$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft File: -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json) Hash identifier: Eh/QvL2kqnhcJMnsZ+sZengDuPYw+WSvSUnHeyLzHc4= Subject key identifier: 47:28:37:AF:64:12:8D:68:86:5D:D5:DE:86:08:6F:DE:66:2F:C0:57 Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft Manifest number: 0177 Signing time: Sun 15 Jun 2025 02:57:56 +0000 Manifest this update: Sun 15 Jun 2025 02:57:55 +0000 Manifest next update: Sun 22 Jun 2025 02:57:55 +0000 Files and hashes: 1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: zv/sAJoojHhruAu6V2t514n5rg6PrRJuOdsar18uRPg=) 2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Validity Not Before: Jun 15 02:57:55 2025 GMT Not After : Jun 22 02:57:55 2025 GMT Subject: CN=684e36b4-2a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:c6:95:2e:5a:a1:f5:59:07:21:cb:de:9e: 52:f3:7a:49:7c:a3:5d:82:10:da:48:f3:ec:10:2f: 0c:f4:60:01:1d:19:1e:73:48:95:a4:1c:67:19:cd: aa:ed:23:73:71:dc:24:13:e1:16:fb:c8:02:7b:41: b7:c4:6e:3a:b4:c9:81:bf:a0:7e:44:75:20:6e:7c: 90:7d:9a:9d:28:26:38:3e:a1:c6:f5:90:31:52:cc: e0:5b:3c:58:59:af:66:2c:19:69:5c:a6:1a:a3:04: c7:d2:e7:a3:6e:6d:31:d3:35:4b:e9:7e:0e:85:05: 96:a6:8e:08:ec:0e:e4:c0:e2:94:21:ad:83:f4:62: 58:44:28:f7:57:a2:97:e4:79:86:1d:62:07:c2:67: 74:78:b1:7f:e3:64:98:21:b8:17:50:7a:76:32:df: da:56:f1:4e:fc:e9:91:3c:a9:39:a4:7e:f5:c6:14: fb:86:83:d7:c8:23:9b:64:17:a6:8b:f5:97:18:2a: f0:e0:54:62:89:4e:74:44:5c:b7:ae:33:42:1a:9b: 50:0d:af:dc:63:35:6e:56:d6:b2:cb:16:61:32:7c: c9:49:ca:73:b0:a4:0a:bb:8f:73:f3:10:f7:8a:5d: cd:d3:44:43:74:e8:06:22:6a:ec:61:29:f9:e8:71: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:28:37:AF:64:12:8D:68:86:5D:D5:DE:86:08:6F:DE:66:2F:C0:57 X509v3 Authority Key Identifier: keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:55:80:94:33:d4:e6:08:8d:47:df:3a:f1:5c:b6:1f:58:d9: 53:1d:7a:4a:2f:83:97:bb:00:0a:5b:10:3e:a5:28:06:56:4a: 89:b4:a6:0b:ec:2b:b9:07:4d:82:bb:6b:e1:ff:6f:e5:ff:42: a1:f1:e2:83:ac:87:18:f1:75:87:d3:19:6d:ff:b1:52:ef:11: de:a0:d9:b3:b7:5c:5f:38:62:a4:a8:6a:b8:e5:a2:67:d8:45: f2:1c:0b:70:5e:b7:f6:cc:a0:c4:1c:a4:bb:55:6b:07:6e:0d: f9:3f:7b:6f:79:a7:8d:bb:b0:c6:39:c2:d8:d7:49:de:af:e9: 40:89:1c:09:12:90:ff:18:f1:b4:f0:34:9e:66:bf:1d:a2:6d: 37:08:69:a5:62:69:30:36:8d:11:4a:57:0e:43:da:f3:6c:57: 5a:6e:49:0e:28:94:e4:00:d2:eb:16:4f:5e:31:d5:a6:10:c9: b6:8d:27:76:5d:ce:59:dd:c6:af:8f:11:77:ab:27:53:e2:e2: 85:30:0c:4c:c6:5e:76:35:fe:df:86:98:dc:bd:1b:e5:0c:73: 90:8e:5f:32:cc:0a:4c:48:73:04:6f:21:30:91:96:f0:b6:d9: 29:d8:73:c3:3d:8d:0f:7e:d3:bf:b5:d5:69:ff:2a:23:bb:bf: 84:02:24:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG ODBFNTJGREYwHhcNMjUwNjE1MDI1NzU1WhcNMjUwNjIyMDI1NzU1WjAYMRYwFAYD VQQDEw02ODRlMzZiNC0yYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+HGlS5aofVZByHL3p5S83pJfKNdghDaSPPsEC8M9GABHRkec0iVpBxnGc2q 7SNzcdwkE+EW+8gCe0G3xG46tMmBv6B+RHUgbnyQfZqdKCY4PqHG9ZAxUszgWzxY Wa9mLBlpXKYaowTH0uejbm0x0zVL6X4OhQWWpo4I7A7kwOKUIa2D9GJYRCj3V6KX 5HmGHWIHwmd0eLF/42SYIbgXUHp2Mt/aVvFO/OmRPKk5pH71xhT7hoPXyCObZBem i/WXGCrw4FRiiU50RFy3rjNCGptQDa/cYzVuVtayyxZhMnzJScpzsKQKu49z8xD3 il3N00RDdOgGImrsYSn56HGiAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcoN69k Eo1ohl3V3oYIb95mL8BXMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIzQi9EQzQ5QTVGQTBBQjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09o TDNVak5uTG9yR2Y0RGxMOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFVYCUM9TmCI1H3zrxXLYfWNlTHXpKL4OXuwAKWxA+pSgGVkqJtKYL 7Cu5B02Cu2vh/2/l/0Kh8eKDrIcY8XWH0xlt/7FS7xHeoNmzt1xfOGKkqGq45aJn 2EXyHAtwXrf2zKDEHKS7VWsHbg35P3tveaeNu7DGOcLY10ner+lAiRwJEpD/GPG0 8DSeZr8dom03CGmlYmkwNo0RSlcOQ9rzbFdabkkOKJTkANLrFk9eMdWmEMm2jSd2 Xc5Z3cavjxF3qydT4uKFMAxMxl52Nf7fhpjcvRvlDHOQjl8yzApMSHMEbyEwkZbw ttkp2HPDPY0PftO/tdVp/yoju7+EAiTA -----END CERTIFICATE-----Generated at Sun Jun 15 09:34:56 2025 by rpki-client