$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: R3AL9SyEmfwVZ9mtku9H0aq5yQVaX6xxh/94uBejkwc= Subject key identifier: 5D:29:28:AA:EC:CA:03:19:68:E4:BC:32:46:26:B5:E0:73:3E:04:F1 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 035D Signing time: Fri 13 Jun 2025 00:35:09 +0000 Manifest this update: Fri 13 Jun 2025 00:35:08 +0000 Manifest next update: Fri 20 Jun 2025 00:35:08 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: xJg7O6p6Cv+ONeJN70w00Y56K2AukNt74vuLv3lfLJE=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 4: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: 5rm3oqRl26penC4ZlBUixk7pYEojJ8/qGcU/gCHvkcY=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Jun 13 00:35:08 2025 GMT Not After : Jun 20 00:35:08 2025 GMT Subject: CN=684b723d-571c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:c9:b4:b4:28:d4:26:1d:32:7e:26:83:44: 5c:26:28:88:25:5f:fb:6d:95:1c:60:0e:7c:45:82: ea:8f:8b:31:ce:52:11:53:08:fd:a2:c6:41:52:c1: 35:32:f9:6f:99:e1:85:ae:2a:16:0e:80:e2:c6:8a: 99:03:c3:fd:6f:87:98:a6:76:60:5f:82:49:5d:f5: bf:40:8d:63:58:51:21:21:2e:9e:1b:89:c7:c7:b4: 68:34:fb:83:f5:26:fe:af:15:87:18:4a:99:5f:b4: d5:b9:49:25:63:30:ba:2b:df:48:46:c3:1f:4b:81: 1c:b8:ae:66:48:3a:a5:ce:c4:8f:34:e0:3b:68:22: 4e:fa:15:df:be:af:62:98:b3:ba:7b:9f:53:39:c4: a8:aa:de:71:d1:d6:92:e2:c5:0f:cf:36:1f:bb:97: f5:d7:b8:35:54:c0:e5:7d:43:f7:4e:e3:5e:43:04: 12:21:81:85:1d:a6:54:28:88:93:7a:b9:b9:73:91: 99:e9:8b:a9:13:07:c8:a8:2f:f0:27:fb:18:c9:00: 94:f1:e6:54:a3:be:ca:f0:b1:ab:f5:17:29:5e:ad: 88:8c:9a:61:20:b6:39:ab:0e:7c:bb:bf:01:bc:3f: d6:77:b4:2a:fd:73:69:52:62:f0:06:c3:bb:e9:f4: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:28:AA:EC:CA:03:19:68:E4:BC:32:46:26:B5:E0:73:3E:04:F1 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c1:df:46:32:0f:34:54:06:18:39:9f:37:53:32:ab:11:e3: 78:c4:8e:f9:d7:29:27:92:9f:2f:11:35:53:8e:4e:25:0c:33: 85:ca:e5:ac:6b:e7:3e:cd:bd:4a:1e:dd:89:7e:ab:01:13:1c: 08:63:a5:e8:a1:fe:db:d9:ca:9f:a3:c8:b7:cb:ab:c6:dc:85: 3c:47:90:8d:35:8d:a8:7a:45:5b:9f:8d:c1:16:74:c6:45:ec: 88:fb:63:4f:8e:ee:49:fd:27:20:6e:64:cc:8b:b4:7d:79:ea: 03:d8:1e:a1:1e:f5:a4:c0:18:95:33:40:b5:21:13:bc:3d:3d: aa:bd:d2:0c:9f:09:e8:9f:5f:2e:ac:02:4f:df:68:12:dd:70: 2e:14:09:b2:43:e5:11:65:a8:7c:b9:96:bd:52:0f:d5:b5:b2: 08:76:2b:e3:bc:09:5d:0f:13:96:4f:79:7e:03:89:e3:3e:c1: 2c:7a:da:69:00:90:dd:f5:53:4d:92:49:15:3f:50:ae:df:8d: 51:ae:ef:19:bf:ad:30:63:fe:6c:e0:8c:4b:62:ff:73:e3:35: de:07:68:e6:bc:30:92:d1:c1:bc:f6:92:6b:ef:e9:e4:70:44: 5f:d6:fb:97:df:c8:7f:ba:e6:7d:82:16:47:a7:fc:54:d9:0f: f6:e0:b9:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNjEzMDAzNTA4WhcNMjUwNjIwMDAzNTA4WjAYMRYwFAYD VQQDEw02ODRiNzIzZC01NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTvJtLQo1CYdMn4mg0RcJiiIJV/7bZUcYA58RYLqj4sxzlIRUwj9osZBUsE1 MvlvmeGFrioWDoDixoqZA8P9b4eYpnZgX4JJXfW/QI1jWFEhIS6eG4nHx7RoNPuD 9Sb+rxWHGEqZX7TVuUklYzC6K99IRsMfS4EcuK5mSDqlzsSPNOA7aCJO+hXfvq9i mLO6e59TOcSoqt5x0daS4sUPzzYfu5f117g1VMDlfUP3TuNeQwQSIYGFHaZUKIiT erm5c5GZ6YupEwfIqC/wJ/sYyQCU8eZUo77K8LGr9RcpXq2IjJphILY5qw58u78B vD/Wd7Qq/XNpUmLwBsO76fSi4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0pKKrs ygMZaOS8MkYmteBzPgTxMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4wd9GMg80VAYYOZ83UzKrEeN4xI751yknkp8vETVTjk4lDDOFyuWs a+c+zb1KHt2JfqsBExwIY6Xoof7b2cqfo8i3y6vG3IU8R5CNNY2oekVbn43BFnTG ReyI+2NPju5J/ScgbmTMi7R9eeoD2B6hHvWkwBiVM0C1IRO8PT2qvdIMnwnon18u rAJP32gS3XAuFAmyQ+URZah8uZa9Ug/VtbIIdivjvAldDxOWT3l+A4njPsEsetpp AJDd9VNNkkkVP1Cu341Rru8Zv60wY/5s4IxLYv9z4zXeB2jmvDCS0cG89pJr7+nk cERf1vuX38h/uuZ9ghZHp/xU2Q/24LlG -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:35 2025 by rpki-client