$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: xQgYGw1OY39aeudMpPPvauVobYMe8KJADoayAmAln60= Subject key identifier: ED:62:C1:AB:02:8B:FA:B3:EF:10:5A:71:91:73:E6:DD:23:A7:EB:BD Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 07BC Signing time: Thu 12 Jun 2025 21:00:27 +0000 Manifest this update: Thu 12 Jun 2025 21:00:26 +0000 Manifest next update: Thu 19 Jun 2025 21:00:26 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: 50N8ol7TL9k3bbzO5i4PkFdxujRE3xFdB5sB21a4YFg=) 2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: +XIvNmYB/5EgcsxvZK5ch01j/uNHHViQProaEC6+kLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Jun 12 21:00:26 2025 GMT Not After : Jun 19 21:00:26 2025 GMT Subject: CN=684b3fea-893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:cf:3b:1c:9c:0b:92:60:94:b9:a4:b2:2e: 1c:c1:75:71:f1:06:11:81:26:a1:37:4a:4f:b1:0a: 79:83:70:f7:31:51:e7:5a:64:56:3d:54:0c:8e:d7: 3c:b3:cf:f3:5d:07:fa:c4:a9:0a:8d:20:37:b6:8a: f3:17:a4:3f:dd:e3:41:d6:e1:3b:e6:25:c9:98:84: 3a:57:a0:fe:24:f1:55:41:a9:1e:07:13:87:46:ed: a9:32:f0:90:68:82:e4:d4:d6:14:5a:5b:d7:3b:74: da:97:94:fe:96:1c:c8:f2:34:c0:ec:07:f6:3f:33: 92:91:90:bd:2d:65:8b:2d:39:02:86:3f:7a:c3:63: f3:04:f2:02:d5:f6:75:50:90:1b:8a:58:0e:de:cf: 13:45:8a:38:a7:dd:df:43:06:3f:99:20:86:d8:4f: e3:bd:c2:36:d7:1d:b7:44:17:db:87:29:4b:00:f3: 82:6f:ea:5c:47:af:58:20:53:2a:2f:29:37:99:ea: cf:e5:dd:29:a6:6d:df:dd:6f:21:ce:d7:a0:50:8d: 99:e4:71:23:49:c1:f5:44:8e:c9:7e:f4:e0:80:5c: 18:ef:3a:3e:3f:64:ac:94:73:31:0f:93:d6:2d:a1: e8:d4:24:e5:db:60:5a:30:f7:c3:67:5a:1b:54:f3: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:62:C1:AB:02:8B:FA:B3:EF:10:5A:71:91:73:E6:DD:23:A7:EB:BD X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e7:0a:27:6d:a6:64:89:7c:9e:cd:85:bf:a3:c5:92:70:1f: 9b:cc:17:19:a5:c1:d0:25:c3:72:64:46:8f:96:cd:84:c4:8a: f8:62:7a:4d:e1:65:f3:ad:bc:05:ab:8f:b8:05:26:cd:ba:ef: 73:00:f8:f3:1a:c2:5e:4a:2b:36:c0:46:44:0b:2e:3a:e8:a6: ce:72:d3:5f:8c:a0:17:ec:2b:29:29:fb:b7:df:e4:5c:2a:48: 7a:aa:b5:42:0b:fd:fd:4b:1d:df:14:37:4f:f3:4b:fc:6f:c5: c5:b7:c8:dc:39:da:9e:65:d0:ab:09:59:5e:84:12:7f:3e:04: 9b:46:44:41:24:00:be:c3:4c:b2:1c:59:6d:6d:3e:7b:f0:ac: d6:d6:c0:52:24:ed:e7:cf:af:37:6e:db:de:d8:21:7a:52:e1: 8b:13:e7:1e:f6:c2:72:08:68:14:65:98:21:7e:c8:35:b1:fb: 1c:69:bc:11:f9:da:9c:97:60:e4:70:e3:db:46:b0:c3:ef:ec: ca:1f:56:7e:46:70:b0:69:b5:ec:e7:96:c3:7f:fc:0e:0b:5c: 13:41:dc:48:fc:5e:60:4b:2e:de:68:e1:03:62:15:02:8d:1b: 4e:76:c2:32:b9:96:7d:09:3c:00:03:f5:c4:16:2f:ad:87:56: c7:bf:ef:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUwNjEyMjEwMDI2WhcNMjUwNjE5MjEwMDI2WjAYMRYwFAYD VQQDEw02ODRiM2ZlYS04OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZrPOxycC5JglLmksi4cwXVx8QYRgSahN0pPsQp5g3D3MVHnWmRWPVQMjtc8 s8/zXQf6xKkKjSA3torzF6Q/3eNB1uE75iXJmIQ6V6D+JPFVQakeBxOHRu2pMvCQ aILk1NYUWlvXO3Tal5T+lhzI8jTA7Af2PzOSkZC9LWWLLTkChj96w2PzBPIC1fZ1 UJAbilgO3s8TRYo4p93fQwY/mSCG2E/jvcI21x23RBfbhylLAPOCb+pcR69YIFMq Lyk3merP5d0ppm3f3W8hztegUI2Z5HEjScH1RI7JfvTggFwY7zo+P2SslHMxD5PW LaHo1CTl22BaMPfDZ1obVPMmwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1iwasC i/qz7xBacZFz5t0jp+u9MB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr5wonbaZkiXyezYW/o8WScB+bzBcZpcHQJcNyZEaPls2ExIr4YnpN 4WXzrbwFq4+4BSbNuu9zAPjzGsJeSis2wEZECy466KbOctNfjKAX7CspKfu33+Rc Kkh6qrVCC/39Sx3fFDdP80v8b8XFt8jcOdqeZdCrCVlehBJ/PgSbRkRBJAC+w0yy HFltbT578KzW1sBSJO3nz683btve2CF6UuGLE+ce9sJyCGgUZZghfsg1sfscabwR +dqcl2DkcOPbRrDD7+zKH1Z+RnCwabXs55bDf/wOC1wTQdxI/F5gSy7eaOEDYhUC jRtOdsIyuZZ9CTwAA/XEFi+th1bHv+9C -----END CERTIFICATE-----Generated at Sat Jun 14 17:29:04 2025 by rpki-client