$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: BJpCI4cZnnHA8CGyWO0EvJl5ppRvj9T4zPnPpHmzv04= Subject key identifier: 0B:BB:04:DB:64:23:79:26:71:40:61:4E:92:8E:F0:B6:19:77:E3:1D Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0B08 Signing time: Thu 12 Jun 2025 19:08:07 +0000 Manifest this update: Thu 12 Jun 2025 19:08:06 +0000 Manifest next update: Thu 19 Jun 2025 19:08:06 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: v69GSsQbPk5LvyXb9dZyxFTYytArYNj77xD86OjkJNQ=) 2: FE836A62B19D11EC86ADF246C4F9AE02.roa (hash: GwwP8IDRreAQ5Nv9uamFq9DGquD+BWtdJPdVB793Iq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Jun 12 19:08:06 2025 GMT Not After : Jun 19 19:08:06 2025 GMT Subject: CN=684b2597-5887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:a5:96:31:5d:ba:8b:df:db:03:4e:b3:2b: 53:2d:1f:02:3b:f9:cd:d9:24:c9:4a:e9:ff:25:72: 60:d4:e3:98:cf:a9:83:f4:85:a6:6e:db:1c:89:39: 0b:8b:f2:00:14:e0:3f:7d:f9:9e:88:69:c9:ca:16: fb:b7:d0:be:e1:77:df:1d:82:a4:90:8b:fd:73:4e: be:dd:9c:a4:a2:28:a2:8f:bf:a3:d7:0d:73:22:86: 4e:7f:23:36:12:36:38:cc:62:ab:89:47:3d:70:52: 3e:df:4c:72:56:60:f1:00:88:a8:3f:9c:c3:9a:f1: ab:80:b1:c3:ce:d7:db:d1:ba:49:b9:bf:af:2c:d2: c3:67:35:d4:41:df:a8:e3:8c:37:f6:66:64:9b:fb: 45:b0:6d:91:ef:7d:67:ec:ec:73:b4:d4:f2:32:b4: 28:2e:45:e7:e0:05:20:a3:2e:cc:5f:49:b3:f9:d3: e1:b9:c0:fd:fc:24:34:bd:54:e3:31:39:ce:41:1e: aa:82:0e:23:b3:44:c8:8d:2e:0a:eb:6c:33:c2:5f: 05:99:b1:a4:29:bd:51:15:a5:b4:7e:c0:49:b7:0a: 51:af:e0:d5:c0:fe:fd:95:37:2c:8f:a3:ee:9c:2f: ca:98:b9:86:d6:47:70:06:98:39:ec:09:81:1b:ae: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:04:DB:64:23:79:26:71:40:61:4E:92:8E:F0:B6:19:77:E3:1D X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:06:95:59:1d:3b:04:c7:09:ff:d7:7f:86:ff:5b:56:76: 36:00:09:6b:96:e9:b1:f2:59:bb:89:71:d2:f4:e3:3d:1c:9d: 2d:28:24:c2:67:8f:75:cc:b8:50:56:10:e4:a1:18:7d:47:49: a8:0a:f1:39:6c:66:f8:9a:0c:e1:30:7e:44:90:5f:13:68:58: d0:61:50:c1:5e:20:33:54:aa:ad:7e:a7:dd:d9:c2:14:f7:37: 41:56:fc:f4:f5:22:46:46:93:80:bf:55:0b:09:f7:7a:38:e8: 2e:b0:62:c4:66:c7:ea:1b:0a:43:85:ab:01:d7:cb:0b:9d:48: 9f:db:b3:a2:08:ce:0b:5c:4e:57:32:56:5c:c0:e9:7c:50:d5: 08:af:52:aa:79:ec:f0:df:f3:b5:53:a3:65:5b:d2:29:f4:68: c1:0f:2c:5f:dc:17:c1:b1:58:36:34:fb:28:f6:96:44:7a:16: dc:bd:f8:a7:48:18:3f:bc:33:44:03:25:25:2b:e2:48:83:fd: ef:9c:e6:dc:fa:99:0a:3b:16:1b:27:29:54:22:d3:0e:d5:cc: 45:4e:c9:dd:37:a9:82:f6:e1:c2:4b:11:b9:8d:9f:24:bd:56: 2d:1e:fc:12:66:82:a3:38:1b:3e:02:ff:f1:54:cc:c5:ec:0c: 88:2e:18:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUwNjEyMTkwODA2WhcNMjUwNjE5MTkwODA2WjAYMRYwFAYD VQQDEw02ODRiMjU5Ny01ODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxROlljFduovf2wNOsytTLR8CO/nN2STJSun/JXJg1OOYz6mD9IWmbtsciTkL i/IAFOA/ffmeiGnJyhb7t9C+4XffHYKkkIv9c06+3Zykoiiij7+j1w1zIoZOfyM2 EjY4zGKriUc9cFI+30xyVmDxAIioP5zDmvGrgLHDztfb0bpJub+vLNLDZzXUQd+o 44w39mZkm/tFsG2R731n7OxztNTyMrQoLkXn4AUgoy7MX0mz+dPhucD9/CQ0vVTj MTnOQR6qgg4js0TIjS4K62wzwl8FmbGkKb1RFaW0fsBJtwpRr+DVwP79lTcsj6Pu nC/KmLmG1kdwBpg57AmBG66gZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu7BNtk I3kmcUBhTpKO8LYZd+MdMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAcwaVWR07BMcJ/9d/hv9bVnY2AAlrlumx8lm7iXHS9OM9HJ0tKCTC Z491zLhQVhDkoRh9R0moCvE5bGb4mgzhMH5EkF8TaFjQYVDBXiAzVKqtfqfd2cIU 9zdBVvz09SJGRpOAv1ULCfd6OOgusGLEZsfqGwpDhasB18sLnUif27OiCM4LXE5X MlZcwOl8UNUIr1Kqeezw3/O1U6NlW9Ip9GjBDyxf3BfBsVg2NPso9pZEehbcvfin SBg/vDNEAyUlK+JIg/3vnObc+pkKOxYbJylUItMO1cxFTsndN6mC9uHCSxG5jZ8k vVYtHvwSZoKjOBs+Av/xVMzF7AyILhiN -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:25 2025 by rpki-client