$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: mhToWyRrION+PJVWY6U4mBvI6OAmjGsZDhezzf2x9e4= Subject key identifier: E0:E9:8A:6C:EC:BD:5D:8C:A1:33:83:B7:82:4F:7D:D1:B3:38:17:85 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0B57 Signing time: Fri 20 Jun 2025 19:03:23 +0000 Manifest this update: Fri 20 Jun 2025 19:03:23 +0000 Manifest next update: Fri 27 Jun 2025 19:03:23 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: FKNXp0OQZukW4N6r/WOEDjBCB/3BL1PzgTDw1+CsSAk=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Jun 20 19:03:23 2025 GMT Not After : Jun 27 19:03:23 2025 GMT Subject: CN=6855b07b-6715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:24:76:04:c8:06:da:20:a3:be:c9:18:14: 3e:08:48:e5:76:61:52:65:de:60:b2:bd:6c:46:29: e7:46:11:9e:c5:a0:8e:94:6f:58:63:b5:9c:84:78: 4c:b6:4f:62:8a:83:27:c5:31:bd:57:fe:ce:3d:41: ac:6d:b8:6e:c8:96:86:82:4a:53:35:25:e6:71:29: 3e:ba:6f:82:4e:88:f3:ca:80:a1:98:8f:88:71:28: 5b:bf:b4:3a:ef:0d:33:b2:b5:e6:bd:9d:e5:a9:78: 28:2f:61:af:f2:b4:58:61:4d:3d:9c:47:ca:61:c4: 55:95:7e:fb:a2:bb:68:b4:c7:1a:76:18:f3:65:d7: f3:83:20:77:32:d2:b4:3a:3b:a6:e2:66:9e:9f:53: c9:24:52:ff:aa:8d:b5:ee:11:34:94:4f:63:84:74: a6:64:92:b7:39:a9:41:6f:5a:a6:91:c5:83:58:e1: df:af:a4:45:d9:3f:3e:05:e0:69:c9:65:2d:0e:c9: c6:3f:d7:c9:98:a1:ae:e1:5f:d1:01:c4:86:bd:a2: cb:ad:bf:38:60:89:6b:6c:01:49:8e:0b:d7:08:9d: 1a:c5:19:56:40:d5:73:a4:dd:aa:27:df:b4:35:f2: 7f:f1:a2:ba:3a:ce:fb:be:0e:82:98:33:a2:c7:cf: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:8A:6C:EC:BD:5D:8C:A1:33:83:B7:82:4F:7D:D1:B3:38:17:85 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:07:a5:d0:45:d2:db:d8:54:28:b6:31:73:38:3c:fc:39:c0: 5e:5d:85:3b:87:b9:fc:8c:e7:a7:b9:72:81:ac:80:cf:4f:e2: 60:ca:aa:96:bf:90:43:19:d5:d2:88:4f:1d:99:bf:95:be:57: 6b:07:f1:0d:90:64:d7:28:72:e2:21:a3:4e:d9:7e:e2:75:ea: 4b:e1:82:7e:8b:be:fe:10:2d:47:07:bf:e5:60:dd:72:4e:f4: 9b:a1:10:4a:28:66:51:d1:a6:8e:4f:2e:86:57:bf:ff:4c:c3: d6:62:15:2e:b1:b5:61:70:52:89:2f:86:10:8a:ef:ae:1f:29: ed:08:56:b1:5e:f2:87:99:ed:2d:70:58:0a:f6:15:f6:a0:1d: 7f:ab:8d:19:92:35:2c:85:b3:c8:9e:58:c1:84:1c:ec:23:52: ad:fe:a4:b6:55:eb:41:18:73:e4:a6:fd:16:30:c7:b9:4c:ce: 52:c5:ad:40:6c:b4:9f:fc:5c:b1:6c:39:de:00:bc:7a:a7:5e: ea:09:11:d2:36:bd:c3:a7:95:c5:ae:a7:02:6c:76:0d:b7:33: 82:0a:e3:69:2c:d7:41:e0:a4:42:6f:a2:2d:3e:af:38:b4:3d: 03:1d:40:4d:f8:84:d9:8b:8c:66:da:6b:48:88:8e:1b:ec:ab: 90:f5:8b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjUwNjIwMTkwMzIzWhcNMjUwNjI3MTkwMzIzWjAYMRYwFAYD VQQDEw02ODU1YjA3Yi02NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGokdgTIBtogo77JGBQ+CEjldmFSZd5gsr1sRinnRhGexaCOlG9YY7WchHhM tk9iioMnxTG9V/7OPUGsbbhuyJaGgkpTNSXmcSk+um+CTojzyoChmI+IcShbv7Q6 7w0zsrXmvZ3lqXgoL2Gv8rRYYU09nEfKYcRVlX77ortotMcadhjzZdfzgyB3MtK0 Ojum4maen1PJJFL/qo217hE0lE9jhHSmZJK3OalBb1qmkcWDWOHfr6RF2T8+BeBp yWUtDsnGP9fJmKGu4V/RAcSGvaLLrb84YIlrbAFJjgvXCJ0axRlWQNVzpN2qJ9+0 NfJ/8aK6Os77vg6CmDOix89S7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODpimzs vV2MoTODt4JPfdGzOBeFMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfB6XQRdLb2FQotjFzODz8OcBeXYU7h7n8jOenuXKBrIDPT+JgyqqW v5BDGdXSiE8dmb+VvldrB/ENkGTXKHLiIaNO2X7idepL4YJ+i77+EC1HB7/lYN1y TvSboRBKKGZR0aaOTy6GV7//TMPWYhUusbVhcFKJL4YQiu+uHyntCFaxXvKHme0t cFgK9hX2oB1/q40ZkjUshbPInljBhBzsI1Kt/qS2VetBGHPkpv0WMMe5TM5Sxa1A bLSf/FyxbDneALx6p17qCRHSNr3Dp5XFrqcCbHYNtzOCCuNpLNdB4KRCb6ItPq84 tD0DHUBN+ITZi4xm2mtIiI4b7KuQ9Ytb -----END CERTIFICATE-----Generated at Sun Jun 22 10:35:51 2025 by rpki-client