$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: fWI5ZP189EzwwyrJmeRbMKljmvSApG/ydM581Pcy5ro= Subject key identifier: 5E:C3:CD:1B:05:9E:FF:87:75:33:66:40:5B:01:66:03:1F:67:EC:02 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 0164 Signing time: Sun 15 Jun 2025 03:18:50 +0000 Manifest this update: Sun 15 Jun 2025 03:18:50 +0000 Manifest next update: Sun 22 Jun 2025 03:18:50 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: f7d4CmeDb0tMAkPkA7oJ67K+jBtvR6lF57UExV9vT7M=) 2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: RH2tA+pDkL65URt1jd9V89/t/7TTanl0u6hNZrCKG3I=) 3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g=) 4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: mR/q70Jk2CRrQySn0SCNQ9Ok1ptByPEBAf3/SOp/6zs=) 5: A16CA728B9EA11EFACF35552C4F9AE02.roa (hash: LIplw0gjYt5TLtVYJx2JRQCdxPLCfIKOl8NOlftLuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Jun 15 03:18:50 2025 GMT Not After : Jun 22 03:18:50 2025 GMT Subject: CN=684e3b9a-9312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:81:52:11:fe:89:4e:5d:76:25:2c:ab:2c: 6e:da:f3:81:6d:30:ae:09:ff:6e:b9:75:70:a9:9d: c5:36:10:70:3a:2c:ce:4e:13:b0:95:5a:40:8b:c6: 3c:07:84:05:a4:19:99:2a:1d:a8:68:31:87:36:f2: 4a:29:f0:ee:56:c3:f3:10:fd:d6:e9:12:d2:95:2b: 6c:6f:67:7d:57:5e:f2:a5:67:c2:4b:a9:3f:a4:5c: 24:e6:3a:d3:9b:31:6b:8c:a9:92:35:64:d0:fb:14: fd:f0:81:1b:ed:09:40:aa:5d:1b:87:a1:d7:2e:5e: 2f:1f:76:aa:c6:8b:f3:a6:e6:05:0d:33:e6:11:78: 36:5d:ec:95:89:27:07:dd:6c:d2:60:12:14:53:ab: 48:75:ef:c7:53:43:2d:f7:2a:4d:3d:d1:14:93:f5: ff:59:33:6b:5a:89:98:6d:44:15:c5:c8:72:64:1e: ba:a1:a1:5c:b4:b1:e6:17:61:0e:d4:27:7a:20:df: ed:52:12:e0:98:19:40:43:38:0e:55:66:47:a9:04: f1:e2:9f:6a:61:ca:e7:c6:ae:85:b1:bd:f1:26:9a: 05:45:be:70:8d:34:6f:e8:7a:8c:89:01:7e:86:84: 11:a0:52:3b:63:78:35:33:dc:3f:13:13:65:dc:c2: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C3:CD:1B:05:9E:FF:87:75:33:66:40:5B:01:66:03:1F:67:EC:02 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:42:6a:d9:07:cc:91:a1:de:b0:6c:cc:a5:6d:91:4c:c9:63: a4:fd:f5:4b:b6:30:f6:44:df:b8:c0:f8:6e:be:70:bf:e3:e8: b3:ae:6f:df:2a:c0:5c:9d:cc:e5:ad:03:45:f2:ea:77:b8:c4: 99:9b:98:c1:02:c6:54:04:90:e0:10:b0:35:ce:69:b4:29:b4: 6c:29:ba:cd:da:9a:21:b0:2c:ee:6f:17:18:5a:df:1c:09:b0: 56:fb:ac:9e:f1:83:96:ab:d2:4f:61:57:20:f3:2c:db:54:34: df:f7:b9:2d:48:31:53:df:8b:94:17:ac:8a:b6:f8:47:2c:33: 7f:5b:cd:4a:d2:22:43:a2:23:ae:39:70:d1:08:c3:8b:59:f1: 31:aa:98:ec:88:26:a3:57:07:ea:c9:e9:59:c1:7f:06:72:38: 87:11:7a:1f:2c:5a:4c:8d:f9:25:06:45:9a:8b:a4:06:a4:16: 67:a1:5d:47:2f:88:72:9b:14:53:cd:64:14:57:b2:30:ce:dd: 47:42:3f:53:8d:38:22:d9:cb:0d:aa:f1:e6:d8:e0:e4:5c:97: 58:7a:53:50:d3:4a:39:a8:d5:1e:98:e4:f0:4e:8e:b1:63:cc: 3e:d4:09:8c:29:2b:ca:e2:5e:02:ea:de:f6:5a:1d:c4:7a:44: da:73:5b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUwNjE1MDMxODUwWhcNMjUwNjIyMDMxODUwWjAYMRYwFAYD VQQDEw02ODRlM2I5YS05MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz++BUhH+iU5ddiUsqyxu2vOBbTCuCf9uuXVwqZ3FNhBwOizOThOwlVpAi8Y8 B4QFpBmZKh2oaDGHNvJKKfDuVsPzEP3W6RLSlStsb2d9V17ypWfCS6k/pFwk5jrT mzFrjKmSNWTQ+xT98IEb7QlAql0bh6HXLl4vH3aqxovzpuYFDTPmEXg2XeyViScH 3WzSYBIUU6tIde/HU0Mt9ypNPdEUk/X/WTNrWomYbUQVxchyZB66oaFctLHmF2EO 1Cd6IN/tUhLgmBlAQzgOVWZHqQTx4p9qYcrnxq6Fsb3xJpoFRb5wjTRv6HqMiQF+ hoQRoFI7Y3g1M9w/ExNl3MLKtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7DzRsF nv+HdTNmQFsBZgMfZ+wCMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQQmrZB8yRod6wbMylbZFMyWOk/fVLtjD2RN+4wPhuvnC/4+izrm/f KsBcnczlrQNF8up3uMSZm5jBAsZUBJDgELA1zmm0KbRsKbrN2pohsCzubxcYWt8c CbBW+6ye8YOWq9JPYVcg8yzbVDTf97ktSDFT34uUF6yKtvhHLDN/W81K0iJDoiOu OXDRCMOLWfExqpjsiCajVwfqyelZwX8GcjiHEXofLFpMjfklBkWai6QGpBZnoV1H L4hymxRTzWQUV7Iwzt1HQj9TjTgi2csNqvHm2ODkXJdYelNQ00o5qNUemOTwTo6x Y8w+1AmMKSvK4l4C6t72Wh3EekTac1sR -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:20 2025 by rpki-client