$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft File: pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json) Hash identifier: +Rq2Zfv1fb1fS6WvkAfG6BMYNallYrnIhy3S3QfKzRA= Subject key identifier: BC:31:45:5F:10:4E:BE:41:9D:BB:1D:55:9A:B4:8B:42:A5:72:3A:49 Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft Manifest number: 015D Signing time: Sat 21 Jun 2025 03:17:17 +0000 Manifest this update: Sat 21 Jun 2025 03:17:16 +0000 Manifest next update: Sat 28 Jun 2025 03:17:16 +0000 Files and hashes: 1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: +wMX+QgUJeuRyAP2dzDBT/9vI4K0Eed+HtWNBcdGiMo=) 2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: R5V6cNUR7QLj7LU1QU6TMYs4Bu+rino6/Kk8saAW2NA=) 3: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: kNV7VPtOhVOV5sWtOMUE/oMw0hk3N1NsBatuZRoh3AE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 03:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Validity Not Before: Jun 21 03:17:16 2025 GMT Not After : Jun 28 03:17:16 2025 GMT Subject: CN=6856243c-db9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:c2:b7:4d:12:e8:e2:4c:f0:b4:d4:36:1c: 11:8b:e1:a9:63:63:99:55:87:81:65:fe:17:d6:74: 0b:14:22:03:6d:f5:60:a1:94:82:89:bc:d6:f3:95: 3e:6c:ea:2f:7f:48:66:21:20:fe:1d:80:4c:7d:9b: 97:7d:c8:f7:70:6e:a4:bc:26:b6:2f:d6:b9:c0:dd: e1:69:ff:44:eb:00:1e:8c:e1:1f:70:f0:97:ec:44: 45:ab:41:32:b0:a6:f2:90:b5:a9:0b:8a:7e:0b:91: e5:31:c1:ea:d2:72:0d:aa:2f:0e:05:f0:7e:c5:e4: 1c:c0:ff:e2:bb:1c:e8:50:d3:ae:e8:0e:54:b9:83: 7c:34:10:20:8f:35:74:90:f8:4a:2b:05:70:a9:7d: c5:a1:66:06:06:58:7b:cd:29:2e:42:7d:9b:17:e3: 9a:e3:9d:93:bc:c3:8d:3d:3e:f2:9d:ab:70:62:81: f0:27:42:e7:d1:9d:7c:b9:de:f7:b6:78:c6:db:93: 1b:99:c3:34:f3:ce:ea:0a:ce:4f:87:a6:96:c5:13: 41:0f:f5:ff:e5:5a:65:53:b1:d7:0f:af:c3:6c:cc: ec:b1:af:3e:d2:9f:bc:9e:df:38:6c:55:56:8d:b6: 78:79:aa:47:6e:b4:5b:d9:c6:6c:7b:0e:d6:6d:ba: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:31:45:5F:10:4E:BE:41:9D:BB:1D:55:9A:B4:8B:42:A5:72:3A:49 X509v3 Authority Key Identifier: keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a1:57:f3:13:87:c4:54:a6:91:c0:17:e2:89:54:2c:ba:2f: 7b:17:0c:35:67:4a:78:dc:f6:ca:e3:87:ec:93:2d:95:3f:9e: 86:6e:a0:6f:c4:0a:ee:14:ef:40:09:83:3d:ca:e4:82:db:42: fe:77:95:c5:82:7b:94:6e:90:2f:25:ec:02:59:6f:dd:95:a9: ce:bb:45:27:b4:1c:81:17:26:d2:f9:f2:a0:d0:e9:b0:c6:17: e8:39:c8:6a:39:ee:37:e2:be:ae:c9:a9:6c:43:0d:b9:cf:2e: ab:15:96:2d:92:89:29:64:c1:a3:08:af:7b:48:00:9d:77:ee: 0c:b8:20:68:b8:3c:fb:e9:f2:18:64:dc:4c:2f:de:20:c8:2a: 94:40:fe:4e:fb:41:46:c8:1b:d3:95:fb:2f:21:24:89:11:ae: f6:73:34:de:10:1d:c6:e7:64:99:4b:75:1c:da:d4:9c:77:a0: 97:33:f5:87:40:af:ed:de:7d:a5:90:8d:8d:17:57:fb:0c:aa: 5e:c8:33:8d:48:bc:b7:4d:b4:ba:6d:29:25:dd:de:3b:99:9a: 2d:f9:63:f5:99:c2:fe:0f:9e:33:14:7d:89:d2:04:42:ae:11: f8:58:b0:9f:66:a0:08:d1:6f:33:b3:0a:28:cd:df:10:12:6e: cd:92:e5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3NjMxMTAvBgNVBAUTKEE1NUQzRkY4QTg1QkUxMDNCNTgzNzUwRDc3OTQzRjQ3 Qzk3NkY1QjMwHhcNMjUwNjIxMDMxNzE2WhcNMjUwNjI4MDMxNzE2WjAYMRYwFAYD VQQDEw02ODU2MjQzYy1kYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXPCt00S6OJM8LTUNhwRi+GpY2OZVYeBZf4X1nQLFCIDbfVgoZSCibzW85U+ bOovf0hmISD+HYBMfZuXfcj3cG6kvCa2L9a5wN3haf9E6wAejOEfcPCX7ERFq0Ey sKbykLWpC4p+C5HlMcHq0nINqi8OBfB+xeQcwP/iuxzoUNOu6A5UuYN8NBAgjzV0 kPhKKwVwqX3FoWYGBlh7zSkuQn2bF+Oa452TvMONPT7ynatwYoHwJ0Ln0Z18ud73 tnjG25MbmcM0887qCs5Ph6aWxRNBD/X/5VplU7HXD6/DbMzssa8+0p+8nt84bFVW jbZ4eapHbrRb2cZsew7WbbqA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwxRV8Q Tr5BnbsdVZq0i0KlcjpJMB8GA1UdIwQYMBaAFKVdP/ioW+EDtYN1DXeUP0fJdvWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTc2My83MUY3OUMxQzQy NDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRRTzFnM1VOZDVRX1I4bDI5 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWMF8tS2hiNFFPMWczVU5kNVFfUjhsMjliTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTc2My83MUY3OUMxQzQyNDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRR TzFnM1VOZDVRX1I4bDI5Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqoVfzE4fEVKaRwBfiiVQsui97Fww1Z0p43PbK44fsky2VP56GbqBv xAruFO9ACYM9yuSC20L+d5XFgnuUbpAvJewCWW/dlanOu0UntByBFybS+fKg0Omw xhfoOchqOe434r6uyalsQw25zy6rFZYtkokpZMGjCK97SACdd+4MuCBouDz76fIY ZNxML94gyCqUQP5O+0FGyBvTlfsvISSJEa72czTeEB3G52SZS3Uc2tScd6CXM/WH QK/t3n2lkI2NF1f7DKpeyDONSLy3TbS6bSkl3d47mZot+WP1mcL+D54zFH2J0gRC rhH4WLCfZqAI0W8zswoozd8QEm7NkuWI -----END CERTIFICATE-----Generated at Sat Jun 21 19:10:42 2025 by rpki-client