$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft File: rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json) Hash identifier: GgGwM6t9PK5QDuErvhqJBTw2bm0ePNDdhxHt4hmSMho= Subject key identifier: A3:86:27:8B:03:E9:12:2D:5F:98:DB:E2:49:4B:2B:32:A3:6C:0B:C0 Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF Certificate issuer: /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft Manifest number: F8 Signing time: Sun 15 Jun 2025 04:24:21 +0000 Manifest this update: Sun 15 Jun 2025 04:24:21 +0000 Manifest next update: Sun 22 Jun 2025 04:24:21 +0000 Files and hashes: 1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: Br2v8ijf7Me28eODCBVKpv2Fhd2Fm7j5I5XRUAdbDbs=) 2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF Validity Not Before: Jun 15 04:24:21 2025 GMT Not After : Jun 22 04:24:21 2025 GMT Subject: CN=684e4af5-9573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:a2:57:80:35:7f:f2:d4:d5:ae:76:a9:12: 8e:4b:17:06:9d:df:7f:29:3b:f4:b6:5b:6e:9c:5a: 7f:ed:36:97:74:2f:7e:19:55:10:f9:ae:04:62:f0: d6:95:0e:4a:b8:9f:c7:cb:bd:35:4b:02:49:04:5c: 24:d9:51:bd:d9:c9:16:c9:cc:c5:19:dd:8e:6a:03: 52:ea:80:81:41:bb:03:c6:76:99:85:90:c2:2f:7e: df:ce:55:19:da:9d:8e:09:88:f1:3b:8f:6a:f6:a0: a5:ce:44:77:f4:27:e6:fd:c6:10:f0:55:9a:a3:28: dd:6b:a2:cd:c6:77:46:0a:77:a5:4b:d4:1c:02:42: b5:e5:05:89:69:b6:ba:62:fe:de:d9:48:03:b9:5a: f9:ac:1f:3b:6e:d7:d3:c5:cf:eb:68:f3:44:cb:9d: 38:ce:52:14:d3:bd:53:e5:40:a4:0e:9e:e7:de:51: d2:a9:d5:79:c7:1f:94:dd:8e:26:69:2d:50:7e:90: 42:3e:c4:fb:8a:fc:52:96:f9:ca:95:27:51:13:3a: df:b1:20:f6:90:c7:91:56:fc:5f:b0:df:11:0b:ec: b7:58:c1:2d:24:cc:4a:a8:d7:6d:58:78:3e:54:58: 41:ee:19:9f:0a:83:0a:b1:56:d5:89:71:d6:b1:40: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:86:27:8B:03:E9:12:2D:5F:98:DB:E2:49:4B:2B:32:A3:6C:0B:C0 X509v3 Authority Key Identifier: keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:22:c8:b6:68:7b:ad:e4:20:55:c9:df:d5:42:6e:a7:1a:e4: ab:67:b1:13:96:b7:da:ea:9a:91:d4:b2:13:5f:2b:b5:e9:44: fa:3c:47:f5:96:6d:d3:e2:51:29:c0:bf:b0:c6:2c:76:10:28: 63:71:75:35:4d:74:c0:70:d4:81:3e:b1:5d:0e:e7:37:66:a2: 6e:7f:17:e3:ca:e3:47:97:fc:6a:77:e9:2d:a5:54:5b:74:73: 58:87:30:f3:e7:92:87:31:1b:a4:2c:d2:b3:ac:3e:11:eb:f7: 47:2d:d3:63:ff:9c:5f:e0:c6:6c:b4:36:27:f0:c4:37:29:08: 9d:43:a2:db:b6:5a:d9:19:88:08:23:c8:8f:1f:f9:58:ed:71: 2b:0a:ac:51:4e:9c:22:10:fe:39:f7:4d:30:65:38:42:f9:23: 3a:0d:13:fc:82:a5:8a:3e:84:b3:3f:a7:05:a0:7a:16:0f:a9: 50:67:64:18:c5:ea:e9:7a:fa:ec:18:52:7d:52:4b:07:04:1d: c1:6a:a7:54:64:e1:65:d5:c4:91:bd:bd:99:d6:97:47:0e:63: cc:8e:70:33:08:0c:f7:e6:21:f2:c0:d8:d4:e0:8f:be:9a:15: 8c:d1:70:f8:10:df:fd:b3:1c:88:92:e1:87:55:99:f6:cf:64: 84:18:b9:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz NDYzQjgzQ0YwHhcNMjUwNjE1MDQyNDIxWhcNMjUwNjIyMDQyNDIxWjAYMRYwFAYD VQQDEw02ODRlNGFmNS05NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsqiV4A1f/LU1a52qRKOSxcGnd9/KTv0tltunFp/7TaXdC9+GVUQ+a4EYvDW lQ5KuJ/Hy701SwJJBFwk2VG92ckWyczFGd2OagNS6oCBQbsDxnaZhZDCL37fzlUZ 2p2OCYjxO49q9qClzkR39Cfm/cYQ8FWaoyjda6LNxndGCnelS9QcAkK15QWJaba6 Yv7e2UgDuVr5rB87btfTxc/raPNEy504zlIU071T5UCkDp7n3lHSqdV5xx+U3Y4m aS1QfpBCPsT7ivxSlvnKlSdREzrfsSD2kMeRVvxfsN8RC+y3WMEtJMxKqNdtWHg+ VFhB7hmfCoMKsVbViXHWsUDREwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOGJ4sD 6RItX5jb4klLKzKjbAvAMB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNX Tl9wdVRqSWQ0YlkwWTdnODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoIsi2aHut5CBVyd/VQm6nGuSrZ7ETlrfa6pqR1LITXyu16UT6PEf1 lm3T4lEpwL+wxix2EChjcXU1TXTAcNSBPrFdDuc3ZqJufxfjyuNHl/xqd+ktpVRb dHNYhzDz55KHMRukLNKzrD4R6/dHLdNj/5xf4MZstDYn8MQ3KQidQ6LbtlrZGYgI I8iPH/lY7XErCqxRTpwiEP45900wZThC+SM6DRP8gqWKPoSzP6cFoHoWD6lQZ2QY xerpevrsGFJ9UksHBB3BaqdUZOFl1cSRvb2Z1pdHDmPMjnAzCAz35iHywNjU4I++ mhWM0XD4EN/9sxyIkuGHVZn2z2SEGLkU -----END CERTIFICATE-----Generated at Sun Jun 15 09:50:59 2025 by rpki-client