$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft File: M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json) Hash identifier: UEMEOXnteAv+mhsKoQAFCU03EKAVF3Is+aSovtJVl9c= Subject key identifier: F2:8F:BD:3D:C5:E0:CF:48:30:13:13:32:B3:F0:07:38:71:54:04:6E Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A Certificate issuer: /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft Manifest number: 0322 Signing time: Thu 19 Jun 2025 01:04:17 +0000 Manifest this update: Thu 19 Jun 2025 01:04:17 +0000 Manifest next update: Thu 26 Jun 2025 01:04:17 +0000 Files and hashes: 1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: L4830ineUhGYpUWlVrSzXWO2N86e9QyNePBrHpuhfqs=) 2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: hpv7gHEkBMfI8IhiYswhvBmYC+76f/Bx92ErHlGJsZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A Validity Not Before: Jun 19 01:04:17 2025 GMT Not After : Jun 26 01:04:17 2025 GMT Subject: CN=68536211-eec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:1d:30:5a:8f:67:7d:ae:3a:6c:d9:3c:b8: 74:21:90:d5:c9:94:fd:f8:ae:a3:ee:42:54:95:8b: 9b:35:3d:a6:e8:b3:19:3a:1d:ec:af:99:2d:bc:0d: 68:10:31:76:78:f5:8b:e9:4b:99:0e:4b:0e:71:11: 34:f8:ad:74:62:67:01:e3:73:34:28:0f:71:50:ba: 9b:96:15:b8:2f:3a:e4:af:58:1e:5f:d1:ab:f6:26: 87:2b:a4:1b:c9:1f:88:71:f4:0a:84:18:b7:fa:c1: 5e:1f:d3:ec:bd:5d:cf:96:3f:a0:f6:de:ea:f7:fa: f1:78:a0:e7:25:fc:b6:86:59:d3:40:8d:36:3f:5e: 27:8a:9a:bd:26:17:c6:00:eb:5c:7c:87:a2:04:62: 06:c7:84:a2:b4:d5:49:2f:e2:25:2e:b4:a6:ae:78: 4f:3d:73:d3:ff:13:c2:cd:56:ba:5c:3b:06:fa:44: 25:11:fa:34:27:83:c6:ed:64:7f:0f:f7:2e:7d:55: 6c:38:58:bb:49:c6:c0:9c:bc:53:8b:6e:6a:16:b2: 3a:94:34:21:9a:82:44:68:99:96:8e:2e:aa:0c:fb: 7a:f4:ba:21:99:cf:5c:49:27:1e:43:a5:8c:ce:69: ee:5e:29:76:34:f6:fc:f3:34:a4:5c:02:36:e0:be: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8F:BD:3D:C5:E0:CF:48:30:13:13:32:B3:F0:07:38:71:54:04:6E X509v3 Authority Key Identifier: keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:23:64:0a:81:ee:91:35:71:67:1c:34:09:35:a7:ac:4a:c1: dc:f9:1a:d8:33:f4:7f:e2:3c:1d:41:76:0b:39:b5:e3:9c:10: a6:74:2b:9e:87:14:5c:f1:df:cb:8e:4f:66:53:3a:11:3c:ef: ac:fe:79:d0:26:04:06:cb:76:d0:ce:c1:b0:90:9e:48:81:84: 73:db:c6:df:e9:d0:17:37:8c:86:bf:49:dd:4d:d5:3d:a7:56: 19:40:5d:09:2f:7f:91:c8:ca:8a:7b:d5:1e:7c:f3:ae:8d:6b: 30:38:f5:fc:c0:71:16:47:09:57:95:1e:bf:9f:2a:5c:b6:68: 43:98:11:d0:2e:97:18:5f:57:89:d5:0d:f7:f6:31:9f:ea:bb: 27:20:57:fb:44:9f:3f:bb:ab:a3:20:1c:24:86:c2:a8:8a:08: 03:c3:45:7b:44:5d:7b:9f:2c:a5:f5:ff:72:fd:67:05:10:7e: 3c:aa:49:07:30:c3:22:77:19:21:d1:8e:1a:31:5c:49:d3:19: c5:3c:3e:53:23:2d:c2:9e:f8:ed:d9:2d:ed:6f:68:14:06:99: 97:dd:e0:75:f9:c8:a4:fc:12:c2:34:b0:4a:a8:00:b1:a9:bf: 94:44:1d:b9:08:39:2f:6a:8d:8b:f7:38:f6:66:52:2c:d9:17: 30:a6:9f:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc2RTIxMTAvBgNVBAUTKDMzNDRBNDM5NjBEQzRBNDc3M0JCMURGMEZGMDM4REY0 MTYwRjM1N0EwHhcNMjUwNjE5MDEwNDE3WhcNMjUwNjI2MDEwNDE3WjAYMRYwFAYD VQQDEw02ODUzNjIxMS1lZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n4dMFqPZ32uOmzZPLh0IZDVyZT9+K6j7kJUlYubNT2m6LMZOh3sr5ktvA1o EDF2ePWL6UuZDksOcRE0+K10YmcB43M0KA9xULqblhW4Lzrkr1geX9Gr9iaHK6Qb yR+IcfQKhBi3+sFeH9PsvV3Plj+g9t7q9/rxeKDnJfy2hlnTQI02P14nipq9JhfG AOtcfIeiBGIGx4SitNVJL+IlLrSmrnhPPXPT/xPCzVa6XDsG+kQlEfo0J4PG7WR/ D/cufVVsOFi7ScbAnLxTi25qFrI6lDQhmoJEaJmWji6qDPt69Lohmc9cSSceQ6WM zmnuXil2NPb88zSkXAI24L6tqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKPvT3F 4M9IMBMTMrPwBzhxVARuMB8GA1UdIwQYMBaAFDNEpDlg3EpHc7sd8P8DjfQWDzV6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFMi8yMjU5QTE4NkQ4 NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1NrZHp1eDN3X3dPTjlCWVBO WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00wU2tPV0RjU2tkenV4M3dfd09OOUJZUE5Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzZFMi8yMjU5QTE4NkQ4NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1Nr ZHp1eDN3X3dPTjlCWVBOWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNI2QKge6RNXFnHDQJNaesSsHc+RrYM/R/4jwdQXYLObXjnBCmdCue hxRc8d/Ljk9mUzoRPO+s/nnQJgQGy3bQzsGwkJ5IgYRz28bf6dAXN4yGv0ndTdU9 p1YZQF0JL3+RyMqKe9UefPOujWswOPX8wHEWRwlXlR6/nypctmhDmBHQLpcYX1eJ 1Q339jGf6rsnIFf7RJ8/u6ujIBwkhsKoiggDw0V7RF17nyyl9f9y/WcFEH48qkkH MMMidxkh0Y4aMVxJ0xnFPD5TIy3Cnvjt2S3tb2gUBpmX3eB1+cik/BLCNLBKqACx qb+URB25CDkvao2L9zj2ZlIs2Rcwpp/2 -----END CERTIFICATE-----Generated at Fri Jun 20 10:25:26 2025 by rpki-client