$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: p+IaWKbwX4zQm83cftT44ByWde4c7L8KWsnrd1lkfOs= Subject key identifier: 93:46:DA:34:91:6E:C4:63:A8:67:03:16:E0:5F:0C:1E:73:C4:E9:DF Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0462 Signing time: Mon 16 Jun 2025 23:46:26 +0000 Manifest this update: Mon 16 Jun 2025 23:46:25 +0000 Manifest next update: Mon 23 Jun 2025 23:46:25 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: e5Cbvll/pM5qKdjb01rovk092C/275Ye1mGyMYNcDY0=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Jun 16 23:46:25 2025 GMT Not After : Jun 23 23:46:25 2025 GMT Subject: CN=6850acd2-6a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:ce:3a:7c:d9:59:9b:8e:84:3b:14:38:4b: 57:10:11:de:26:da:fb:2a:85:f3:12:dc:d0:22:6f: f9:24:bb:9b:95:27:3a:e3:b6:d7:8a:a8:97:1a:2f: e6:1f:1b:a8:69:da:2b:1a:ae:40:a7:8c:0c:40:57: 24:c7:ce:d9:6d:44:d6:2a:27:e2:10:05:28:e3:c3: fc:95:ea:cf:36:fe:36:1f:56:08:4d:89:c0:a5:79: 15:8c:94:c6:ea:45:de:3b:b1:d4:1c:5e:69:7b:af: b6:c7:d2:37:f2:48:e7:4d:ad:41:e1:a5:de:b2:9e: d8:0a:8c:9c:ba:a3:37:a7:e2:97:b9:da:4a:e3:89: 86:62:cf:78:48:d7:56:9e:9d:67:92:56:d7:82:d3: 92:55:d1:91:41:cf:99:9a:cb:a8:aa:d3:3d:95:76: 58:4d:30:31:14:e8:9e:9c:a3:0d:ff:c3:7d:76:7f: c2:de:9c:ac:d0:ae:9f:79:2e:0b:34:b4:d7:8a:8b: 33:5b:46:a4:2f:00:9b:ce:86:e7:f0:dd:f3:46:86: f5:89:78:2a:63:d9:0c:c5:45:88:3f:f0:25:c3:b8: 96:a6:bb:dc:a3:98:54:ac:21:f2:8b:d2:d6:1e:66: b0:84:f5:04:75:9f:8f:92:29:db:b5:fb:53:62:8e: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:DA:34:91:6E:C4:63:A8:67:03:16:E0:5F:0C:1E:73:C4:E9:DF X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e4:54:3a:40:c2:35:fa:58:9e:2d:1d:4a:bb:13:e4:bf:ca: b0:c0:be:9f:3e:70:5d:a5:97:76:f9:b3:cf:63:39:84:b7:b7: 65:ee:44:c2:29:56:67:af:83:35:1d:ed:0c:7a:fa:dd:bf:67: 30:45:f9:18:e5:c7:44:45:15:b6:23:c8:cd:16:54:89:77:65: ae:a8:e0:e0:bb:bc:6c:7c:26:3f:18:86:77:02:10:66:2f:2c: 6f:9c:37:c8:72:65:ec:27:3b:ff:9f:b4:54:93:c2:ca:da:73: 6a:3d:73:ab:a2:c3:95:5e:3e:42:47:b1:e1:f8:1d:47:66:3d: 42:17:32:fc:34:a6:11:11:d0:b4:21:09:b8:b9:0d:c8:01:82: 9d:53:3d:26:ff:f3:b3:e9:58:9e:d4:c9:81:c1:be:38:f4:5a: 86:6b:99:31:27:73:4c:97:ab:a8:47:4a:90:db:2f:27:5e:75: 05:14:a0:bd:b1:38:bd:e1:fd:af:20:29:6f:85:98:dd:c0:65: a6:3e:e6:fb:fd:13:f8:d7:e0:48:0e:39:18:c9:d4:2b:8a:8d: 1a:dc:d9:83:04:c6:2c:c7:c6:23:be:ec:d7:07:d2:cd:8b:a7: 6f:09:76:a5:0f:a8:c7:d0:99:71:8e:27:96:ab:8b:6d:95:f0: 7a:db:ad:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUwNjE2MjM0NjI1WhcNMjUwNjIzMjM0NjI1WjAYMRYwFAYD VQQDEw02ODUwYWNkMi02YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+zOOnzZWZuOhDsUOEtXEBHeJtr7KoXzEtzQIm/5JLublSc647bXiqiXGi/m HxuoadorGq5Ap4wMQFckx87ZbUTWKifiEAUo48P8lerPNv42H1YITYnApXkVjJTG 6kXeO7HUHF5pe6+2x9I38kjnTa1B4aXesp7YCoycuqM3p+KXudpK44mGYs94SNdW np1nklbXgtOSVdGRQc+ZmsuoqtM9lXZYTTAxFOienKMN/8N9dn/C3pys0K6feS4L NLTXioszW0akLwCbzobn8N3zRob1iXgqY9kMxUWIP/Alw7iWprvco5hUrCHyi9LW HmawhPUEdZ+PkinbtftTYo6ruwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNG2jSR bsRjqGcDFuBfDB5zxOnfMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe5FQ6QMI1+lieLR1KuxPkv8qwwL6fPnBdpZd2+bPPYzmEt7dl7kTC KVZnr4M1He0Mevrdv2cwRfkY5cdERRW2I8jNFlSJd2WuqODgu7xsfCY/GIZ3AhBm LyxvnDfIcmXsJzv/n7RUk8LK2nNqPXOrosOVXj5CR7Hh+B1HZj1CFzL8NKYREdC0 IQm4uQ3IAYKdUz0m//Oz6Vie1MmBwb449FqGa5kxJ3NMl6uoR0qQ2y8nXnUFFKC9 sTi94f2vIClvhZjdwGWmPub7/RP41+BIDjkYydQrio0a3NmDBMYsx8YjvuzXB9LN i6dvCXalD6jH0JlxjieWq4ttlfB6260r -----END CERTIFICATE-----Generated at Wed Jun 18 06:38:45 2025 by rpki-client