$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft File: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json) Hash identifier: wJbaURmKpt7yqkDEkMBzR8lomk21KsO81sGPkHDz7Ss= Subject key identifier: 76:06:0B:E0:47:1F:8D:45:7C:40:8B:C6:31:34:0A:BA:39:00:96:81 Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E Certificate issuer: /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft Manifest number: 0B2A Signing time: Sat 14 Jun 2025 19:03:53 +0000 Manifest this update: Sat 14 Jun 2025 19:03:52 +0000 Manifest next update: Sat 21 Jun 2025 19:03:52 +0000 Files and hashes: 1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: 4lIpMNzieOEin+oN/Bh2M0oHPjTLAdPM7tqsks/onKE=) 2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E Validity Not Before: Jun 14 19:03:52 2025 GMT Not After : Jun 21 19:03:52 2025 GMT Subject: CN=684dc798-355d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:8d:1a:d3:1f:06:3a:d3:32:74:3c:0f:2a: f8:b2:a4:67:7c:37:01:3c:5f:23:58:9e:c5:8b:8e: 8c:15:e9:d0:19:f2:bd:38:ca:b0:36:e0:0b:ac:63: 65:31:7b:2f:cf:b7:44:b4:02:0c:2f:a3:21:e5:0c: e8:46:01:ef:11:7b:ab:52:df:b5:95:b4:e9:da:01: e1:89:25:0b:a6:9d:32:d1:7f:7c:34:60:c3:ea:c5: 13:7c:1a:5a:22:2e:26:5d:ea:f0:e3:e0:22:f1:5f: 84:d9:c3:e2:2f:c6:51:d6:e3:8d:d0:f4:4a:70:a9: 02:ca:ba:30:96:82:9e:cf:57:55:6f:a3:33:ec:83: f8:bb:cf:fa:35:90:b9:18:d3:73:7a:7b:be:b9:50: bb:e3:53:68:ce:c3:ae:23:ad:ff:80:4d:41:b3:f9: 2e:e2:53:56:94:f5:ee:a2:6b:0d:60:28:f6:c7:b9: 92:6c:8b:e5:b6:c5:21:7c:97:6d:97:35:b6:f1:45: 7e:34:c1:5c:45:4c:ad:53:68:8f:4a:fd:4d:8d:4e: 79:53:03:e4:ed:36:55:3e:1b:69:e8:fc:46:a7:ec: 6f:5e:e1:81:dd:45:94:25:ef:94:97:f7:26:78:cb: b2:65:0c:bd:2a:ce:d5:19:e5:06:1b:f8:88:07:d9: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:06:0B:E0:47:1F:8D:45:7C:40:8B:C6:31:34:0A:BA:39:00:96:81 X509v3 Authority Key Identifier: keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:67:5c:f3:79:41:4e:55:fd:48:10:ad:a9:37:cd:05:8d:87: b6:ce:ed:4a:35:38:d9:59:34:93:2e:bb:02:f1:90:bb:1d:d3: 05:e7:8a:68:6e:5f:2d:8b:90:7c:65:2c:9a:21:4c:1a:29:81: a5:d6:bd:3d:32:99:07:23:08:86:cb:64:0c:bf:a0:8b:b4:78: e8:c4:e3:e8:fa:de:fc:6c:cf:f9:de:8c:16:4b:7d:57:40:ca: 94:43:9c:71:a3:35:f7:63:87:80:c5:97:84:31:20:b2:40:96: 52:b7:58:5a:b6:95:28:c7:e0:e8:ff:f4:87:bc:2e:e9:91:dc: a4:2a:6a:fc:be:9e:83:b3:2d:ac:ed:a9:a3:22:eb:c1:17:d8: 08:b2:9d:e6:c3:fc:40:72:06:b2:ae:3f:a5:4e:7c:74:3c:4c: 44:ee:ff:0b:2c:50:af:82:31:d9:e5:dc:c2:00:13:c4:c5:f2: 9a:c4:91:04:ee:e5:d9:fa:64:20:b6:ff:e6:ef:1c:f2:08:8f: 4c:9b:64:39:1e:a2:a7:29:a5:80:48:a5:98:17:7c:1c:f1:c5: 08:94:f7:fb:d7:b6:55:77:0a:db:02:3e:7f:fe:4d:d4:03:df: c3:02:40:76:6c:8f:e6:03:54:e8:85:54:65:7f:a1:2e:d3:25: 9a:14:d9:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM0MTUxMTAvBgNVBAUTKEYwQ0IzNUYxNDVFNjFCMUMyMDQzQUZEMUJBNEUzNTQx NDdDNEI1NUUwHhcNMjUwNjE0MTkwMzUyWhcNMjUwNjIxMTkwMzUyWjAYMRYwFAYD VQQDEw02ODRkYzc5OC0zNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SKNGtMfBjrTMnQ8Dyr4sqRnfDcBPF8jWJ7Fi46MFenQGfK9OMqwNuALrGNl MXsvz7dEtAIML6Mh5QzoRgHvEXurUt+1lbTp2gHhiSULpp0y0X98NGDD6sUTfBpa Ii4mXerw4+Ai8V+E2cPiL8ZR1uON0PRKcKkCyrowloKez1dVb6Mz7IP4u8/6NZC5 GNNzenu+uVC741NozsOuI63/gE1Bs/ku4lNWlPXuomsNYCj2x7mSbIvltsUhfJdt lzW28UV+NMFcRUytU2iPSv1NjU55UwPk7TZVPhtp6PxGp+xvXuGB3UWUJe+Ul/cm eMuyZQy9Ks7VGeUGG/iIB9kZ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYGC+BH H41FfECLxjE0Cro5AJaBMB8GA1UdIwQYMBaAFPDLNfFF5hscIEOv0bpONUFHxLVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzQxNS8xMDcyMDk0ODNE RkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4d2dRNl9SdWs0MVFVZkV0 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNczE4VVhtR3h3Z1E2X1J1azQxUVVmRXRWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzQxNS8xMDcyMDk0ODNERkQxMUVBOUYzREI0NzBDNEY5QUUwMi84TXMxOFVYbUd4 d2dRNl9SdWs0MVFVZkV0VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwZ1zzeUFOVf1IEK2pN80FjYe2zu1KNTjZWTSTLrsC8ZC7HdMF54po bl8ti5B8ZSyaIUwaKYGl1r09MpkHIwiGy2QMv6CLtHjoxOPo+t78bM/53owWS31X QMqUQ5xxozX3Y4eAxZeEMSCyQJZSt1hatpUox+Do//SHvC7pkdykKmr8vp6Dsy2s 7amjIuvBF9gIsp3mw/xAcgayrj+lTnx0PExE7v8LLFCvgjHZ5dzCABPExfKaxJEE 7uXZ+mQgtv/m7xzyCI9Mm2Q5HqKnKaWASKWYF3wc8cUIlPf717ZVdwrbAj5//k3U A9/DAkB2bI/mA1TohVRlf6Eu0yWaFNmL -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:42 2025 by rpki-client