$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: uRPr0P4ygczHFgHqwQZdzvkiVCN/O7F93o0X83nsAVk= Subject key identifier: DE:F6:E7:0E:19:31:C0:47:DC:3E:03:00:22:74:0C:60:32:73:FC:E9 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 0346 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 033E Signing time: Fri 13 Jun 2025 00:35:01 +0000 Manifest this update: Fri 13 Jun 2025 00:35:00 +0000 Manifest next update: Fri 20 Jun 2025 00:35:00 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: F0qbjtChOt4aZoX2h+lWwX6bQjUJBBlcHNf3Ws9d978=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: iCw79y4BWdxeg4SkApinNCBIqylm75Jz7mdMCrDh0eI=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: fD9tz1Cxj0LH2YQosk7eVSKaAn/WfIdEtafahpCOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Jun 13 00:35:00 2025 GMT Not After : Jun 20 00:35:00 2025 GMT Subject: CN=684b7235-daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:81:02:e5:d7:7f:b7:e5:ba:18:40:96:22: c7:31:5b:91:6a:4c:1c:48:60:fe:8a:b8:cd:a6:21: b8:7e:0c:17:3c:9b:2f:57:f2:13:da:eb:79:d5:d6: 29:ae:8c:86:4f:b5:97:e6:02:23:9b:15:4f:c7:71: 95:48:e9:d3:f4:b7:fd:73:c8:61:7b:62:9e:a8:2a: d2:d9:d9:c6:b2:19:8d:24:3f:a1:63:89:b2:0f:65: ac:4e:d4:cd:5b:3f:b6:ac:4d:4a:95:ac:48:c6:4e: e6:4f:af:e4:b2:5d:70:8e:3c:fb:ce:2e:eb:b8:20: 3c:96:a0:d8:08:d6:69:c7:88:c8:6f:59:7e:46:bb: c1:4b:a2:b5:86:47:aa:fa:b2:80:2d:47:f8:fb:b6: f9:24:88:16:e5:75:5a:8c:f1:5c:39:47:98:41:f6: a3:00:4a:57:d9:07:1c:ea:a0:0e:e6:ec:44:0b:dd: 9b:84:15:52:9b:d4:59:2f:c3:29:5d:37:23:1f:3b: a0:3f:8b:14:5b:23:da:f6:86:0f:ec:69:34:49:19: 1b:3e:af:1d:f6:c4:70:16:26:dc:04:77:dc:53:8d: 1f:42:5c:e0:f9:9e:d3:d1:f5:eb:15:10:36:29:21: aa:79:a8:05:19:5e:59:51:db:09:65:09:05:fa:46: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:E7:0E:19:31:C0:47:DC:3E:03:00:22:74:0C:60:32:73:FC:E9 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0e:fa:00:34:fc:7b:a2:e4:42:9d:46:49:29:47:29:1e:fb: 0c:e1:f5:b9:46:3d:9c:d2:91:bf:8e:94:13:5c:44:6d:a6:15: e3:8a:fd:86:a2:56:b5:ff:d9:75:0a:a1:a2:0b:22:7a:cc:1c: fb:01:e0:c7:a3:00:fb:aa:b3:61:2f:65:e6:e4:6a:c8:29:f0: fd:5d:02:e6:c3:f5:31:7f:e2:6d:a6:05:fc:91:24:0e:40:7e: 9d:09:90:3a:f1:64:a2:aa:dd:e5:88:b2:80:38:16:e1:ff:a8: 86:cd:52:b3:d9:72:6a:fb:fc:a6:ad:b0:d7:ea:95:c4:07:03: d6:da:40:8d:26:25:ce:37:3b:06:14:4a:0d:eb:f2:28:06:8c: 5f:c4:b8:3e:3e:c1:de:f0:31:76:3f:69:0f:ea:fc:a9:ae:b4: cd:13:e2:9d:1d:e3:e5:c4:7b:58:c2:d2:e8:75:5e:65:04:21: 3c:0b:45:81:f2:34:1f:71:35:32:a8:5c:a8:1a:0e:92:cf:59: 8b:c6:99:80:8c:b1:52:8c:49:ac:5b:23:ae:5a:82:59:ea:19: 03:4f:73:19:2a:e1:46:f5:0a:f4:6a:f2:65:98:e6:57:24:5b: 03:0c:ca:d3:59:d9:69:48:7a:4c:8b:e0:3a:c2:91:88:c2:25: 65:dd:3b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjUwNjEzMDAzNTAwWhcNMjUwNjIwMDAzNTAwWjAYMRYwFAYD VQQDEw02ODRiNzIzNS1kYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hyBAuXXf7fluhhAliLHMVuRakwcSGD+irjNpiG4fgwXPJsvV/IT2ut51dYp royGT7WX5gIjmxVPx3GVSOnT9Lf9c8hhe2KeqCrS2dnGshmNJD+hY4myD2WsTtTN Wz+2rE1KlaxIxk7mT6/ksl1wjjz7zi7ruCA8lqDYCNZpx4jIb1l+RrvBS6K1hkeq +rKALUf4+7b5JIgW5XVajPFcOUeYQfajAEpX2Qcc6qAO5uxEC92bhBVSm9RZL8Mp XTcjHzugP4sUWyPa9oYP7Gk0SRkbPq8d9sRwFibcBHfcU40fQlzg+Z7T0fXrFRA2 KSGqeagFGV5ZUdsJZQkF+kZxeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN725w4Z McBH3D4DACJ0DGAyc/zpMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6DvoANPx7ouRCnUZJKUcpHvsM4fW5Rj2c0pG/jpQTXERtphXjiv2G ola1/9l1CqGiCyJ6zBz7AeDHowD7qrNhL2Xm5GrIKfD9XQLmw/Uxf+JtpgX8kSQO QH6dCZA68WSiqt3liLKAOBbh/6iGzVKz2XJq+/ymrbDX6pXEBwPW2kCNJiXONzsG FEoN6/IoBoxfxLg+PsHe8DF2P2kP6vyprrTNE+KdHePlxHtYwtLodV5lBCE8C0WB 8jQfcTUyqFyoGg6Sz1mLxpmAjLFSjEmsWyOuWoJZ6hkDT3MZKuFG9Qr0avJlmOZX JFsDDMrTWdlpSHpMi+A6wpGIwiVl3TsR -----END CERTIFICATE-----Generated at Sat Jun 14 19:15:49 2025 by rpki-client