$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: K7FwmlhW5gDwysfqDYBfXe5/d+mFTgCsPYQiXUYyQVQ= Subject key identifier: E5:64:86:8D:68:14:BB:3D:EE:F0:9F:91:6E:E5:4C:94:C1:B8:E5:95 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 01AA Signing time: Fri 13 Jun 2025 02:24:45 +0000 Manifest this update: Fri 13 Jun 2025 02:24:44 +0000 Manifest next update: Fri 20 Jun 2025 02:24:44 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: EjozZcX1Fh+Wqlm0ESH016kr4FTIjjUwPX6+XCjfdXM=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: BWLI/lFMOk0gs1uM9uMc8V3aTl6ezInYU2HutDGOR1Y=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: WszDeDtt2pA1qPuCttmdMd6CqUvx9wc+SucMvuhAFvE=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: KfEf5+IVw2cc5iVIvA+8UOcszxul9bOLbJUOX0WGbIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Jun 13 02:24:44 2025 GMT Not After : Jun 20 02:24:44 2025 GMT Subject: CN=684b8bec-af25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:96:5f:d2:55:35:0b:51:b0:1a:f7:02:4e: 99:82:37:59:15:66:f9:13:93:55:68:77:31:bb:80: 80:e3:ec:07:6c:25:a8:b7:20:c2:22:cc:32:24:fd: 8b:ab:f3:a3:e2:6d:cc:1b:89:f5:ee:7e:5c:83:49: d1:92:04:3c:3f:4e:c0:7e:d2:a0:20:b7:47:79:43: f2:43:88:0a:67:e4:63:87:fb:1e:42:9f:21:75:1b: 87:47:45:2a:5a:2c:22:46:9a:fe:e4:2c:12:e0:ae: a4:12:bc:94:f6:7a:95:b9:6a:8c:ed:ac:1a:49:b9: 41:0f:14:7b:d1:01:a0:89:b4:92:9b:07:d1:08:47: 39:51:7c:5b:8e:7c:52:b9:db:8a:7c:c9:92:d3:2b: 4c:4e:fe:c6:1c:79:04:18:4a:00:18:4e:df:37:4b: d1:4f:1e:89:45:fe:32:1c:3e:1b:cf:6e:99:90:82: eb:11:8e:78:a8:4f:24:c7:7e:a1:61:8b:bb:c0:65: 54:c3:15:23:dd:0a:97:8b:04:e5:4c:19:67:26:5c: 36:87:6a:5f:78:ae:7e:da:76:8a:4a:66:41:91:4e: 88:98:1c:a2:0c:ea:ef:6c:4f:27:74:34:25:a8:d7: 56:92:26:81:9c:3b:77:c6:e0:db:0a:ec:3b:38:ac: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:64:86:8D:68:14:BB:3D:EE:F0:9F:91:6E:E5:4C:94:C1:B8:E5:95 X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e6:3e:1b:90:bc:8b:ac:8e:b1:dc:6e:03:8a:7f:1a:4b:d7: a3:6e:32:01:a6:21:ef:20:4e:89:b3:9c:cc:65:65:40:57:ea: 8a:61:50:43:51:2d:21:3c:bd:ba:aa:8d:56:14:39:e9:1f:10: b4:e4:fa:79:01:ff:55:9b:fd:69:1e:9c:f6:36:23:a6:54:aa: ba:53:66:29:ae:0d:c2:bd:0b:48:eb:0d:1d:53:20:99:76:66: e9:61:1e:e1:5e:49:3a:28:ea:ef:18:4e:1c:de:95:54:e9:92: 21:a8:84:69:99:12:f1:3d:fd:3b:8c:d6:ff:cc:90:d9:67:c6: 40:3c:b4:19:f5:b2:cf:c0:55:fb:c1:ae:0a:33:1e:91:df:22: df:5a:41:23:58:38:2a:07:2f:f0:ab:df:7f:36:cc:42:02:6a: 4e:80:5f:df:70:fc:19:f1:10:07:59:2c:43:9a:d1:01:87:dc: c3:a5:ae:e6:b7:bb:be:98:93:60:e8:78:fc:89:be:fe:b2:03: de:ec:42:dd:29:bf:bd:45:d3:48:2e:8b:bb:55:97:a2:55:0f: 8c:d2:62:71:7d:14:58:da:74:2f:7e:d7:91:29:3f:b8:6d:2f: d0:7e:c5:b3:3c:91:ba:1c:5c:0e:91:10:23:78:49:aa:97:07: a0:dc:e6:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUwNjEzMDIyNDQ0WhcNMjUwNjIwMDIyNDQ0WjAYMRYwFAYD VQQDEw02ODRiOGJlYy1hZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5E6WX9JVNQtRsBr3Ak6ZgjdZFWb5E5NVaHcxu4CA4+wHbCWotyDCIswyJP2L q/Oj4m3MG4n17n5cg0nRkgQ8P07AftKgILdHeUPyQ4gKZ+Rjh/seQp8hdRuHR0Uq WiwiRpr+5CwS4K6kEryU9nqVuWqM7awaSblBDxR70QGgibSSmwfRCEc5UXxbjnxS uduKfMmS0ytMTv7GHHkEGEoAGE7fN0vRTx6JRf4yHD4bz26ZkILrEY54qE8kx36h YYu7wGVUwxUj3QqXiwTlTBlnJlw2h2pfeK5+2naKSmZBkU6ImByiDOrvbE8ndDQl qNdWkiaBnDt3xuDbCuw7OKy+5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVkho1o FLs97vCfkW7lTJTBuOWVMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc5j4bkLyLrI6x3G4Din8aS9ejbjIBpiHvIE6Js5zMZWVAV+qKYVBD US0hPL26qo1WFDnpHxC05Pp5Af9Vm/1pHpz2NiOmVKq6U2Yprg3CvQtI6w0dUyCZ dmbpYR7hXkk6KOrvGE4c3pVU6ZIhqIRpmRLxPf07jNb/zJDZZ8ZAPLQZ9bLPwFX7 wa4KMx6R3yLfWkEjWDgqBy/wq99/NsxCAmpOgF/fcPwZ8RAHWSxDmtEBh9zDpa7m t7u+mJNg6Hj8ib7+sgPe7ELdKb+9RdNILou7VZeiVQ+M0mJxfRRY2nQvfteRKT+4 bS/QfsWzPJG6HFwOkRAjeEmqlweg3OZ1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:57 2025 by rpki-client