$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: j2hL3ErW64KlBAyrAPYVbAg6XmfiF7mUlt4WcnoHbig= Subject key identifier: 00:53:E4:D1:C2:E3:5A:64:40:6C:B5:06:9F:ED:15:8F:0B:F0:87:67 Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 0198 Signing time: Thu 19 Jun 2025 02:50:03 +0000 Manifest this update: Thu 19 Jun 2025 02:50:02 +0000 Manifest next update: Thu 26 Jun 2025 02:50:02 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: 8iAl60D8dp4omJkXfWi1mazTp7mxSWszJ7sO+gKkozE=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: Jun 19 02:50:02 2025 GMT Not After : Jun 26 02:50:02 2025 GMT Subject: CN=68537adb-24b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:ec:f3:ee:ea:99:e0:06:82:50:e1:48:0b: 0b:c1:36:70:59:78:53:e3:ba:cf:da:49:99:3f:46: eb:65:8b:bd:b8:14:98:b4:dc:04:b3:00:9d:77:b4: 39:4a:e0:0f:59:e5:e9:7f:0e:a6:69:fa:7b:c6:6a: 69:01:99:f1:88:b5:78:d2:d8:66:3b:0d:9d:0c:49: 19:b5:d9:22:8b:2c:fa:48:3b:ae:4d:ee:4e:cf:da: 89:aa:26:ac:5c:50:bd:62:a2:29:8d:ce:b6:92:f6: 39:5c:92:bc:ce:97:21:ab:5c:34:a4:d7:7c:c3:43: bb:f5:e0:b8:19:5b:dd:bd:48:f5:60:27:4b:33:4c: 45:7f:4a:0c:90:72:91:4b:96:4c:86:f2:29:45:8c: 4d:45:76:0b:c6:48:49:54:30:22:91:3c:a4:b0:7d: b9:c9:af:82:61:f3:92:36:2e:ee:d2:7d:75:35:99: 11:cc:1b:c2:d6:20:de:cb:e5:f6:97:ec:28:48:5d: 1b:e1:ff:82:af:78:9e:ec:bd:8a:c7:e8:63:f9:a1: 89:8f:1f:d8:08:5f:c1:dc:bb:21:70:0f:fe:7a:af: 77:24:b0:c6:e1:63:5c:e4:54:c2:a5:e5:83:ec:12: 9a:75:4e:c4:70:24:18:6c:34:1d:5b:08:bb:04:fc: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:E4:D1:C2:E3:5A:64:40:6C:B5:06:9F:ED:15:8F:0B:F0:87:67 X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0d:b6:5b:d7:7a:01:70:e0:2c:e2:03:eb:0c:df:78:f0:9c: 84:5f:11:08:9e:96:71:75:80:ed:ed:b1:4d:c3:9a:ae:5b:df: c2:3b:f4:4c:1b:42:2e:8f:0f:bc:35:66:11:33:08:98:da:f7: 63:f7:4c:17:ee:34:73:22:b5:d4:6b:d4:be:5e:95:ef:94:22: fc:46:78:56:5d:24:cb:12:ae:ed:72:22:39:d9:81:c4:46:82: 98:c2:ac:5c:e7:8b:8e:e8:70:dd:b0:57:94:ae:0f:a2:17:cb: 7b:03:45:63:b1:3f:8c:13:bc:34:15:e0:0a:76:ce:a1:6e:19: ed:da:e9:66:d4:69:d8:ae:c2:a9:4f:72:70:e0:bc:f2:4b:75: 4f:d2:02:df:32:f7:4e:cc:b7:d4:11:a2:79:c8:fd:42:99:95: 23:b7:5d:39:bb:d9:03:18:50:1d:43:63:ed:4b:e9:b9:e5:6b: de:95:a8:09:8d:35:1e:90:26:a8:b9:03:f3:13:83:58:c0:81: 99:4f:11:7a:73:48:62:62:f7:0e:43:14:b7:f7:65:70:a3:32: 5b:fc:f0:01:a7:de:b8:f5:b5:a3:65:11:b0:41:65:f5:b9:9e: b9:a4:6b:49:77:7e:82:d3:0b:97:55:bc:4d:2b:05:f4:c0:c1: fa:31:5b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjUwNjE5MDI1MDAyWhcNMjUwNjI2MDI1MDAyWjAYMRYwFAYD VQQDEw02ODUzN2FkYi0yNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBfs8+7qmeAGglDhSAsLwTZwWXhT47rP2kmZP0brZYu9uBSYtNwEswCdd7Q5 SuAPWeXpfw6mafp7xmppAZnxiLV40thmOw2dDEkZtdkiiyz6SDuuTe5Oz9qJqias XFC9YqIpjc62kvY5XJK8zpchq1w0pNd8w0O79eC4GVvdvUj1YCdLM0xFf0oMkHKR S5ZMhvIpRYxNRXYLxkhJVDAikTyksH25ya+CYfOSNi7u0n11NZkRzBvC1iDey+X2 l+woSF0b4f+Cr3ie7L2Kx+hj+aGJjx/YCF/B3LshcA/+eq93JLDG4WNc5FTCpeWD 7BKadU7EcCQYbDQdWwi7BPy9SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABT5NHC 41pkQGy1Bp/tFY8L8IdnMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzDbZb13oBcOAs4gPrDN948JyEXxEInpZxdYDt7bFNw5quW9/CO/RM G0Iujw+8NWYRMwiY2vdj90wX7jRzIrXUa9S+XpXvlCL8RnhWXSTLEq7tciI52YHE RoKYwqxc54uO6HDdsFeUrg+iF8t7A0VjsT+ME7w0FeAKds6hbhnt2ulm1GnYrsKp T3Jw4LzyS3VP0gLfMvdOzLfUEaJ5yP1CmZUjt105u9kDGFAdQ2PtS+m55WvelagJ jTUekCaouQPzE4NYwIGZTxF6c0hiYvcOQxS392VwozJb/PABp9649bWjZRGwQWX1 uZ65pGtJd36C0wuXVbxNKwX0wMH6MVst -----END CERTIFICATE-----Generated at Thu Jun 19 19:00:50 2025 by rpki-client