$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: ih2TxvOB4MY5JVB+vS0FpZp4JnLXCMZNF/Ll2fH7g7k= Subject key identifier: C6:3F:1E:F6:C4:F8:22:B8:C6:6F:ED:CE:13:9B:A0:4E:91:32:81:D4 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01A3 Signing time: Sun 15 Jun 2025 02:36:01 +0000 Manifest this update: Sun 15 Jun 2025 02:36:00 +0000 Manifest next update: Sun 22 Jun 2025 02:36:00 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: ClKXRzv8+ume5ZzwM+E5Zd3qVqbqztrwyMupio/NUJ0=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: oLct614lxULJnPg0Rxvnf0inRuQaFav2PCBlzJPAse0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Jun 15 02:36:00 2025 GMT Not After : Jun 22 02:36:00 2025 GMT Subject: CN=684e3191-a914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:03:64:4c:aa:1c:fa:ca:36:1e:22:8c:9c: 50:50:77:28:8e:67:0b:30:2a:50:23:ce:e9:f7:fa: db:73:8b:e8:3c:69:de:65:19:b6:f2:95:a1:73:98: 32:a9:07:d9:99:9e:10:bf:1f:40:1a:e2:fe:4c:22: 40:c3:ce:c5:3c:bc:2e:a5:4e:cd:30:a5:0a:18:54: db:8e:b6:71:d4:3c:6e:cb:70:d6:d7:ea:89:b9:d7: 2e:5a:a9:88:fa:85:8d:ae:aa:3d:e3:78:52:81:2a: c5:d5:cb:be:2b:87:5f:a7:4a:02:2b:b9:e3:89:34: bb:cd:8d:b4:1b:5e:ef:b4:b6:76:69:52:3f:30:69: 42:32:8a:cc:97:16:8a:c2:4e:8e:85:31:2b:c4:59: 46:6f:87:35:b7:67:ef:c9:bb:01:79:4a:8e:30:c9: ca:7f:8e:38:a4:6d:17:15:ce:c6:cc:59:00:04:8f: 84:39:ba:59:87:94:1f:7c:0f:4b:09:8b:49:90:9a: c1:9d:c6:04:0b:8e:1c:89:30:bd:ce:d3:d9:8b:bc: 6d:bc:8a:63:59:66:3b:3b:dc:e8:e3:cf:69:ef:81: c4:a5:7f:64:b8:fd:1c:0d:da:f8:0d:e5:a1:b2:bc: 87:45:02:8e:3e:cb:25:b1:95:5d:02:96:b5:5d:7d: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3F:1E:F6:C4:F8:22:B8:C6:6F:ED:CE:13:9B:A0:4E:91:32:81:D4 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c2:cc:27:8d:99:43:e2:70:4c:7f:05:c0:87:d8:d1:f7:73: 89:bd:c7:3b:ad:3f:25:0a:3c:fe:b8:8e:e0:47:c9:84:cd:8d: c9:38:7a:0f:31:ea:4f:27:cc:bb:a3:a6:9c:39:39:3e:46:65: d7:a8:96:95:b3:59:91:d9:f8:1b:05:dc:70:1b:e1:7d:41:87: c6:ba:20:b3:e3:da:b8:52:ef:61:ba:51:2f:1d:ac:d9:ca:39: 67:b7:4c:d0:07:21:c8:38:de:64:97:78:9d:45:32:7b:8f:d4: 64:1a:91:33:ba:5c:00:65:af:88:34:c7:bb:ae:e9:9e:2b:6b: a4:b0:bb:cf:45:5b:af:be:91:fc:10:f8:ee:d8:12:d0:10:e2: 2b:ad:3b:ce:09:88:29:0e:5a:36:de:e7:b4:03:35:f4:a4:64: 9f:b0:bc:b3:90:19:6a:8b:79:0b:34:e0:95:7b:95:7b:5c:f9: 2f:ad:ad:5e:7b:07:53:ec:4d:7b:e4:2f:69:b7:da:bc:40:ba: e4:a9:de:9f:21:5f:b7:fc:73:72:58:c4:69:a7:f4:f8:88:6c: 1c:93:17:13:ff:ad:04:9d:6c:7a:7a:c6:44:2b:10:08:49:2f: 18:58:3e:5a:a3:22:46:e2:83:25:4b:44:75:10:4c:93:ab:0e: bf:95:8e:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwNjE1MDIzNjAwWhcNMjUwNjIyMDIzNjAwWjAYMRYwFAYD VQQDEw02ODRlMzE5MS1hOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqb8DZEyqHPrKNh4ijJxQUHcojmcLMCpQI87p9/rbc4voPGneZRm28pWhc5gy qQfZmZ4Qvx9AGuL+TCJAw87FPLwupU7NMKUKGFTbjrZx1Dxuy3DW1+qJudcuWqmI +oWNrqo943hSgSrF1cu+K4dfp0oCK7njiTS7zY20G17vtLZ2aVI/MGlCMorMlxaK wk6OhTErxFlGb4c1t2fvybsBeUqOMMnKf444pG0XFc7GzFkABI+EObpZh5QffA9L CYtJkJrBncYEC44ciTC9ztPZi7xtvIpjWWY7O9zo489p74HEpX9kuP0cDdr4DeWh sryHRQKOPsslsZVdApa1XX2ybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY/HvbE +CK4xm/tzhOboE6RMoHUMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBswswnjZlD4nBMfwXAh9jR93OJvcc7rT8lCjz+uI7gR8mEzY3JOHoP MepPJ8y7o6acOTk+RmXXqJaVs1mR2fgbBdxwG+F9QYfGuiCz49q4Uu9hulEvHazZ yjlnt0zQByHION5kl3idRTJ7j9RkGpEzulwAZa+INMe7rumeK2uksLvPRVuvvpH8 EPju2BLQEOIrrTvOCYgpDlo23ue0AzX0pGSfsLyzkBlqi3kLNOCVe5V7XPkvra1e ewdT7E175C9pt9q8QLrkqd6fIV+3/HNyWMRpp/T4iGwckxcT/60EnWx6esZEKxAI SS8YWD5aoyJG4oMlS0R1EEyTqw6/lY6t -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:57 2025 by rpki-client