$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: OESP1UXqiSJymbc+aZkZAGuGwcU0wclRInVaIT804pA= Subject key identifier: 5F:BD:29:FE:60:2E:1B:F9:FC:F1:D4:90:47:1E:64:7E:B1:62:B5:F7 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 174A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16B1 Signing time: Mon 16 Jun 2025 16:39:59 +0000 Manifest this update: Mon 16 Jun 2025 16:39:59 +0000 Manifest next update: Mon 23 Jun 2025 16:39:59 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: FPUlJ8jBxxNsXJ3oXKjIeZM9f3FSEMadka1A7zT4DDY=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: g4ujWaFHIUcsfNfe71CuG/s3pHzpyQSa/LcK8feuuHQ=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 6: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5962 (0x174a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Jun 16 16:39:59 2025 GMT Not After : Jun 23 16:39:59 2025 GMT Subject: CN=685048df-82ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:e5:67:6c:e6:62:40:10:7a:67:1a:58:0a: 5e:42:17:60:44:59:f0:f2:34:2d:c5:f7:4d:17:9b: d5:0d:db:04:86:f4:3d:3a:40:4e:0d:f0:69:a4:87: cd:a1:2e:dd:6b:02:9b:63:78:3f:01:e8:7e:7d:5c: 5b:73:43:2f:cc:41:38:cb:e7:9b:df:fe:69:df:4c: 0d:16:ff:04:c5:a5:f7:88:a3:a9:cb:f3:a5:05:85: c1:09:df:8d:11:f4:ad:e9:8c:03:e8:ab:46:51:4a: 47:b6:80:d4:4a:c6:b3:69:ae:2b:01:3e:86:95:ef: 06:c3:b5:2b:f3:c0:8d:ea:32:f7:c6:f2:6e:0a:fb: b9:60:df:65:93:c6:22:69:dc:52:44:b8:8a:95:63: a2:69:15:47:8e:e2:4a:f4:13:8d:b2:65:a5:b0:3a: 28:14:17:30:c9:58:aa:cd:88:1e:44:9d:2e:1b:40: 31:a9:75:30:c0:8f:23:d4:1a:28:a1:b5:ec:a7:46: ab:3c:c0:6b:23:19:10:d0:78:35:96:45:50:fd:f9: 50:e4:88:31:f6:d3:87:1b:c9:32:2b:68:ee:0c:1b: 5d:a9:ed:90:ca:7b:f3:3f:d0:c9:6c:6b:a1:3c:ac: b8:95:23:98:c7:ea:09:b6:c4:b4:68:66:83:a6:ad: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BD:29:FE:60:2E:1B:F9:FC:F1:D4:90:47:1E:64:7E:B1:62:B5:F7 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c8:9b:f4:f8:04:b8:6b:44:97:66:93:03:a9:3d:c4:7a:b9: 5e:74:37:20:2e:74:83:9d:52:ab:5b:20:2c:7a:a0:5d:27:81: be:ee:ae:e8:76:95:c6:03:a6:57:16:b1:d7:d1:df:02:4f:95: aa:19:01:1b:2c:e4:26:21:ed:0d:da:23:02:c3:78:3e:c6:f7: 26:e6:89:68:63:0a:b2:01:fb:82:a7:38:26:fb:e6:5b:45:8e: d6:ae:77:7a:e4:c5:82:d8:65:08:07:7a:1a:97:b3:63:da:30: 87:c7:1d:45:cd:0c:ef:c5:96:7f:d5:ed:b6:5a:0e:1c:d0:c6: 9b:cc:95:3a:a8:05:63:dc:63:82:d0:cd:19:bc:f8:80:28:37: 48:7f:07:9c:dd:4c:7e:02:74:9c:65:eb:72:0d:7d:04:8d:d0: 58:5b:aa:27:d4:2e:46:f5:32:cd:e8:67:c6:8f:b3:21:57:31: 98:22:20:86:b0:05:f6:eb:4c:3c:1f:6e:24:34:4e:b6:0a:69: db:d7:c5:ae:5f:49:a8:34:c9:17:cd:be:5d:7d:ff:61:af:02: 4a:48:c7:59:e3:a4:41:57:2f:e0:0a:3e:f0:33:2e:d1:21:30: 51:20:94:19:51:da:e4:13:e9:3e:cc:a7:88:37:45:56:c2:0b: df:d6:a5:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwNjE2MTYzOTU5WhcNMjUwNjIzMTYzOTU5WjAYMRYwFAYD VQQDEw02ODUwNDhkZi04MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtajlZ2zmYkAQemcaWApeQhdgRFnw8jQtxfdNF5vVDdsEhvQ9OkBODfBppIfN oS7dawKbY3g/Aeh+fVxbc0MvzEE4y+eb3/5p30wNFv8ExaX3iKOpy/OlBYXBCd+N EfSt6YwD6KtGUUpHtoDUSsazaa4rAT6Gle8Gw7Ur88CN6jL3xvJuCvu5YN9lk8Yi adxSRLiKlWOiaRVHjuJK9BONsmWlsDooFBcwyViqzYgeRJ0uG0AxqXUwwI8j1Boo obXsp0arPMBrIxkQ0Hg1lkVQ/flQ5Igx9tOHG8kyK2juDBtdqe2QynvzP9DJbGuh PKy4lSOYx+oJtsS0aGaDpq2xHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+9Kf5g Lhv5/PHUkEceZH6xYrX3MB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBByJv0+AS4a0SXZpMDqT3EerledDcgLnSDnVKrWyAseqBdJ4G+7q7o dpXGA6ZXFrHX0d8CT5WqGQEbLOQmIe0N2iMCw3g+xvcm5oloYwqyAfuCpzgm++Zb RY7Wrnd65MWC2GUIB3oal7Nj2jCHxx1FzQzvxZZ/1e22Wg4c0MabzJU6qAVj3GOC 0M0ZvPiAKDdIfwec3Ux+AnScZetyDX0EjdBYW6on1C5G9TLN6GfGj7MhVzGYIiCG sAX260w8H24kNE62Cmnb18WuX0moNMkXzb5dff9hrwJKSMdZ46RBVy/gCj7wMy7R ITBRIJQZUdrkE+k+zKeIN0VWwgvf1qVX -----END CERTIFICATE-----Generated at Tue Jun 17 01:27:20 2025 by rpki-client