$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: 5n3gCveWLTkCq8wzVu9eT58rLhg1T6rsCwdqHPxburE= Subject key identifier: C1:64:6E:D1:22:1E:83:56:89:C0:8A:B2:B3:8C:BE:AA:0A:C0:75:FD Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 01BD Signing time: Fri 13 Jun 2025 02:13:08 +0000 Manifest this update: Fri 13 Jun 2025 02:13:07 +0000 Manifest next update: Fri 20 Jun 2025 02:13:07 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: 9JcvL3HEj+3+t/wvYlQsoHHZvw1GjOpR+CCZZlHmbSw=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: Jun 13 02:13:07 2025 GMT Not After : Jun 20 02:13:07 2025 GMT Subject: CN=684b8933-c9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:85:6e:9c:bf:16:d5:d4:c2:80:ba:e0:0a: 57:d3:2a:3c:20:80:33:55:f2:51:b9:f6:9a:0f:3b: df:38:5a:5e:53:ae:9c:ec:33:3f:f7:3a:c8:a9:4c: 62:a1:aa:df:a5:3e:fc:8b:0d:82:d2:9b:1b:54:bd: 2d:bf:38:9c:4c:22:a7:f2:c4:49:fd:85:51:1b:58: f8:7e:ee:21:8c:40:1a:71:c6:39:bc:eb:fb:e2:1d: 8f:0d:11:c6:b1:f0:66:28:45:f0:9d:91:26:9e:71: 07:d5:f1:2c:f3:fd:c4:c5:74:6f:3d:63:2f:7b:99: 49:92:3c:05:fa:23:69:24:7f:14:95:5b:92:8d:8e: 0e:47:3f:2f:fc:d5:06:48:5e:66:7f:9d:24:3e:52: 5f:34:8b:b3:99:ee:f8:a8:99:45:5c:ed:5e:45:b7: 3d:39:31:e3:c5:3b:d5:7d:a3:e1:e3:2d:2f:1a:5f: 31:f5:5d:e0:59:a6:d5:4e:1a:06:14:80:85:23:8e: 45:4e:ad:db:72:17:5b:55:72:f8:68:e3:0c:cd:5c: 7f:a6:27:30:d5:a4:57:9c:d3:13:f8:49:41:2a:24: a5:b6:f1:3f:34:40:ad:ab:1d:68:95:a2:8f:ae:06: 9d:5c:ec:f4:75:03:f5:40:1b:66:a1:3c:ae:8e:8a: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:6E:D1:22:1E:83:56:89:C0:8A:B2:B3:8C:BE:AA:0A:C0:75:FD X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:15:ce:29:e3:72:9b:9c:10:4b:f9:31:d1:70:30:be:da:12: 5e:52:7c:9d:b8:aa:f7:73:00:db:45:cc:83:44:2c:05:d7:ed: b5:18:e6:f8:ce:2b:4e:24:7a:b9:5c:f3:27:2d:13:cd:2e:5f: ae:53:aa:c8:c8:ee:93:53:96:bb:5e:18:e4:be:26:4b:59:9b: 62:9e:13:4f:b4:25:91:98:aa:d6:b9:ee:c5:ba:14:e7:75:34: 1c:ed:5b:57:6a:1b:67:48:3b:02:09:59:a1:bc:84:14:f9:42: 8a:d7:b9:16:c7:e4:5a:99:bf:b6:44:b8:cd:b1:9b:b8:56:ef: 9a:d4:bd:90:3a:75:f6:ea:c3:33:48:d8:05:9b:5e:b2:74:58: 12:3f:82:1b:2e:32:38:27:3f:2a:53:81:ea:20:a9:ca:b7:1c: 9b:4d:8e:ed:a8:c5:e9:03:c9:e9:bd:ab:93:1b:8c:ed:83:8b: 53:7d:91:b2:32:12:ae:10:d9:8e:ca:33:9e:b1:79:0d:31:d0: 33:ce:c1:4e:1d:0b:02:a0:bc:e0:97:18:7f:a1:6a:d2:59:2a: c4:d7:02:e8:37:b2:cf:b9:bc:78:41:11:01:4c:56:5a:cc:46: 19:ab:58:50:2c:0a:52:c6:36:da:96:b6:ee:82:dc:43:cf:18: 77:70:57:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjUwNjEzMDIxMzA3WhcNMjUwNjIwMDIxMzA3WjAYMRYwFAYD VQQDEw02ODRiODkzMy1jOWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYGFbpy/FtXUwoC64ApX0yo8IIAzVfJRufaaDzvfOFpeU66c7DM/9zrIqUxi oarfpT78iw2C0psbVL0tvzicTCKn8sRJ/YVRG1j4fu4hjEAaccY5vOv74h2PDRHG sfBmKEXwnZEmnnEH1fEs8/3ExXRvPWMve5lJkjwF+iNpJH8UlVuSjY4ORz8v/NUG SF5mf50kPlJfNIuzme74qJlFXO1eRbc9OTHjxTvVfaPh4y0vGl8x9V3gWabVThoG FICFI45FTq3bchdbVXL4aOMMzVx/picw1aRXnNMT+ElBKiSltvE/NECtqx1olaKP rgadXOz0dQP1QBtmoTyujopqHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFkbtEi HoNWicCKsrOMvqoKwHX9MB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGFc4p43KbnBBL+THRcDC+2hJeUnyduKr3cwDbRcyDRCwF1+21GOb4 zitOJHq5XPMnLRPNLl+uU6rIyO6TU5a7XhjkviZLWZtinhNPtCWRmKrWue7FuhTn dTQc7VtXahtnSDsCCVmhvIQU+UKK17kWx+Ramb+2RLjNsZu4Vu+a1L2QOnX26sMz SNgFm16ydFgSP4IbLjI4Jz8qU4HqIKnKtxybTY7tqMXpA8npvauTG4ztg4tTfZGy MhKuENmOyjOesXkNMdAzzsFOHQsCoLzglxh/oWrSWSrE1wLoN7LPubx4QREBTFZa zEYZq1hQLApSxjbalrbugtxDzxh3cFfC -----END CERTIFICATE-----Generated at Sat Jun 14 17:23:24 2025 by rpki-client