$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: 7wU1qIxK4WfzmbevhL7KDC/zI19HI9SBgv0vmcedh6k= Subject key identifier: 17:11:D8:49:89:C5:DF:25:1A:17:11:45:9B:DC:EB:6A:B4:BC:3C:14 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: A4 Signing time: Thu 19 Jun 2025 05:30:55 +0000 Manifest this update: Thu 19 Jun 2025 05:30:55 +0000 Manifest next update: Thu 26 Jun 2025 05:30:55 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: tCR5eLLyhqAJmUTiB0DuF+hPK8ld3a9xyb15ID1jZTo=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: TlHlbn6q/SJJmLaIdFeAVpNRm4YQAAsTE8XrQ+CUo9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Jun 19 05:30:55 2025 GMT Not After : Jun 26 05:30:55 2025 GMT Subject: CN=6853a08f-7291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:a2:3c:e0:e7:8a:19:2f:b9:4f:f8:73:3c: 4e:48:1e:e5:42:da:53:16:42:e4:13:9e:95:3e:3e: 57:00:75:55:cd:00:cf:7c:e5:e2:d4:1d:13:c7:96: 20:41:a5:31:88:20:26:3c:f6:36:24:7d:4e:ee:52: b0:02:7d:7c:29:d1:e3:02:fd:c9:ae:59:dc:8b:c3: b8:57:d8:e2:1d:72:65:b7:d2:0d:34:8e:ab:ff:c6: db:2c:76:df:85:f0:b0:12:50:50:f8:59:1b:36:a5: 6a:59:aa:36:b3:f9:d4:14:e4:cd:da:cf:2a:2e:75: 18:8f:36:e2:5a:7a:20:5c:60:84:a5:94:23:bd:72: 59:29:30:81:4a:ae:64:dd:19:f0:d2:4f:0f:18:f2: d2:78:9b:47:41:7e:3a:61:98:9a:ff:4f:7c:00:16: b7:8d:d4:f0:1e:b1:ee:aa:3f:59:5a:7c:17:3f:9b: 68:05:47:b2:37:59:18:5f:38:da:d2:28:84:0a:1d: fe:f9:a4:82:ee:e9:0d:5a:e8:30:f6:d6:b5:a4:5d: c3:39:62:58:ad:e1:d5:f9:84:fd:2c:a8:de:60:c6: 6f:18:ba:e0:de:eb:86:83:ef:22:e2:fd:f4:e4:ed: 3a:8e:46:46:6b:50:3b:29:82:9d:66:af:6b:db:43: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:D8:49:89:C5:DF:25:1A:17:11:45:9B:DC:EB:6A:B4:BC:3C:14 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:be:58:bd:9a:02:30:3d:bd:86:60:16:d5:33:a5:f3:db:49: 96:ed:f3:93:85:ca:ff:0c:ba:6e:90:5b:a9:28:81:ab:c7:b4: 9c:8b:06:c6:0e:54:c7:23:e8:fa:c5:e5:27:16:0c:d7:0c:7a: e3:85:3d:0e:c5:46:b5:a7:6d:f5:dc:b3:c7:5b:fd:70:97:95: d6:4c:73:c5:d5:db:04:06:61:ac:29:55:c3:48:19:f6:d1:5f: f3:6b:45:f5:83:83:80:d5:ab:30:30:51:77:34:5d:3b:ce:55: f3:36:94:cc:5b:4c:cb:0b:5b:e3:d6:05:59:03:b9:50:95:a4: 9c:39:45:9d:55:77:02:1e:1f:92:6b:da:00:be:90:15:5e:15: 87:98:ed:fd:79:dc:85:06:2e:48:fd:71:97:ad:af:81:6b:b1: df:e6:7c:77:2b:e6:94:4f:e2:cc:25:0b:2a:1b:22:eb:78:0a: b7:ff:25:c9:88:84:fb:84:ec:40:db:c0:3e:fb:f4:53:ca:0b: 47:8d:37:2a:9f:d7:24:37:a2:36:f1:93:05:be:23:c0:04:bc: fd:9c:02:fe:03:b3:11:cd:79:88:03:cd:db:65:ac:50:54:a9: 33:51:ac:59:43:55:cc:a0:42:55:1e:3d:1c:90:3d:ff:4a:4d: a4:05:9a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUwNjE5MDUzMDU1WhcNMjUwNjI2MDUzMDU1WjAYMRYwFAYD VQQDEw02ODUzYTA4Zi03MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnCiPODnihkvuU/4czxOSB7lQtpTFkLkE56VPj5XAHVVzQDPfOXi1B0Tx5Yg QaUxiCAmPPY2JH1O7lKwAn18KdHjAv3Jrlnci8O4V9jiHXJlt9INNI6r/8bbLHbf hfCwElBQ+FkbNqVqWao2s/nUFOTN2s8qLnUYjzbiWnogXGCEpZQjvXJZKTCBSq5k 3Rnw0k8PGPLSeJtHQX46YZia/098ABa3jdTwHrHuqj9ZWnwXP5toBUeyN1kYXzja 0iiECh3++aSC7ukNWugw9ta1pF3DOWJYreHV+YT9LKjeYMZvGLrg3uuGg+8i4v30 5O06jkZGa1A7KYKdZq9r20OtRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcR2EmJ xd8lGhcRRZvc62q0vDwUMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vli9mgIwPb2GYBbVM6Xz20mW7fOThcr/DLpukFupKIGrx7SciwbG DlTHI+j6xeUnFgzXDHrjhT0OxUa1p2313LPHW/1wl5XWTHPF1dsEBmGsKVXDSBn2 0V/za0X1g4OA1aswMFF3NF07zlXzNpTMW0zLC1vj1gVZA7lQlaScOUWdVXcCHh+S a9oAvpAVXhWHmO39edyFBi5I/XGXra+Ba7Hf5nx3K+aUT+LMJQsqGyLreAq3/yXJ iIT7hOxA28A++/RTygtHjTcqn9ckN6I28ZMFviPABLz9nAL+A7MRzXmIA83bZaxQ VKkzUaxZQ1XMoEJVHj0ckD3/Sk2kBZrC -----END CERTIFICATE-----Generated at Fri Jun 20 08:23:20 2025 by rpki-client