$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json) Hash identifier: wOVakEcObNf0wWTFKtpeWqm5K72ZvQv8So2wHFxubDk= Subject key identifier: C9:DE:9E:99:22:07:76:C7:F7:28:43:59:2A:C6:B2:E0:B1:0C:94:03 Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft Manifest number: FD Signing time: Tue 17 Jun 2025 04:14:51 +0000 Manifest this update: Tue 17 Jun 2025 04:14:50 +0000 Manifest next update: Tue 24 Jun 2025 04:14:50 +0000 Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: NQHsweeK+cOCO29zMRG1BTfQ1yeMagtlHVapIBhk9uU=) 2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Validity Not Before: Jun 17 04:14:50 2025 GMT Not After : Jun 24 04:14:50 2025 GMT Subject: CN=6850ebba-51e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:1e:52:16:f8:ff:aa:67:d9:c7:71:6c:91: 32:d6:41:01:05:a7:82:70:3b:b6:88:46:0f:ef:28: 86:7b:d0:3c:ee:11:3e:92:4c:a4:2d:a1:21:57:b7: 9e:cb:aa:5a:d5:ec:f9:47:3e:0c:06:ac:9d:1b:af: 2f:d4:03:8f:b5:4d:bc:b4:f1:2c:af:f7:46:1c:15: a2:c6:66:8d:c7:d3:4b:73:06:47:fd:63:a5:10:e0: c7:ea:1f:1c:54:a8:86:71:9a:f9:fb:e8:66:06:47: c0:6f:ea:d4:80:3b:6c:ea:88:d5:f6:83:5f:96:bd: 45:67:f4:be:5f:80:8c:be:85:52:81:d8:da:2a:a1: ac:28:d6:f3:3b:cd:5e:62:97:9f:ee:97:1b:a2:c6: e6:57:c5:8a:6e:a9:14:1b:f9:93:b8:a2:29:3e:4b: ac:78:b3:2a:f2:29:67:9c:8c:6a:ec:fa:7c:bc:de: 8d:49:d8:4f:18:2b:17:0b:bd:a6:0f:24:62:6c:7d: 6b:1c:1e:58:76:62:60:68:78:e0:91:fb:4c:74:08: 36:76:40:8f:9a:11:d3:cb:eb:70:20:51:6f:6a:28: aa:3b:0d:b3:fc:a3:2e:28:fc:8d:61:71:9e:6f:82: 66:6b:bf:0d:93:92:34:f9:ce:b6:49:50:08:6a:11: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DE:9E:99:22:07:76:C7:F7:28:43:59:2A:C6:B2:E0:B1:0C:94:03 X509v3 Authority Key Identifier: keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:da:02:9b:fa:76:db:f9:92:e2:cc:af:04:ed:42:2a:8f:21: e0:b7:cc:b9:a2:85:7f:62:58:ac:c5:cd:9b:21:31:d9:55:02: 0b:0f:9f:fb:5c:af:2c:08:24:bf:9c:ce:19:f7:ad:38:a7:c3: 97:f4:2d:b5:02:d0:28:bf:4a:b4:46:80:7e:a0:78:13:d5:c1: 51:16:5a:b0:0b:ac:cc:9c:b5:66:df:5c:08:e2:18:0b:cf:bd: 89:48:af:d2:86:b9:c6:31:7c:45:1b:aa:e1:0f:be:e0:52:06: 24:da:de:d8:40:ae:08:6a:c7:2e:3f:7c:c2:62:c9:4d:52:74: d6:ab:33:a0:a4:1e:84:6c:c6:4c:90:6d:1c:42:48:f3:f0:23: 31:63:96:ff:df:14:cf:cf:1d:06:bb:0a:16:5b:a4:e9:a3:2d: 05:23:56:a1:7a:37:e7:57:58:75:da:1a:9d:ab:d9:60:c2:6c: c8:e4:e1:ee:5a:d2:f3:db:e6:a0:0b:92:07:36:36:55:91:49: 55:ee:cf:a5:c3:7b:6a:78:83:7e:03:5c:34:b2:b4:5a:87:9e: 57:b4:13:84:69:67:fd:05:5a:6e:0b:07:76:9b:b1:d4:c8:9d: 13:8e:23:57:81:a4:10:b3:65:55:54:e3:84:b1:77:c9:a4:7e: ea:6d:b5:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1REMzNDEyRTEy MkZBODcxNEMwHhcNMjUwNjE3MDQxNDUwWhcNMjUwNjI0MDQxNDUwWjAYMRYwFAYD VQQDEw02ODUwZWJiYS01MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKgeUhb4/6pn2cdxbJEy1kEBBaeCcDu2iEYP7yiGe9A87hE+kkykLaEhV7ee y6pa1ez5Rz4MBqydG68v1AOPtU28tPEsr/dGHBWixmaNx9NLcwZH/WOlEODH6h8c VKiGcZr5++hmBkfAb+rUgDts6ojV9oNflr1FZ/S+X4CMvoVSgdjaKqGsKNbzO81e Ypef7pcbosbmV8WKbqkUG/mTuKIpPkuseLMq8ilnnIxq7Pp8vN6NSdhPGCsXC72m DyRibH1rHB5YdmJgaHjgkftMdAg2dkCPmhHTy+twIFFvaiiqOw2z/KMuKPyNYXGe b4Jma78Nk5I0+c62SVAIahHEnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnenpki B3bH9yhDWSrGsuCxDJQDMB8GA1UdIwQYMBaAFNdHQBFMuvT1map+XcNBLhIvqHFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9DREYzREExNkQy MkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQV1pxbjVkdzBFdUVpLW9j VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQ V1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh2gKb+nbb+ZLizK8E7UIqjyHgt8y5ooV/Ylisxc2bITHZVQILD5/7 XK8sCCS/nM4Z9604p8OX9C21AtAov0q0RoB+oHgT1cFRFlqwC6zMnLVm31wI4hgL z72JSK/ShrnGMXxFG6rhD77gUgYk2t7YQK4IascuP3zCYslNUnTWqzOgpB6EbMZM kG0cQkjz8CMxY5b/3xTPzx0GuwoWW6Tpoy0FI1ahejfnV1h12hqdq9lgwmzI5OHu WtLz2+agC5IHNjZVkUlV7s+lw3tqeIN+A1w0srRah55XtBOEaWf9BVpuCwd2m7HU yJ0TjiNXgaQQs2VVVOOEsXfJpH7qbbVg -----END CERTIFICATE-----Generated at Tue Jun 17 16:56:27 2025 by rpki-client