$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: txjsYqnsf6n2fkamVEHOuNfh+SeTDmQ2/nmpV6DAAO4= Subject key identifier: 25:AB:DB:C3:13:82:2D:B1:F1:B9:DC:25:47:96:79:90:85:F7:45:17 Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: 018D Signing time: Thu 19 Jun 2025 02:59:49 +0000 Manifest this update: Thu 19 Jun 2025 02:59:49 +0000 Manifest next update: Thu 26 Jun 2025 02:59:49 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: im7vO62Mf6BgWfnEdGhU8zyolzqijeBmmgoPBBtsUNc=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Validity Not Before: Jun 19 02:59:49 2025 GMT Not After : Jun 26 02:59:49 2025 GMT Subject: CN=68537d25-ca9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:f9:5e:b2:34:9b:fd:54:84:a2:a3:3f:eb: 16:b6:8c:ff:d3:67:2e:e2:7b:74:28:b1:4d:d0:89: 5a:54:c8:b0:60:29:72:bf:11:6e:ed:8d:6a:e9:a4: fb:70:fd:41:1c:17:77:76:dc:65:47:4c:7f:5b:69: 42:19:e6:32:9e:be:14:25:8d:b2:bb:7e:e0:bc:dc: 67:44:42:48:31:42:bd:3f:e0:ee:2d:2d:ff:9f:42: 73:c5:6d:13:c7:8f:17:6b:36:6d:ea:54:fc:25:6f: 70:06:49:3b:7f:c3:25:9d:96:19:cf:e2:37:be:05: ec:a2:ca:d6:e6:51:bc:88:44:c8:99:44:4a:11:12: 51:74:4d:86:71:2c:71:12:32:7b:b0:b9:7c:69:92: bd:27:88:71:67:08:fc:e0:9f:b7:0d:b1:d1:43:aa: 9e:00:76:73:2d:06:22:bf:98:0f:03:94:b2:2a:bb: d9:db:ff:db:04:02:99:dc:2e:2c:0c:95:8d:a6:ad: 9a:33:9f:16:83:3b:4b:96:78:2d:44:c0:b2:a2:b8: 50:0b:fe:7d:1c:59:7f:72:11:0f:85:97:12:f8:39: 57:ba:1c:d3:ed:9d:8c:9a:90:91:d8:48:3d:2f:b3: dc:c7:26:ee:d3:c5:c0:08:a4:17:e1:00:c9:cd:d3: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AB:DB:C3:13:82:2D:B1:F1:B9:DC:25:47:96:79:90:85:F7:45:17 X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:c6:05:e2:2d:d2:46:ea:03:e5:5f:d5:e9:55:ba:84:a9:25: f2:40:9f:47:16:32:7a:1f:eb:53:b8:3a:71:1e:e6:cb:eb:e2: d3:b1:7e:e5:da:2d:82:ba:2b:e0:69:52:15:39:b7:ac:c5:94: 0f:3f:9d:e6:55:10:60:30:d6:e1:14:df:3b:7f:3b:39:c5:9e: d5:5b:4c:31:b8:8e:00:d1:c4:90:d1:8a:8d:15:54:72:90:b7: 00:4d:f8:43:31:0e:a5:42:f9:03:c2:3a:c3:c9:a4:90:11:35: 1f:59:fb:e1:2d:a3:93:85:ff:2d:c9:a9:69:cc:a9:dd:6f:73: fd:76:fe:65:67:12:d9:1c:db:2a:4a:2d:fe:79:63:25:54:6d: fe:29:7d:28:45:62:7b:23:96:f6:6a:49:bd:e7:a4:b0:41:91: 0b:80:62:4c:0c:05:02:66:f6:71:43:eb:eb:67:90:85:1e:23: ab:71:d5:d1:d1:ab:fe:d6:76:9c:2c:89:a1:b6:ce:52:4e:96: ba:a5:3e:35:8e:d8:8e:7e:88:51:15:43:4c:89:0c:e2:8b:ff: 6c:75:35:17:93:7a:fa:5d:dd:71:8d:8b:2f:f7:9d:fc:54:0f: d6:5d:1a:18:ba:47:eb:07:27:05:ff:6b:b3:3a:ef:34:c3:69: 2d:2a:b6:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjUwNjE5MDI1OTQ5WhcNMjUwNjI2MDI1OTQ5WjAYMRYwFAYD VQQDEw02ODUzN2QyNS1jYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaL5XrI0m/1UhKKjP+sWtoz/02cu4nt0KLFN0IlaVMiwYClyvxFu7Y1q6aT7 cP1BHBd3dtxlR0x/W2lCGeYynr4UJY2yu37gvNxnREJIMUK9P+DuLS3/n0JzxW0T x48XazZt6lT8JW9wBkk7f8MlnZYZz+I3vgXsosrW5lG8iETImURKERJRdE2GcSxx EjJ7sLl8aZK9J4hxZwj84J+3DbHRQ6qeAHZzLQYiv5gPA5SyKrvZ2//bBAKZ3C4s DJWNpq2aM58WgztLlngtRMCyorhQC/59HFl/chEPhZcS+DlXuhzT7Z2MmpCR2Eg9 L7Pcxybu08XACKQX4QDJzdODnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWr28MT gi2x8bncJUeWeZCF90UXMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmxgXiLdJG6gPlX9XpVbqEqSXyQJ9HFjJ6H+tTuDpxHubL6+LTsX7l 2i2CuivgaVIVObesxZQPP53mVRBgMNbhFN87fzs5xZ7VW0wxuI4A0cSQ0YqNFVRy kLcATfhDMQ6lQvkDwjrDyaSQETUfWfvhLaOThf8tyalpzKndb3P9dv5lZxLZHNsq Si3+eWMlVG3+KX0oRWJ7I5b2akm956SwQZELgGJMDAUCZvZxQ+vrZ5CFHiOrcdXR 0av+1nacLImhts5STpa6pT41jtiOfohRFUNMiQzii/9sdTUXk3r6Xd1xjYsv9538 VA/WXRoYukfrBycF/2uzOu80w2ktKrZV -----END CERTIFICATE-----Generated at Thu Jun 19 21:31:36 2025 by rpki-client