$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: L3d82n/vidto6rUXreDh6LrUukAl5SLU8Y6Q+orLhGU= Subject key identifier: F2:04:E8:40:DF:19:BD:CD:D7:53:9E:87:E5:F2:B3:FC:79:D5:D2:40 Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0E03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0DFB Signing time: Sat 14 Jun 2025 17:46:08 +0000 Manifest this update: Sat 14 Jun 2025 17:46:07 +0000 Manifest next update: Sat 21 Jun 2025 17:46:07 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: JWVrdWc75MkB0ExCv+rYCEFSuyCnZcjs+GllwN6hbxg=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: mx4Am+cBFSXiPddaACrFcI512PsDACEUWWDSLjunmeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3587 (0xe03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: Jun 14 17:46:07 2025 GMT Not After : Jun 21 17:46:07 2025 GMT Subject: CN=684db55f-cac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:f8:ca:8e:7b:81:1c:05:26:2c:55:ba:39: 62:cf:c6:b3:f0:48:92:74:1d:e4:7c:fd:90:fb:3b: 76:2a:a0:d2:84:1a:fd:44:f2:d9:3f:7d:10:0f:3d: 74:2c:56:52:06:bf:7e:57:6c:4e:0e:ec:93:fc:0c: 15:0e:8b:6b:a1:bd:bb:10:77:e4:87:23:a8:48:25: de:7d:22:2b:f4:3c:59:20:f7:3c:42:f2:01:61:9a: ca:c2:08:17:06:1a:0c:7f:3d:96:1b:8c:7e:c3:8b: ef:4a:0d:2d:e3:bc:d5:e8:ae:9f:3d:c8:8c:4d:d1: f1:e1:c1:e7:18:67:92:31:f8:f1:9f:75:25:47:b1: 8a:45:c8:8e:44:3f:c0:a1:a3:13:ca:85:dc:ec:94: c5:48:d8:76:fc:ef:b8:49:ad:77:5d:d4:02:3a:3e: 4c:48:fa:45:84:c6:f9:65:9b:fd:c7:02:ea:50:ae: 8c:4b:97:31:07:39:98:1e:c6:68:a2:07:3d:f4:1f: 1d:e4:86:21:bf:b6:4a:0c:18:00:6d:8e:34:a8:d6: 1b:2d:f0:19:a2:2e:63:75:ea:1d:25:12:d8:9b:55: fb:f1:55:32:1d:6f:44:ba:d8:8f:53:2e:32:ca:4c: 18:5d:7e:de:ec:b4:c2:2a:5c:30:12:79:08:db:bc: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:04:E8:40:DF:19:BD:CD:D7:53:9E:87:E5:F2:B3:FC:79:D5:D2:40 X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e1:bb:22:5c:9e:d0:11:e8:8c:af:dd:9a:ab:f1:2a:45:b3: c5:d6:e8:dc:60:aa:77:e5:ab:38:25:f1:5e:87:6c:70:f7:24: f4:ff:8e:00:58:56:90:09:b5:c4:94:ec:83:24:01:fc:ad:61: 45:ee:57:fb:f5:7b:5d:a1:94:a9:8e:4a:a0:e0:c5:62:51:67: 53:df:61:b5:88:ae:76:94:15:14:76:5d:56:36:2a:35:c8:9e: d8:50:f1:ca:a9:69:8e:70:a3:a6:b1:8e:2a:7d:09:44:ab:7d: 74:ad:3c:27:72:be:5a:2b:ed:bd:17:39:30:72:26:53:9a:63: ab:31:61:25:b2:72:e0:11:d3:bf:2c:0e:19:ed:75:3a:e8:bb: 05:0c:ba:a4:02:47:64:32:10:0d:ef:3d:84:eb:23:0c:dc:4c: ad:96:67:56:4f:4d:c3:43:c0:2c:9b:35:af:14:30:52:52:e7: 97:2d:c3:83:aa:9b:0a:75:8c:54:16:19:e5:50:a0:03:1f:fc: b4:b3:18:d9:dc:3e:ed:3b:b4:33:84:41:6e:fa:13:c6:58:81: cd:cc:13:bb:49:27:7a:f8:57:fd:f1:9d:f2:e4:d5:93:e7:72: af:fb:41:16:a2:02:71:b9:0f:71:99:9d:d6:86:9c:c0:81:00: b2:01:0b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjUwNjE0MTc0NjA3WhcNMjUwNjIxMTc0NjA3WjAYMRYwFAYD VQQDEw02ODRkYjU1Zi1jYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Yf4yo57gRwFJixVujliz8az8EiSdB3kfP2Q+zt2KqDShBr9RPLZP30QDz10 LFZSBr9+V2xODuyT/AwVDotrob27EHfkhyOoSCXefSIr9DxZIPc8QvIBYZrKwggX BhoMfz2WG4x+w4vvSg0t47zV6K6fPciMTdHx4cHnGGeSMfjxn3UlR7GKRciORD/A oaMTyoXc7JTFSNh2/O+4Sa13XdQCOj5MSPpFhMb5ZZv9xwLqUK6MS5cxBzmYHsZo ogc99B8d5IYhv7ZKDBgAbY40qNYbLfAZoi5jdeodJRLYm1X78VUyHW9EutiPUy4y ykwYXX7e7LTCKlwwEnkI27xoyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIE6EDf Gb3N11Oeh+Xys/x51dJAMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg4bsiXJ7QEeiMr92aq/EqRbPF1ujcYKp35as4JfFeh2xw9yT0/44A WFaQCbXElOyDJAH8rWFF7lf79XtdoZSpjkqg4MViUWdT32G1iK52lBUUdl1WNio1 yJ7YUPHKqWmOcKOmsY4qfQlEq310rTwncr5aK+29FzkwciZTmmOrMWElsnLgEdO/ LA4Z7XU66LsFDLqkAkdkMhAN7z2E6yMM3EytlmdWT03DQ8AsmzWvFDBSUueXLcOD qpsKdYxUFhnlUKADH/y0sxjZ3D7tO7QzhEFu+hPGWIHNzBO7SSd6+Ff98Z3y5NWT 53Kv+0EWogJxuQ9xmZ3WhpzAgQCyAQs9 -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:33 2025 by rpki-client