$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: i7u1GfUztKjn68RMOKvfKdLqJneSfw/UEFN9nw5HkAw= Subject key identifier: B5:00:A1:00:FC:AE:0C:7D:B2:D7:22:2A:92:42:86:9A:0D:75:86:A5 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 0137 Signing time: Sun 15 Jun 2025 03:40:35 +0000 Manifest this update: Sun 15 Jun 2025 03:40:34 +0000 Manifest next update: Sun 22 Jun 2025 03:40:34 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: ero0Fs3IRFg46qIjYBPL4U7W8Nr+CEGUgoCuVS9mgmM=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: M/8UXHVwrUGREXAw7kPK2rXqXimmSlcdKlYZysm7Xmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Jun 15 03:40:34 2025 GMT Not After : Jun 22 03:40:34 2025 GMT Subject: CN=684e40b3-b6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:c9:02:ae:a6:8c:04:e6:64:eb:66:0e:04: 91:04:61:55:14:56:24:55:8b:20:28:f7:12:79:34: dd:a0:df:28:ef:7e:e5:07:cb:a8:ad:fc:62:b8:f3: 82:0a:9c:f6:a5:53:f1:94:44:e0:37:54:14:9b:9d: 2f:d3:0f:fb:2a:b8:22:e7:d0:34:c8:d9:89:38:18: 54:ee:c3:7c:59:e6:02:21:60:9c:76:e6:f9:1f:6b: ad:64:35:7b:05:73:d2:16:a5:95:e8:62:3b:29:03: d4:be:36:04:60:36:c3:67:77:71:69:79:81:d5:a2: 36:52:65:02:a3:42:09:48:70:cc:f3:c3:c6:34:22: af:8b:a2:d4:da:7a:5c:96:28:3c:76:0d:69:66:af: 78:4a:62:36:b3:89:f6:00:a1:ef:5b:57:f2:6c:80: 90:d3:d5:0d:fc:b5:7d:37:5c:08:b1:dc:49:94:94: 8f:ef:81:a8:ed:75:d7:f6:73:31:92:87:e4:12:cb: c8:25:ed:db:8c:db:f5:df:03:17:4b:e5:39:9e:ad: 55:8c:be:58:14:bb:bc:4e:89:4b:47:1c:dd:f2:9d: f1:be:1e:c1:d1:a2:2a:b5:af:4d:c0:2d:0f:6d:87: 56:c9:5c:07:1e:a5:04:2e:82:41:c5:d3:e7:3c:3c: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:00:A1:00:FC:AE:0C:7D:B2:D7:22:2A:92:42:86:9A:0D:75:86:A5 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:69:2a:ef:46:7d:11:5c:ac:1e:0c:21:9b:c5:a3:f3:9f:0f: d4:b2:e8:52:42:10:4f:da:d4:3f:d4:8d:41:a3:e1:ab:48:e2: 55:a0:01:a4:b8:08:ad:16:c7:01:fd:73:21:aa:b1:36:0e:45: 1b:24:0f:c0:0d:b9:7c:e9:2a:28:b0:5f:47:f2:e4:2a:f2:25: ba:5c:71:70:77:ad:80:36:34:e7:26:b9:b9:25:f1:c1:a1:02: 3e:3c:9d:52:41:46:f1:3a:9a:3a:85:06:80:41:d4:63:4d:62: 65:2e:df:44:8f:83:dd:83:71:ab:88:af:2d:15:27:ee:b6:62: 9c:4d:7e:b9:93:4e:40:23:38:5d:71:22:83:82:13:a7:1f:ba: 80:f7:90:db:8f:3a:7d:2c:f6:69:9a:9d:0d:b0:4f:74:cd:a8: c9:1a:02:c3:2e:2b:b7:26:59:0a:49:40:b0:c1:e6:97:59:b6: e9:4c:99:5b:76:74:64:7d:c0:6f:66:87:06:61:03:9d:b9:86: ca:a0:21:ed:21:61:a7:8a:cd:20:5e:cb:91:eb:53:b9:04:75: 2c:0e:da:27:25:8e:6b:d6:ee:3b:ff:1c:bb:e6:03:a8:64:d2: eb:65:27:7e:c8:44:21:69:c1:fd:bb:49:7d:dd:3a:0a:e8:bc: ea:11:cc:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNjE1MDM0MDM0WhcNMjUwNjIyMDM0MDM0WjAYMRYwFAYD VQQDEw02ODRlNDBiMy1iNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8rJAq6mjATmZOtmDgSRBGFVFFYkVYsgKPcSeTTdoN8o737lB8uorfxiuPOC Cpz2pVPxlETgN1QUm50v0w/7Krgi59A0yNmJOBhU7sN8WeYCIWCcdub5H2utZDV7 BXPSFqWV6GI7KQPUvjYEYDbDZ3dxaXmB1aI2UmUCo0IJSHDM88PGNCKvi6LU2npc lig8dg1pZq94SmI2s4n2AKHvW1fybICQ09UN/LV9N1wIsdxJlJSP74Go7XXX9nMx kofkEsvIJe3bjNv13wMXS+U5nq1VjL5YFLu8TolLRxzd8p3xvh7B0aIqta9NwC0P bYdWyVwHHqUELoJBxdPnPDw/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUAoQD8 rgx9stciKpJChpoNdYalMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkaSrvRn0RXKweDCGbxaPznw/UsuhSQhBP2tQ/1I1Bo+GrSOJVoAGk uAitFscB/XMhqrE2DkUbJA/ADbl86SoosF9H8uQq8iW6XHFwd62ANjTnJrm5JfHB oQI+PJ1SQUbxOpo6hQaAQdRjTWJlLt9Ej4Pdg3GriK8tFSfutmKcTX65k05AIzhd cSKDghOnH7qA95Dbjzp9LPZpmp0NsE90zajJGgLDLiu3JlkKSUCwweaXWbbpTJlb dnRkfcBvZocGYQOduYbKoCHtIWGnis0gXsuR61O5BHUsDtonJY5r1u47/xy75gOo ZNLrZSd+yEQhacH9u0l93ToK6LzqEcxn -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:17 2025 by rpki-client