$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: MZd/F0ShUwf7TmgHPM53wVmYBPCUnJqRZ0PnyWDTfdM= Subject key identifier: 13:D2:E2:C0:0C:43:45:28:02:00:78:48:1A:BA:B6:CD:1C:1A:BB:8C Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0F14 Signing time: Sat 14 Jun 2025 21:10:20 +0000 Manifest this update: Sat 14 Jun 2025 21:10:19 +0000 Manifest next update: Sat 21 Jun 2025 21:10:19 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: UqPUIrYWkXrjx5Bndpr1sF41T+qq0RG87Lpb7YDMA0w=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Jun 14 21:10:19 2025 GMT Not After : Jun 21 21:10:19 2025 GMT Subject: CN=684de53c-0e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:9d:81:ec:39:21:da:b0:71:78:45:4b:03: a9:69:fb:33:ab:88:48:84:95:55:9a:36:1f:8b:dd: f9:74:28:f9:3d:0b:c1:f1:05:5c:39:50:83:b6:23: 13:9e:6d:d1:ea:c0:d0:f0:4f:8b:d1:f6:9c:8a:2f: 82:d1:f4:9f:55:27:eb:0b:52:5d:59:aa:57:11:ec: 30:5d:cc:f8:f5:a6:ce:60:cc:24:e7:f3:0f:24:0d: 62:5e:3d:0a:70:f3:73:cd:ab:f9:06:a2:4a:51:b2: 8b:de:c5:f8:9d:f2:5e:1f:00:d3:81:5f:c9:d4:17: d9:9d:dd:82:10:63:6e:a0:4c:85:09:80:eb:85:15: a7:84:1e:bf:72:c0:f1:1c:4d:8e:1d:f5:bf:2e:40: 39:e2:95:75:6b:46:ec:01:cc:12:bb:a3:e1:5d:5f: 5f:d1:8f:46:a4:6c:6d:4f:86:c7:e3:b0:00:5d:08: 22:00:b2:23:99:b9:44:ca:e5:0a:21:26:a0:66:0b: 0f:b1:2a:76:49:a1:9b:fc:a3:7c:7b:7d:72:a8:d2: 18:87:0c:de:d6:d9:41:5b:67:88:e0:5d:c3:4d:09: 0b:12:3f:62:3a:8d:96:a2:9e:34:22:8e:b8:84:e1: c9:3f:5e:1a:6f:41:2c:db:a5:e0:da:5a:20:82:79: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:E2:C0:0C:43:45:28:02:00:78:48:1A:BA:B6:CD:1C:1A:BB:8C X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c4:be:8e:46:00:df:6f:68:b2:a9:d9:1f:57:90:1c:12:c6: 34:9a:28:e0:62:0c:0d:c7:db:5e:4c:81:28:d4:8a:04:06:8c: ce:ac:60:b0:ff:3d:97:e5:9b:80:15:51:f7:d4:27:3d:85:c2: c9:40:df:3c:bb:ad:0f:9e:d9:1d:40:42:5a:42:46:ad:f6:eb: 13:50:6f:0b:0b:88:0a:47:34:06:e2:7a:88:1c:e4:85:3f:ea: 08:ef:69:97:c6:31:45:b4:34:3c:b6:c2:72:06:da:05:75:33: 0f:d6:54:1d:94:4d:88:4b:21:d2:2c:c4:87:21:ab:b4:f0:32: 7a:70:30:c5:e9:3d:eb:d8:19:14:88:d4:73:ac:c2:75:69:3a: 62:31:76:65:97:4b:3a:60:59:1f:76:a6:c8:fc:19:f1:47:fc: 80:dd:68:b7:aa:5b:ca:37:66:48:0d:34:96:1b:bd:f2:76:b1: 20:bd:06:e5:59:77:40:b9:b7:9e:65:8e:c2:2b:52:58:32:79: a6:a3:2f:2e:d4:65:8c:c9:0f:a8:14:ab:6a:c3:7c:69:fe:ae: 86:2c:d0:2e:81:a5:40:8d:02:0b:c4:5d:94:e8:f4:b7:f6:30: 43:f0:d8:0e:22:f4:c4:33:0f:bc:11:4a:19:1b:d0:76:54:0b: 49:10:8a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjUwNjE0MjExMDE5WhcNMjUwNjIxMjExMDE5WjAYMRYwFAYD VQQDEw02ODRkZTUzYy0wZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhWdgew5IdqwcXhFSwOpafszq4hIhJVVmjYfi935dCj5PQvB8QVcOVCDtiMT nm3R6sDQ8E+L0facii+C0fSfVSfrC1JdWapXEewwXcz49abOYMwk5/MPJA1iXj0K cPNzzav5BqJKUbKL3sX4nfJeHwDTgV/J1BfZnd2CEGNuoEyFCYDrhRWnhB6/csDx HE2OHfW/LkA54pV1a0bsAcwSu6PhXV9f0Y9GpGxtT4bH47AAXQgiALIjmblEyuUK ISagZgsPsSp2SaGb/KN8e31yqNIYhwze1tlBW2eI4F3DTQkLEj9iOo2Wop40Io64 hOHJP14ab0Es26Xg2loggnlaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPS4sAM Q0UoAgB4SBq6ts0cGruMMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJxL6ORgDfb2iyqdkfV5AcEsY0mijgYgwNx9teTIEo1IoEBozOrGCw /z2X5ZuAFVH31Cc9hcLJQN88u60PntkdQEJaQkat9usTUG8LC4gKRzQG4nqIHOSF P+oI72mXxjFFtDQ8tsJyBtoFdTMP1lQdlE2ISyHSLMSHIau08DJ6cDDF6T3r2BkU iNRzrMJ1aTpiMXZll0s6YFkfdqbI/BnxR/yA3Wi3qlvKN2ZIDTSWG73ydrEgvQbl WXdAubeeZY7CK1JYMnmmoy8u1GWMyQ+oFKtqw3xp/q6GLNAugaVAjQILxF2U6PS3 9jBD8NgOIvTEMw+8EUoZG9B2VAtJEIqI -----END CERTIFICATE-----Generated at Mon Jun 16 09:34:40 2025 by rpki-client