$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: h2/7Mznm3d8wiEh8PHgKVIrMAWEgndyxalrrfuHCwzQ= Subject key identifier: 0E:C6:36:66:D0:46:F3:8A:72:F7:03:DD:0A:3D:0E:3A:D1:FB:88:1E Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 045B Signing time: Fri 20 Jun 2025 23:58:38 +0000 Manifest this update: Fri 20 Jun 2025 23:58:37 +0000 Manifest next update: Fri 27 Jun 2025 23:58:37 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: 05Gv6v0irxAaWSNoULeFICp/2aBmD/p4zRqluV+tDdY=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 264WZ0f5FSYRLcE55bzQKj/lfReOWZZQL9W6/+XrL50=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: vRD5gvetOl4M72g0Ox/17wn2gRRkZ+MKIO7MmLjvLgg=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: K/T3wX+b6EJFTbJdX5T/49+xTnSJoc5fKtBw2NmgoBw=) 5: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: MrOehOXflQUhc9W+FdP7kViEOIm0zhC3RKvz9jpM7pY=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 9hr8e6Q+evY4tAAVgrktH6R5E0K57yFV9RXeFdQNtLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 23:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Jun 20 23:58:37 2025 GMT Not After : Jun 27 23:58:37 2025 GMT Subject: CN=6855f5ae-3bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:64:8e:29:2d:6a:31:4a:96:21:96:69:c2: 9c:0f:f6:aa:24:4b:48:0c:18:96:d4:ff:18:5c:bc: 96:57:bc:68:ad:e6:42:b5:39:97:19:bd:94:42:5a: 89:68:f1:2c:8a:b3:b4:8f:9c:14:c0:8f:17:4b:4f: 1e:84:d1:41:a0:87:57:1e:f1:7e:5d:d2:ce:16:7e: 26:4e:65:81:14:f7:12:f7:88:38:41:a3:f0:13:18: bc:35:17:4f:c7:ee:64:98:95:0a:3d:14:4c:4d:50: 3d:a6:83:05:e0:7e:47:6b:9f:80:93:86:d6:cf:84: 80:ef:c5:71:d9:9b:4c:17:41:91:4c:cc:16:93:36: 29:c2:28:06:8b:a6:67:1c:4d:10:e6:f4:27:c2:33: a6:92:9c:48:e2:e8:b5:ee:a5:7f:6e:34:fc:a7:02: e2:15:7b:51:df:2e:47:3a:a5:f0:85:c6:bb:8f:c6: d8:1a:e0:d9:76:39:7d:d4:e5:13:21:8c:5a:f6:49: 06:72:a8:24:b9:de:dc:55:ec:e2:85:9f:1e:18:1d: db:8c:25:c2:79:b2:5c:fa:1d:1f:b3:72:49:52:2d: 3d:32:74:9a:29:78:05:a6:f3:c0:ca:cd:03:74:ae: 76:03:3f:c6:d4:c3:ee:78:3f:85:1c:a9:6f:9a:cb: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C6:36:66:D0:46:F3:8A:72:F7:03:DD:0A:3D:0E:3A:D1:FB:88:1E X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4c:a8:40:10:83:75:4c:28:03:65:e8:10:16:e2:c8:d2:10: 0a:1d:cb:ad:f7:da:5b:8d:06:9e:44:52:19:2f:36:19:2d:7e: e1:65:75:44:7f:61:c7:cd:47:d1:0a:0e:01:5c:9b:8f:21:98: 03:8d:9e:31:2e:8b:37:d8:25:e4:6b:53:c9:46:8f:99:b1:d4: 67:5d:0d:0f:c3:ac:97:7b:c1:6d:e0:47:12:f1:28:f4:3d:7e: c8:83:11:5f:75:31:c4:d2:a0:a1:05:85:ae:31:93:13:95:fa: 02:d9:f3:90:df:5b:24:e6:68:b9:d5:4e:73:10:8d:ad:5c:7e: 49:5b:27:0f:4e:ae:b6:c5:e0:c1:75:7d:45:37:75:2c:8b:9c: b7:b4:0e:4e:ae:99:a9:aa:c3:7d:4b:8e:87:99:22:08:5d:29: f7:e2:e7:56:35:0f:76:85:ee:56:b2:40:bb:5f:65:f9:0b:ca: 88:7b:a9:01:70:64:2f:84:70:33:e1:f8:15:5c:97:61:35:88: 4c:e1:2b:87:a8:63:4b:db:92:fe:98:7c:73:0f:d1:88:2d:21: e3:ef:4f:b4:40:e4:d2:74:87:8c:7f:89:bc:5b:f3:da:94:cf: 0b:30:2f:11:91:78:4e:1f:86:30:51:43:79:f7:7e:01:6c:ed: 90:96:1f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjUwNjIwMjM1ODM3WhcNMjUwNjI3MjM1ODM3WjAYMRYwFAYD VQQDEw02ODU1ZjVhZS0zYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ChkjiktajFKliGWacKcD/aqJEtIDBiW1P8YXLyWV7xoreZCtTmXGb2UQlqJ aPEsirO0j5wUwI8XS08ehNFBoIdXHvF+XdLOFn4mTmWBFPcS94g4QaPwExi8NRdP x+5kmJUKPRRMTVA9poMF4H5Ha5+Ak4bWz4SA78Vx2ZtMF0GRTMwWkzYpwigGi6Zn HE0Q5vQnwjOmkpxI4ui17qV/bjT8pwLiFXtR3y5HOqXwhca7j8bYGuDZdjl91OUT IYxa9kkGcqgkud7cVezihZ8eGB3bjCXCebJc+h0fs3JJUi09MnSaKXgFpvPAys0D dK52Az/G1MPueD+FHKlvmsvTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7GNmbQ RvOKcvcD3Qo9DjrR+4geMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPTKhAEIN1TCgDZegQFuLI0hAKHcut99pbjQaeRFIZLzYZLX7hZXVE f2HHzUfRCg4BXJuPIZgDjZ4xLos32CXka1PJRo+ZsdRnXQ0Pw6yXe8Ft4EcS8Sj0 PX7IgxFfdTHE0qChBYWuMZMTlfoC2fOQ31sk5mi51U5zEI2tXH5JWycPTq62xeDB dX1FN3Usi5y3tA5OrpmpqsN9S46HmSIIXSn34udWNQ92he5WskC7X2X5C8qIe6kB cGQvhHAz4fgVXJdhNYhM4SuHqGNL25L+mHxzD9GILSHj70+0QOTSdIeMf4m8W/Pa lM8LMC8RkXhOH4YwUUN5934BbO2Qlh8g -----END CERTIFICATE-----Generated at Sat Jun 21 19:15:13 2025 by rpki-client