$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: n/bD5pE1KC994QkxzRgp5WJPGIVakCyVlP8fVyPtsWI= Subject key identifier: 3A:B3:23:1D:F1:9A:E1:19:92:83:E5:AE:10:5E:00:E3:14:D1:2C:C5 Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 01EA Signing time: Sun 15 Jun 2025 01:51:40 +0000 Manifest this update: Sun 15 Jun 2025 01:51:40 +0000 Manifest next update: Sun 22 Jun 2025 01:51:40 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: mgxD6Eo6y6T9pXLnpPDDheNpcFkhweVLS48kSGpreHI=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Jun 15 01:51:40 2025 GMT Not After : Jun 22 01:51:40 2025 GMT Subject: CN=684e272c-ffa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:68:22:53:f6:93:48:87:95:eb:61:dd:26:c6: eb:08:76:bf:41:13:c4:5d:87:f2:c3:c8:9a:45:5d: 5c:a6:21:7d:f1:7f:74:0e:eb:70:70:61:98:12:9d: 90:03:5a:82:17:01:af:76:b7:63:7e:e5:18:d2:6d: 1a:8a:9a:26:af:b0:46:22:fd:20:dc:5b:e5:09:77: 94:5b:75:02:32:67:7d:0e:73:ec:b0:cd:59:25:12: 54:28:79:4e:13:ea:98:e2:72:22:c9:12:7b:e7:18: a1:c5:5f:65:c5:59:3f:ec:6d:e5:43:b5:76:19:46: c0:05:e8:e3:a0:ff:50:8e:a4:5f:8b:b3:81:ef:01: 3e:32:02:4b:c7:5e:dd:ee:72:31:6d:de:c3:84:f0: 6a:fa:4b:af:9e:64:64:24:36:3b:45:af:b9:7d:44: c8:04:5b:2b:04:97:63:6c:62:a2:79:48:cb:0e:65: 61:a4:4e:e5:e5:dd:e9:a2:a8:a8:4d:86:e3:92:24: 9e:45:46:37:c7:89:d1:ce:bf:2a:38:18:25:7e:5f: 14:f9:1d:1f:25:49:d5:fb:d6:29:42:3c:79:c4:89: 40:ed:aa:a1:df:b5:9d:ac:a3:14:44:1c:79:ca:db: 89:d3:83:1b:87:09:40:44:ff:9a:79:9b:82:aa:31: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:23:1D:F1:9A:E1:19:92:83:E5:AE:10:5E:00:E3:14:D1:2C:C5 X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:98:05:c8:2e:6e:cb:38:88:5a:4c:5c:56:8a:55:39:73:19: 3b:b0:aa:e5:a4:86:b7:ae:2c:b9:db:38:0a:0f:2c:4f:22:c9: f1:8f:eb:f8:75:bd:14:bb:96:05:1f:9f:78:13:8b:ca:87:1c: 64:56:7c:c7:3f:53:1c:3a:39:20:6e:53:f0:2b:61:c0:dd:6f: f3:89:6b:19:88:0b:e6:59:7a:1b:2a:09:d9:0c:38:51:cf:9b: d6:e0:cf:c8:c6:27:35:b8:8a:b4:6f:3c:ea:91:9f:53:51:f3: c0:72:63:23:dd:1b:24:27:e6:b4:7e:86:4f:0f:25:54:56:2a: 6a:e1:16:39:b1:d4:3d:58:a2:c5:90:5d:1a:7d:6a:4c:c9:63: e7:8e:ab:3d:30:e3:77:15:3b:50:84:ea:a6:5c:10:0e:45:16: 2b:dc:e5:12:07:b3:be:8f:11:22:94:65:7c:9f:b1:ba:21:97: 72:5b:3a:d1:e4:bc:c6:79:ef:2a:54:05:d8:c4:d5:7b:c8:be: 31:54:83:df:aa:ba:c2:80:ba:95:de:ff:44:57:52:9c:f4:14: 6d:37:d8:b1:36:0a:ee:52:92:49:b6:8e:c3:de:9d:1d:8a:90: 05:31:06:da:61:81:af:a4:40:c6:60:12:7e:05:f5:f6:15:2f: e2:2d:d7:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUwNjE1MDE1MTQwWhcNMjUwNjIyMDE1MTQwWjAYMRYwFAYD VQQDEw02ODRlMjcyYy1mZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02giU/aTSIeV62HdJsbrCHa/QRPEXYfyw8iaRV1cpiF98X90DutwcGGYEp2Q A1qCFwGvdrdjfuUY0m0aipomr7BGIv0g3FvlCXeUW3UCMmd9DnPssM1ZJRJUKHlO E+qY4nIiyRJ75xihxV9lxVk/7G3lQ7V2GUbABejjoP9QjqRfi7OB7wE+MgJLx17d 7nIxbd7DhPBq+kuvnmRkJDY7Ra+5fUTIBFsrBJdjbGKieUjLDmVhpE7l5d3poqio TYbjkiSeRUY3x4nRzr8qOBglfl8U+R0fJUnV+9YpQjx5xIlA7aqh37WdrKMURBx5 ytuJ04MbhwlARP+aeZuCqjEZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqzIx3x muEZkoPlrhBeAOMU0SzFMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrmAXILm7LOIhaTFxWilU5cxk7sKrlpIa3riy52zgKDyxPIsnxj+v4 db0Uu5YFH594E4vKhxxkVnzHP1McOjkgblPwK2HA3W/ziWsZiAvmWXobKgnZDDhR z5vW4M/Ixic1uIq0bzzqkZ9TUfPAcmMj3RskJ+a0foZPDyVUVipq4RY5sdQ9WKLF kF0afWpMyWPnjqs9MON3FTtQhOqmXBAORRYr3OUSB7O+jxEilGV8n7G6IZdyWzrR 5LzGee8qVAXYxNV7yL4xVIPfqrrCgLqV3v9EV1Kc9BRtN9ixNgruUpJJto7D3p0d ipAFMQbaYYGvpEDGYBJ+BfX2FS/iLdca -----END CERTIFICATE-----Generated at Mon Jun 16 16:42:31 2025 by rpki-client