$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft File: i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json) Hash identifier: Ft9Rg7M4fQGJ0f+UkqQxlAsRY8RRSPuk4cqwOh6P71Q= Subject key identifier: E6:CF:F6:50:AB:63:71:62:3D:BD:5A:AC:38:6B:2F:8B:69:49:BA:F4 Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft Manifest number: 87 Signing time: Sat 21 Jun 2025 05:36:21 +0000 Manifest this update: Sat 21 Jun 2025 05:36:20 +0000 Manifest next update: Sat 28 Jun 2025 05:36:20 +0000 Files and hashes: 1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: O4JjOMizkiH2W2jFNydp7ufJ3Iyz3iAOVNXy4vwB9sU=) 2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: DRt8K6jlAria6yTB9gWZIhOKN+7LEqAGx7rHUxgtPQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A Validity Not Before: Jun 21 05:36:20 2025 GMT Not After : Jun 28 05:36:20 2025 GMT Subject: CN=685644d5-ec91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:37:e8:06:ef:e1:1e:5d:4d:73:66:12:ec: 41:54:64:fc:b0:51:83:59:d4:18:e4:af:7d:54:e9: c2:58:94:cd:79:24:45:d2:07:21:66:4a:95:b0:f3: d6:b6:a7:bf:91:35:76:62:26:a1:c7:88:8e:8e:eb: dd:63:41:28:d1:ff:33:07:04:9c:56:13:2d:2d:47: 05:01:93:a4:b8:e9:b6:c0:a1:bb:04:55:4c:fa:76: ad:9b:b2:ae:82:8b:e2:f8:9c:ec:13:5a:eb:35:7d: 86:76:99:f1:10:0c:ab:a1:d5:1f:64:97:bc:f5:80: d6:96:e2:a7:9e:26:95:56:99:42:36:4a:02:3f:b5: c2:c5:b1:78:e9:29:da:44:26:9c:42:f1:44:3b:be: 8b:cd:86:44:47:e7:7f:ed:1e:2d:c7:e3:f5:46:15: 67:06:de:df:66:61:5e:58:c3:5d:d1:5d:92:1b:cd: 98:d9:44:47:07:df:7b:32:86:26:45:4f:82:95:b6: 77:fa:fb:de:01:60:7f:26:60:48:9e:50:67:70:a5: e5:c3:fe:f7:48:b3:68:28:f0:1e:73:03:e1:4f:ba: 89:50:88:62:f2:32:4c:a2:fe:05:2a:17:f4:09:89: 3e:0f:3e:80:fc:d4:e5:89:ad:f4:1c:45:4f:97:65: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:F6:50:AB:63:71:62:3D:BD:5A:AC:38:6B:2F:8B:69:49:BA:F4 X509v3 Authority Key Identifier: keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9b:06:96:3b:30:11:b8:e4:76:2b:37:0d:ec:e1:42:d5:ff: a4:a9:b4:e7:20:03:45:4f:a5:af:9d:6a:65:77:aa:07:35:9e: 9b:27:58:d1:dc:44:a1:81:25:5e:17:16:c7:b2:e9:43:76:62: 2b:a2:01:9b:98:50:dd:42:90:5d:ac:94:e9:da:50:c3:0b:56: 49:b5:31:88:93:06:51:ea:0b:d4:87:53:89:d5:44:e5:21:70: 3b:80:31:fd:4b:96:71:72:be:21:ef:68:99:58:34:c5:6d:c9: 52:30:f7:f3:ab:7c:55:24:05:4e:0b:98:09:4f:4b:5c:0e:f8: 75:a6:11:29:0f:9a:4d:4d:04:2b:e5:0e:0d:9d:26:f5:3a:0d: 16:45:71:e9:a4:fb:79:19:8c:f5:a0:38:b4:7e:f1:95:51:ca: 99:c2:45:85:3b:a8:c1:54:2f:b2:cf:4a:d8:0e:1c:66:7c:df: aa:96:68:b5:e5:24:6e:72:49:b7:bb:79:cf:4c:19:ba:f7:f4: 7d:c6:d8:2c:91:e1:b2:09:82:87:73:91:2c:0a:be:10:7c:a4: 2f:ea:53:3f:5c:7b:67:8c:ad:b3:bf:b5:50:1c:9b:a1:4f:bd: 06:dd:63:96:7d:28:cf:11:65:28:9b:69:6d:19:7b:0c:16:2d: a9:4e:71:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDhCNUU4RUJBQkUwOUExRjQ5M0QxMDI1M0MxQTNCOTM5 MzlCRkNBOEEwHhcNMjUwNjIxMDUzNjIwWhcNMjUwNjI4MDUzNjIwWjAYMRYwFAYD VQQDEw02ODU2NDRkNS1lYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFg36Abv4R5dTXNmEuxBVGT8sFGDWdQY5K99VOnCWJTNeSRF0gchZkqVsPPW tqe/kTV2Yiahx4iOjuvdY0Eo0f8zBwScVhMtLUcFAZOkuOm2wKG7BFVM+natm7Ku govi+JzsE1rrNX2GdpnxEAyrodUfZJe89YDWluKnniaVVplCNkoCP7XCxbF46Sna RCacQvFEO76LzYZER+d/7R4tx+P1RhVnBt7fZmFeWMNd0V2SG82Y2URHB997MoYm RU+ClbZ3+vveAWB/JmBInlBncKXlw/73SLNoKPAecwPhT7qJUIhi8jJMov4FKhf0 CYk+Dz6A/NTlia30HEVPl2VlZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObP9lCr Y3FiPb1arDhrL4tpSbr0MB8GA1UdIwQYMBaAFItejrq+CaH0k9ECU8GjuTk5v8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8xQTM2MkE1Njgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9pMTZPdXI0Sm9mU1QwUUpUd2FPNU9UbV95 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2kxNk91cjRKb2ZTVDBRSlR3YU81T1RtX3lvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8xQTM2MkE1NjgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9pMTZPdXI0Sm9m U1QwUUpUd2FPNU9UbV95b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9mwaWOzARuOR2KzcN7OFC1f+kqbTnIANFT6WvnWpld6oHNZ6bJ1jR 3EShgSVeFxbHsulDdmIrogGbmFDdQpBdrJTp2lDDC1ZJtTGIkwZR6gvUh1OJ1UTl IXA7gDH9S5Zxcr4h72iZWDTFbclSMPfzq3xVJAVOC5gJT0tcDvh1phEpD5pNTQQr 5Q4NnSb1Og0WRXHppPt5GYz1oDi0fvGVUcqZwkWFO6jBVC+yz0rYDhxmfN+qlmi1 5SRuckm3u3nPTBm69/R9xtgskeGyCYKHc5EsCr4QfKQv6lM/XHtnjK2zv7VQHJuh T70G3WOWfSjPEWUom2ltGXsMFi2pTnHW -----END CERTIFICATE-----Generated at Sat Jun 21 19:13:14 2025 by rpki-client