8:8e:33:37:c4:38:f4:18:1d: 72:d4:2a:4f:d7:a3:3f:e7:84:2c:2e:51:6b:89:cf: 16:a9:8c:b5:79:e7:43:34:6f:ca:62:bb:73:a4:ff: 35:da:d8:c0:64:b7:2a:69:a1:18:04:5a:d7:8d:11: 6b:e8:ca:82:c9:80:25:40:85:33:c5:0f:59:cb:e1: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3B:73:BF:3D:FB:68:0A:17:F3:BD:E8:5D:EC:2C:7F:9D:0A:74:16 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d4:66:25:a9:be:53:0a:90:37:d0:85:09:a5:ef:d6:57:70: c3:e4:b9:d9:49:8c:a1:e9:d1:25:67:96:14:6c:80:27:b5:71: 27:a8:8e:f0:14:28:8b:bc:bd:1c:a9:5a:0a:73:f2:e8:a0:17: cd:ac:d0:1d:5e:c8:c4:07:ab:24:ef:7a:63:e4:9c:02:14:43: a4:43:f9:da:8c:fa:7b:e1:6c:db:03:5b:e8:5e:4a:5d:43:1d: d4:d5:ea:99:9d:4c:35:a9:9e:cf:29:ed:e7:e9:9a:71:f4:ee: b5:4e:bf:c3:78:9b:b9:16:47:cf:26:a6:dd:4b:f0:d4:10:d9: 82:cf:8d:e4:38:4e:05:b3:f2:c5:32:27:ef:e2:42:ef:9c:0b: 0a:27:1c:c2:43:80:1f:42:32:a6:39:9d:5b:58:b1:c0:54:0d: 61:f1:92:8c:c0:65:bb:fa:55:b5:d2:a4:be:f9:11:42:70:51: 39:74:ef:23:e4:e2:83:15:15:26:77:b0:0e:fa:0a:3b:14:aa: 04:26:9b:93:bd:1e:52:9d:c0:12:fa:92:ec:cb:6e:60:5a:bb: 16:38:30:fe:93:90:51:51:de:bf:8d:76:7e:ea:82:43:d8:b0: 8c:d5:87:f4:86:87:98:03:57:a6:38:76:7f:bc:aa:a5:e2:80: 02:6f:02:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwNjE1MDQ1NjE5WhcNMjUwNjIyMDQ1NjE5WjAYMRYwFAYD VQQDEw02ODRlNTI3My05MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5BaCoHmjGx9zBymKv2APX7XWash2C+yu43YT6BxHrTkngjPbd3EEaXMNjgf BfYgyQq44B72vpMXKbqQlZHl3YjXrLVzFB16GpBuUJ2YRtZ7Mm900aEZBAT9YtND fb0Amc2PChi7cO39uhM6TYQfUuVWlK4sLgrmeWdgTTGWApHAa8p9qchvk8jKAXOp zci6Cktkv1/Oted7bwXHFQ9wcDLy9LEgsmCzymPK0/6WA9Za5y3NGEcrg5TojjM3 xDj0GB1y1CpP16M/54QsLlFric8WqYy1eedDNG/KYrtzpP812tjAZLcqaaEYBFrX jRFr6MqCyYAlQIUzxQ9Zy+G9nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKE7c789 +2gKF/O96F3sLH+dCnQWMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl1GYlqb5TCpA30IUJpe/WV3DD5LnZSYyh6dElZ5YUbIAntXEnqI7w FCiLvL0cqVoKc/LooBfNrNAdXsjEB6sk73pj5JwCFEOkQ/najPp74WzbA1voXkpd Qx3U1eqZnUw1qZ7PKe3n6Zpx9O61Tr/DeJu5FkfPJqbdS/DUENmCz43kOE4Fs/LF Mifv4kLvnAsKJxzCQ4AfQjKmOZ1bWLHAVA1h8ZKMwGW7+lW10qS++RFCcFE5dO8j 5OKDFRUmd7AO+go7FKoEJpuTvR5SncAS+pLsy25gWrsWODD+k5BRUd6/jXZ+6oJD 2LCM1Yf0hoeYA1emOHZ/vKql4oACbwKi -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:25 2025 by rpki-client