$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: PMhtNNE1yajbH2rUS52dZMUfgFQ+yQ4z5fNBp7uhXVY= Subject key identifier: 6D:98:00:85:27:D5:64:5F:1F:B3:41:DA:0F:8C:23:8D:40:F0:6F:85 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 0135 Signing time: Sun 15 Jun 2025 03:44:43 +0000 Manifest this update: Sun 15 Jun 2025 03:44:42 +0000 Manifest next update: Sun 22 Jun 2025 03:44:42 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: vc2f6n3fbpd6ozGVvkvamJ2O3EOx9uCrmMWmo7eGKmI=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Jun 15 03:44:42 2025 GMT Not After : Jun 22 03:44:42 2025 GMT Subject: CN=684e41aa-6b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2a:6b:95:3a:d2:29:5a:79:b8:3c:c3:ff:7a: ec:bc:3e:a1:94:c1:25:10:2e:81:e7:4b:e1:4f:7e: 2e:6c:89:91:d4:ed:51:73:61:37:5c:97:f2:f4:25: 40:95:4f:c9:ce:84:53:fe:ea:e1:14:54:51:6b:fa: a2:13:9a:52:f5:cc:a6:4f:f4:4c:0f:57:c6:dd:63: 68:ed:ac:12:bd:05:7d:23:db:a0:a5:6e:76:6d:24: c7:79:8d:d9:0e:4d:f0:66:76:64:da:8a:da:ce:dd: 6d:62:03:33:fb:35:d9:b6:2f:1e:c7:d2:0f:37:41: 32:ab:a9:d2:8c:51:30:c3:1c:57:f6:98:9b:3e:a2: fb:2a:26:8a:ca:a9:c0:15:47:10:f1:70:56:f0:ad: 45:68:3d:1b:75:20:3e:b7:d2:db:b1:94:48:e9:37: 23:41:58:d9:55:3e:ab:51:dd:b7:58:ad:ab:12:a1: ff:e8:7b:88:f4:99:5e:3d:29:9a:45:ee:d1:97:d5: b8:49:70:43:db:b6:d1:34:ba:26:c4:79:0a:61:17: 02:9b:8f:3e:62:91:1b:7f:e4:e0:03:60:cd:7b:0a: 71:95:66:9d:94:15:7e:ec:37:38:f0:b9:21:3c:9e: ae:9c:15:8d:6f:a6:4d:70:ae:0d:b8:0c:c4:cf:a0: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:98:00:85:27:D5:64:5F:1F:B3:41:DA:0F:8C:23:8D:40:F0:6F:85 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f3:39:18:5a:eb:83:35:d6:14:1b:8d:f6:e0:27:80:f2:96: b1:70:ff:74:3e:ac:8e:b1:2d:2a:96:a0:8a:a6:21:56:29:24: 4a:3d:f6:a3:99:83:77:a8:5d:7f:8a:23:df:3f:1d:5f:70:0a: 51:ac:75:c2:d7:70:b8:13:15:6e:3e:fe:76:50:ef:74:ec:22: 81:af:7c:7d:99:82:b8:0c:b8:e2:0a:3e:1a:47:74:b0:21:89: 70:5e:25:c5:af:99:94:6c:69:da:83:16:27:99:1c:6e:22:db: 71:b0:0e:89:39:6b:e8:ee:27:54:ed:1b:62:f9:19:8c:35:27: 74:f8:3f:00:1f:88:41:3e:cb:a2:c8:28:14:0f:36:06:ce:49: 75:83:97:c4:15:5a:07:35:a9:4b:12:2f:35:15:0f:9e:d7:ed: 20:f1:2e:c0:7e:98:2f:41:73:7e:05:a3:32:a5:3e:51:af:bf: df:b9:b7:d1:58:d4:55:56:a4:fd:10:fa:b7:f5:4a:2d:e1:f7: 5d:ac:4c:e8:5f:ec:c2:2a:46:eb:7a:03:11:cc:2f:0e:05:75: 1d:65:43:a4:2d:38:af:94:56:a9:33:3a:60:3e:dc:2c:e8:40: 28:da:1d:70:32:f8:cf:c2:9e:c1:24:67:3a:2f:e6:cc:11:63: 12:2a:05:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwNjE1MDM0NDQyWhcNMjUwNjIyMDM0NDQyWjAYMRYwFAYD VQQDEw02ODRlNDFhYS02YjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yprlTrSKVp5uDzD/3rsvD6hlMElEC6B50vhT34ubImR1O1Rc2E3XJfy9CVA lU/JzoRT/urhFFRRa/qiE5pS9cymT/RMD1fG3WNo7awSvQV9I9ugpW52bSTHeY3Z Dk3wZnZk2orazt1tYgMz+zXZti8ex9IPN0Eyq6nSjFEwwxxX9pibPqL7KiaKyqnA FUcQ8XBW8K1FaD0bdSA+t9LbsZRI6TcjQVjZVT6rUd23WK2rEqH/6HuI9JlePSma Re7Rl9W4SXBD27bRNLomxHkKYRcCm48+YpEbf+TgA2DNewpxlWadlBV+7Dc48Lkh PJ6unBWNb6ZNcK4NuAzEz6CGaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2YAIUn 1WRfH7NB2g+MI41A8G+FMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM8zkYWuuDNdYUG4324CeA8paxcP90PqyOsS0qlqCKpiFWKSRKPfaj mYN3qF1/iiPfPx1fcApRrHXC13C4ExVuPv52UO907CKBr3x9mYK4DLjiCj4aR3Sw IYlwXiXFr5mUbGnagxYnmRxuIttxsA6JOWvo7idU7Rti+RmMNSd0+D8AH4hBPsui yCgUDzYGzkl1g5fEFVoHNalLEi81FQ+e1+0g8S7AfpgvQXN+BaMypT5Rr7/fubfR WNRVVqT9EPq39Uot4fddrEzoX+zCKkbregMRzC8OBXUdZUOkLTivlFapMzpgPtws 6EAo2h1wMvjPwp7BJGc6L+bMEWMSKgU+ -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:12 2025 by rpki-client