$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: 8SSAB2GMTH1/XeQK2TzjkdTF3uJWisBHOrCfDlKM1so= Subject key identifier: FD:3F:4E:05:27:2B:55:A6:C6:F8:FA:EF:08:5C:39:CD:31:24:57:55 Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: 0111 Signing time: Tue 17 Jun 2025 03:58:24 +0000 Manifest this update: Tue 17 Jun 2025 03:58:24 +0000 Manifest next update: Tue 24 Jun 2025 03:58:24 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: mnqfA+NtRawHwy/fZgnXFtJsSDJ5TKTUAm4fFXnKZ1g=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Jun 17 03:58:24 2025 GMT Not After : Jun 24 03:58:24 2025 GMT Subject: CN=6850e7e0-1024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:fd:1a:ac:e9:8a:69:72:2d:ae:d8:84:62: 01:7e:30:e6:12:1e:80:00:9c:5d:e6:2e:38:73:31: cd:e3:f0:41:c9:4c:c4:59:93:68:c2:92:1b:8c:2b: bd:13:a2:3d:8d:2e:ef:92:e5:d5:ab:fe:a8:b3:73: 44:fd:22:7c:ba:26:9b:f9:cb:ab:3d:2a:23:41:3d: a1:79:64:9f:ea:2e:61:7a:0e:e1:3f:6c:11:e8:fa: ff:e1:8f:a2:51:fc:ca:95:28:a9:9d:ef:bd:e6:14: eb:95:9f:9b:ea:7f:47:3e:51:36:d7:0f:cf:31:af: 95:08:86:82:c0:e2:af:45:fd:0c:12:be:03:63:af: 02:25:8a:c9:aa:d5:3c:0f:9d:36:e7:ef:2d:54:75: ba:41:0b:3b:6a:73:eb:14:a1:d8:51:67:16:79:97: 72:05:2f:be:fb:3c:af:15:aa:c5:2e:f7:63:2d:50: fe:4f:45:ba:66:6e:9d:59:8b:7a:9f:b4:33:b9:fe: 6d:32:d2:b4:58:f5:70:ca:d4:b3:79:77:12:04:f7: d1:07:bb:7a:d2:49:63:63:32:46:40:0b:dc:34:0e: 4b:c7:82:69:89:75:13:18:bc:ff:36:89:d0:f2:90: 79:01:26:83:e9:a9:eb:26:26:c1:62:fb:5f:9f:3e: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3F:4E:05:27:2B:55:A6:C6:F8:FA:EF:08:5C:39:CD:31:24:57:55 X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:15:d9:c0:ce:f7:d3:14:1e:b6:25:1e:97:65:6f:22:5b:37: 94:5e:d2:28:be:f1:0d:6e:1a:a1:e0:59:a1:f5:1f:6a:aa:29: 72:2e:f5:0a:0e:40:c8:09:1b:17:db:d7:b9:5f:96:5c:fd:bf: de:24:c9:7e:a4:22:05:aa:78:f7:9e:3e:e7:da:1d:94:7f:1a: f5:cd:d8:bf:bd:43:17:ec:fd:95:56:8b:31:3b:2a:0f:98:c5: 6c:d1:bc:9f:eb:d1:ac:f3:51:fa:3a:61:2a:b1:4b:06:ea:a4: 18:9b:7c:a3:8a:c1:0a:d1:b7:42:e4:1d:af:6a:49:05:89:b7: f1:26:81:cc:10:df:96:51:5d:2d:fe:7f:5c:87:a1:66:fc:ba: 71:76:cd:42:f0:d1:5d:bd:ea:95:7a:5d:18:2e:6b:db:20:89: 4d:a1:a3:40:24:91:cb:fe:10:39:8a:f8:7f:d7:cf:c0:91:14: a1:11:c1:e4:df:c2:ce:c1:33:d3:d8:fe:46:cf:8b:1f:57:77: 03:6e:c5:01:6b:e9:12:67:6c:0f:21:9a:83:8a:4c:97:9c:e5: 65:f3:ce:1a:0e:44:fb:5a:72:d4:ca:89:27:27:19:ad:81:d6: e7:6a:11:bf:19:5a:81:92:77:1b:82:25:61:45:e7:23:6d:ec: ac:56:3e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjUwNjE3MDM1ODI0WhcNMjUwNjI0MDM1ODI0WjAYMRYwFAYD VQQDEw02ODUwZTdlMC0xMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjr9GqzpimlyLa7YhGIBfjDmEh6AAJxd5i44czHN4/BByUzEWZNowpIbjCu9 E6I9jS7vkuXVq/6os3NE/SJ8uiab+curPSojQT2heWSf6i5heg7hP2wR6Pr/4Y+i UfzKlSipne+95hTrlZ+b6n9HPlE21w/PMa+VCIaCwOKvRf0MEr4DY68CJYrJqtU8 D5025+8tVHW6QQs7anPrFKHYUWcWeZdyBS+++zyvFarFLvdjLVD+T0W6Zm6dWYt6 n7Qzuf5tMtK0WPVwytSzeXcSBPfRB7t60kljYzJGQAvcNA5Lx4JpiXUTGLz/NonQ 8pB5ASaD6anrJibBYvtfnz7mnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0/TgUn K1Wmxvj67whcOc0xJFdVMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkFdnAzvfTFB62JR6XZW8iWzeUXtIovvENbhqh4Fmh9R9qqilyLvUK DkDICRsX29e5X5Zc/b/eJMl+pCIFqnj3nj7n2h2Ufxr1zdi/vUMX7P2VVosxOyoP mMVs0byf69Gs81H6OmEqsUsG6qQYm3yjisEK0bdC5B2vakkFibfxJoHMEN+WUV0t /n9ch6Fm/Lpxds1C8NFdveqVel0YLmvbIIlNoaNAJJHL/hA5ivh/18/AkRShEcHk 38LOwTPT2P5Gz4sfV3cDbsUBa+kSZ2wPIZqDikyXnOVl884aDkT7WnLUyoknJxmt gdbnahG/GVqBkncbgiVhRecjbeysVj6g -----END CERTIFICATE-----Generated at Wed Jun 18 06:09:08 2025 by rpki-client