$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: sgCItiaZ4cQLCdPnvmeZ67m70F3bW+oAky/UfJpD4Hs= Subject key identifier: 9A:30:25:A2:80:C1:47:9E:07:D3:5B:1F:39:72:CE:37:67:9D:7F:BD Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 142C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 1416 Signing time: Wed 18 Jun 2025 04:26:32 +0000 Manifest this update: Wed 18 Jun 2025 04:26:32 +0000 Manifest next update: Wed 25 Jun 2025 04:26:32 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: mc+IY97RTNOPtxHLFbbU0pCdmvOzFkd+IWPyc+UwB6E=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=) 3: 983A5536450611F093EC3A65C4F9AE02.roa (hash: pEec0R62Bj3aymINooi97WOwxIJFlmEKrKBXY5Z0JM8=) 4: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=) 5: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: qHB1qFpvB/X4qPBj+yXYeUW8QRac4CCty8+o9xHqsdY=) 6: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=) 7: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Ufe911ZYJ83uxaf/Sv2kXJTQ07JYf4WZldXiZBe6G2M=) 8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 04:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5164 (0x142c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jun 18 04:26:32 2025 GMT Not After : Jun 25 04:26:32 2025 GMT Subject: CN=68523ff8-5aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:0a:97:21:b3:4b:28:4d:0a:5f:49:74:78: 71:b1:60:11:02:4b:c5:15:bb:d7:8c:94:1a:06:20: e6:26:e0:96:b9:97:15:44:2c:29:06:37:78:74:16: 61:2e:17:c2:8e:ed:98:d8:1d:dc:e7:35:ed:fc:f5: 6b:54:01:8d:60:74:6e:15:75:34:30:7f:0b:5d:bd: aa:0f:7a:cb:f1:3c:e0:d6:d5:2e:0b:4c:d9:01:63: a1:19:61:ed:9d:77:60:25:5c:7e:32:70:38:2d:d8: ac:77:f6:00:f7:ab:61:35:84:2b:f2:9b:5c:1d:96: 6c:35:32:63:76:a8:4e:48:cf:99:d9:e6:ae:d8:27: b7:4d:73:80:db:ec:dc:a7:06:bb:cc:67:4c:c2:19: 85:21:1d:d7:3b:a6:27:d2:49:c0:3a:a3:75:39:58: 8f:08:b0:be:b0:63:b8:8c:40:e5:1f:78:d4:38:4d: d8:0f:2c:cc:38:31:8b:c1:a1:09:94:64:75:e8:e6: 7f:3d:59:74:5d:b7:8b:c3:6d:10:b7:81:68:00:a8: 6a:f0:61:cf:92:f5:f5:cb:4f:22:51:05:af:73:7e: 4c:28:0b:66:de:75:57:d5:d7:5b:e2:3f:6a:c9:f0: ea:24:0e:7a:d7:fb:8d:e2:08:e3:b3:14:62:24:40: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:25:A2:80:C1:47:9E:07:D3:5B:1F:39:72:CE:37:67:9D:7F:BD X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a2:91:91:74:74:b5:3d:ff:a9:ca:4b:be:14:55:91:4e:0e: a4:a7:5f:e7:ee:57:ee:ce:05:95:a0:79:6d:be:19:60:8a:bc: 2c:70:49:a8:c3:e2:6f:41:53:73:05:fd:3e:bb:32:74:8e:17: e0:4d:6c:eb:36:ac:d2:f2:3e:99:40:7d:20:d9:f5:9f:79:93: 52:4d:7b:aa:9a:17:e3:80:36:35:21:db:e5:58:02:74:a2:0e: ed:b1:35:e1:f7:fa:65:0c:b0:78:b1:0e:d8:65:fb:e9:5f:c2: 29:a2:f0:22:16:bd:60:7e:8e:f5:0b:c2:20:93:b4:4e:40:7e: 62:4b:e1:66:0f:2c:61:be:c0:24:a8:1f:3c:4d:69:ca:6d:92: 40:d8:43:3f:54:f5:13:9f:c1:ac:fe:04:e7:7a:c6:75:2b:31: 75:b8:20:11:26:15:61:88:b8:2e:40:3a:a1:9c:93:50:1b:2c: 3b:0d:a4:7a:00:e3:e6:62:4f:ba:e8:35:43:00:0f:23:e4:42: 72:91:a2:66:ac:25:26:33:b5:72:93:49:19:4e:0a:f6:d5:4b: 64:89:12:b8:9c:d0:1e:8a:27:7d:37:58:e5:58:73:91:2e:6c: 39:1d:07:af:37:20:01:19:70:f1:f6:0b:5c:e0:92:af:53:ed: 63:01:87:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNjE4MDQyNjMyWhcNMjUwNjI1MDQyNjMyWjAYMRYwFAYD VQQDEw02ODUyM2ZmOC01YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp8KlyGzSyhNCl9JdHhxsWARAkvFFbvXjJQaBiDmJuCWuZcVRCwpBjd4dBZh LhfCju2Y2B3c5zXt/PVrVAGNYHRuFXU0MH8LXb2qD3rL8Tzg1tUuC0zZAWOhGWHt nXdgJVx+MnA4Ldisd/YA96thNYQr8ptcHZZsNTJjdqhOSM+Z2eau2Ce3TXOA2+zc pwa7zGdMwhmFIR3XO6Yn0knAOqN1OViPCLC+sGO4jEDlH3jUOE3YDyzMODGLwaEJ lGR16OZ/PVl0XbeLw20Qt4FoAKhq8GHPkvX1y08iUQWvc35MKAtm3nVX1ddb4j9q yfDqJA561/uN4gjjsxRiJECE1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJowJaKA wUeeB9NbHzlyzjdnnX+9MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCopGRdHS1Pf+pyku+FFWRTg6kp1/n7lfuzgWVoHltvhlgirwscEmo w+JvQVNzBf0+uzJ0jhfgTWzrNqzS8j6ZQH0g2fWfeZNSTXuqmhfjgDY1IdvlWAJ0 og7tsTXh9/plDLB4sQ7YZfvpX8IpovAiFr1gfo71C8Igk7ROQH5iS+FmDyxhvsAk qB88TWnKbZJA2EM/VPUTn8Gs/gTnesZ1KzF1uCARJhVhiLguQDqhnJNQGyw7DaR6 AOPmYk+66DVDAA8j5EJykaJmrCUmM7Vyk0kZTgr21UtkiRK4nNAeiid9N1jlWHOR Lmw5HQevNyABGXDx9gtc4JKvU+1jAYfW -----END CERTIFICATE-----Generated at Wed Jun 18 10:07:46 2025 by rpki-client