$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft File: gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json) Hash identifier: Lnnf+KowA8W17DTgUkXYQvl8O3I1W2hwtFA+D9yzMu0= Subject key identifier: EF:FE:F4:41:76:54:4C:1A:A0:D1:F7:95:27:A1:46:D8:A1:07:5E:6C Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1 Certificate issuer: /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft Manifest number: 9F Signing time: Tue 17 Jun 2025 05:11:58 +0000 Manifest this update: Tue 17 Jun 2025 05:11:57 +0000 Manifest next update: Tue 24 Jun 2025 05:11:57 +0000 Files and hashes: 1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: ecDrPBIZqw2FnIPmW0NtxhvgM94FiqYHH34HEgZk75E=) 2: 833934745B9E11EFA7D10E5BC4F9AE02.roa (hash: Z7ymI4gwgufBDRVS5UuVZ13UBlK2Svt1pgBpOJn+u0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1 Validity Not Before: Jun 17 05:11:57 2025 GMT Not After : Jun 24 05:11:57 2025 GMT Subject: CN=6850f91d-3f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:35:c3:39:0f:d1:72:1d:97:0e:72:79:71: fd:ab:d8:26:f5:d0:0f:37:f4:b4:01:fe:d1:e5:eb: 78:90:ea:39:7e:c9:b5:61:4e:a3:3e:ea:6d:71:41: a7:92:37:4e:04:96:6c:d9:9a:ef:89:ef:73:d6:38: a9:5f:b7:ed:02:2b:2f:07:f2:59:aa:32:dd:a1:74: 89:ca:5e:2b:1e:6f:b0:8d:65:4d:c9:74:33:79:2e: 1b:fa:0c:df:a9:bd:7f:c2:ac:3a:c6:e5:9c:84:14: e2:45:90:18:e2:77:f0:56:7f:d3:a8:e0:48:57:9a: 41:fd:cc:39:26:f1:a2:62:d4:b1:55:10:b3:5f:94: ad:96:91:fa:f8:83:69:ed:70:a1:27:20:c0:79:b7: b0:58:f2:87:a9:75:ce:bc:ba:42:2a:a5:32:b6:ae: 1a:87:ea:39:bd:15:a5:c6:2f:37:03:fa:df:d9:bc: 83:0b:69:82:72:6a:cc:d7:32:66:61:66:ec:7c:2e: 55:49:68:4f:17:14:5e:7c:99:3f:53:44:9d:5b:e0: a5:29:0f:cf:fd:78:81:d7:ba:67:e7:c1:07:61:c2: 8e:62:2f:3a:fd:f8:f5:fb:c4:c8:49:50:68:95:fa: 17:19:7b:cd:41:84:59:d0:4d:76:a2:ea:37:37:e8: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FE:F4:41:76:54:4C:1A:A0:D1:F7:95:27:A1:46:D8:A1:07:5E:6C X509v3 Authority Key Identifier: keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9d:05:a4:a4:3f:d0:db:24:b9:5f:72:75:0e:c6:67:a1:a7: 73:7e:1b:28:e2:e0:bb:33:b9:39:65:88:e2:21:27:32:09:0b: bc:e3:b2:5e:37:d1:e5:43:15:54:03:65:c5:c1:5c:5c:2c:36: cf:d9:a8:c9:2b:76:12:95:d7:c1:92:d0:c4:34:76:14:8b:b3: 13:8a:cc:33:16:38:cb:cf:ee:35:09:18:3f:89:bf:83:d2:a9: df:11:a5:da:8d:93:a0:ff:96:3d:20:bc:62:fe:5f:b0:04:f7: 64:2d:38:2e:2d:18:72:27:94:1b:b1:a2:01:e4:ec:ef:0e:fb: 60:ab:cc:d6:37:d4:37:b2:fe:a0:67:f4:19:60:b0:ec:a6:d8: 41:bd:4f:f2:2c:80:08:b4:01:ba:fb:88:c4:95:06:91:92:70: 30:29:85:0b:74:5a:13:96:d9:fc:34:bc:aa:f6:3e:50:49:77: a7:b5:8a:41:5a:80:9b:72:fa:3c:78:a8:8d:3d:24:57:5a:c1: 3a:cb:76:49:54:33:25:02:d2:61:5c:0e:11:dd:9e:bc:72:c6: 86:79:20:9a:3e:db:13:56:b3:d2:e3:b8:d1:53:5a:93:7d:f6: df:db:a9:e2:4a:80:df:fd:5b:a3:81:a1:c6:27:2e:f0:a2:c8: 12:81:e6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MTExMTAvBgNVBAUTKDgyOUFEODU3NTcyNTY4N0IxRjBBNEM1NUY5NDIyQUYz M0IwMEZDQjEwHhcNMjUwNjE3MDUxMTU3WhcNMjUwNjI0MDUxMTU3WjAYMRYwFAYD VQQDEw02ODUwZjkxZC0zZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5k1wzkP0XIdlw5yeXH9q9gm9dAPN/S0Af7R5et4kOo5fsm1YU6jPuptcUGn kjdOBJZs2Zrvie9z1jipX7ftAisvB/JZqjLdoXSJyl4rHm+wjWVNyXQzeS4b+gzf qb1/wqw6xuWchBTiRZAY4nfwVn/TqOBIV5pB/cw5JvGiYtSxVRCzX5StlpH6+INp 7XChJyDAebewWPKHqXXOvLpCKqUytq4ah+o5vRWlxi83A/rf2byDC2mCcmrM1zJm YWbsfC5VSWhPFxRefJk/U0SdW+ClKQ/P/XiB17pn58EHYcKOYi86/fj1+8TISVBo lfoXGXvNQYRZ0E12ouo3N+gCowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/+9EF2 VEwaoNH3lSehRtihB15sMB8GA1UdIwQYMBaAFIKa2FdXJWh7HwpMVflCKvM7APyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUxMS8yRENGRjYxMjVC OUUxMUVGOTQ4NDYzNUFDNEY5QUUwMi9ncHJZVjFjbGFIc2ZDa3hWLVVJcTh6c0Ff TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwcllWMWNsYUhzZkNreFYtVUlxOHpzQV9MRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUxMS8yRENGRjYxMjVCOUUxMUVGOTQ4NDYzNUFDNEY5QUUwMi9ncHJZVjFjbGFI c2ZDa3hWLVVJcTh6c0FfTEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHnQWkpD/Q2yS5X3J1DsZnoadzfhso4uC7M7k5ZYjiIScyCQu847Je N9HlQxVUA2XFwVxcLDbP2ajJK3YSldfBktDENHYUi7MTiswzFjjLz+41CRg/ib+D 0qnfEaXajZOg/5Y9ILxi/l+wBPdkLTguLRhyJ5QbsaIB5OzvDvtgq8zWN9Q3sv6g Z/QZYLDspthBvU/yLIAItAG6+4jElQaRknAwKYULdFoTltn8NLyq9j5QSXentYpB WoCbcvo8eKiNPSRXWsE6y3ZJVDMlAtJhXA4R3Z68csaGeSCaPtsTVrPS47jRU1qT ffbf26niSoDf/VujgaHGJy7wosgSgeal -----END CERTIFICATE-----Generated at Wed Jun 18 21:27:45 2025 by rpki-client