$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft File: pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json) Hash identifier: Pbp8GbX8s0oMyEI9qTH9B96miB/bVCQEEsDBq6GOC28= Subject key identifier: 7C:96:56:CF:3D:0C:0E:9E:1C:D0:33:B1:EE:4D:29:DA:C6:85:F2:82 Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34 Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634 Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft Manifest number: 0B0B Signing time: Sat 14 Jun 2025 19:09:52 +0000 Manifest this update: Sat 14 Jun 2025 19:09:52 +0000 Manifest next update: Sat 21 Jun 2025 19:09:52 +0000 Files and hashes: 1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: 6/AQzdkYP2m4z+8lhsD3MJL+ky7sPqbcLmwo0zBmTV0=) 2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: 9D2VyaAKjVgoxkaamh4Z/Ffje6FAagohXWssSAvixLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634 Validity Not Before: Jun 14 19:09:52 2025 GMT Not After : Jun 21 19:09:52 2025 GMT Subject: CN=684dc900-59ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:ee:49:70:d3:d6:4f:21:c7:c5:b0:88:10: b9:6a:92:1d:7d:9f:1d:19:c8:f3:37:88:a9:ed:d2: 1f:3e:c8:df:2a:cc:ad:d6:44:1b:3c:3b:21:78:2b: 79:06:96:3f:49:b6:48:b6:bb:91:c0:a3:8e:c8:80: f6:49:5e:bf:cc:5c:10:74:1e:8e:08:18:f9:e7:b9: bb:c7:c1:c4:e0:1f:77:51:f7:04:9f:ad:28:0b:a5: ac:ee:35:34:82:8c:32:af:c8:0f:ec:e3:e0:56:20: 7c:44:e9:b8:cc:d8:cb:bf:be:a6:3d:ef:71:2a:ec: 4a:e7:12:b2:44:02:1f:3b:0e:15:33:71:53:10:bc: ba:9e:b6:5c:13:64:00:b5:41:be:79:6d:a1:43:9e: f3:be:2e:cf:5b:c6:fa:e7:f5:16:90:ea:72:bb:86: 5b:50:f7:83:35:bc:7f:3e:f5:d4:a9:66:8e:03:a7: 10:13:e4:86:61:b5:f1:ac:fe:dd:60:0b:ad:f7:7a: b0:8b:43:48:66:49:9a:dc:dd:e4:5a:68:f3:13:20: ef:16:a9:7b:8e:e8:71:8e:bf:d6:08:9d:f0:f4:ae: 1f:a1:d6:ff:3e:f9:a7:13:bb:28:45:89:e1:72:c9: 12:46:7c:09:15:a6:27:52:8a:41:5b:68:f2:9a:cf: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:96:56:CF:3D:0C:0E:9E:1C:D0:33:B1:EE:4D:29:DA:C6:85:F2:82 X509v3 Authority Key Identifier: keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5e:fb:c0:02:55:06:76:75:6d:60:bc:a5:b6:16:4d:c0:14: 10:1f:5c:54:b0:2a:a6:ac:c4:57:e0:f0:fe:de:08:fa:48:f0: e3:03:d3:37:a0:3a:65:af:55:09:a4:10:01:1e:15:2b:c5:56: 12:69:08:36:16:d1:99:2f:c5:8e:09:52:17:e7:90:b0:4d:08: 1c:7b:90:71:10:2e:87:38:5f:37:0f:db:fb:1c:92:be:e7:35: 59:8c:2f:45:7f:c9:a2:3c:f2:03:49:80:d9:ab:c9:55:63:b3: 95:fc:a5:ae:5d:cf:22:99:56:68:30:76:9c:23:d9:d0:0b:4f: e5:c8:2a:1a:15:ac:71:34:44:11:bd:ed:e8:69:09:51:00:42: 88:01:60:e7:b4:be:8b:71:f3:07:cf:15:6d:c0:93:de:37:67: 2c:c2:ed:72:d5:ec:c6:0f:e7:01:0e:5c:b7:33:f7:eb:67:5b: 12:2a:4f:41:28:63:1a:0b:d4:7d:e5:97:0b:71:0e:f3:fb:6c: bf:6a:ca:64:d6:ae:8b:66:f4:5b:f7:9c:60:07:b6:02:27:23: 3e:cd:66:2e:30:bb:ea:76:a3:ab:b5:3a:97:d1:66:41:c7:4a: 76:cb:11:03:af:69:a7:6d:2f:0c:a3:45:a5:5c:54:8e:01:6e: a4:9b:c6:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEOEYxMTAvBgNVBAUTKEE1MkY4Rjk4NTlDQUM0N0Q2ODU0MjcyMzREMjYxNkVC OUU1Mzk2MzQwHhcNMjUwNjE0MTkwOTUyWhcNMjUwNjIxMTkwOTUyWjAYMRYwFAYD VQQDEw02ODRkYzkwMC01OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuLuSXDT1k8hx8WwiBC5apIdfZ8dGcjzN4ip7dIfPsjfKsyt1kQbPDsheCt5 BpY/SbZItruRwKOOyID2SV6/zFwQdB6OCBj557m7x8HE4B93UfcEn60oC6Ws7jU0 gowyr8gP7OPgViB8ROm4zNjLv76mPe9xKuxK5xKyRAIfOw4VM3FTELy6nrZcE2QA tUG+eW2hQ57zvi7PW8b65/UWkOpyu4ZbUPeDNbx/PvXUqWaOA6cQE+SGYbXxrP7d YAut93qwi0NIZkma3N3kWmjzEyDvFql7juhxjr/WCJ3w9K4fodb/PvmnE7soRYnh cskSRnwJFaYnUopBW2jyms+JGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyWVs89 DA6eHNAzse5NKdrGhfKCMB8GA1UdIwQYMBaAFKUvj5hZysR9aFQnI00mFuueU5Y0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQ4Ri9CODUyRkIzQzQz MjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hIMW9WQ2NqVFNZVzY1NVRs alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTLVBtRm5LeEgxb1ZDY2pUU1lXNjU1VGxqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQ4Ri9CODUyRkIzQzQzMjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hI MW9WQ2NqVFNZVzY1NVRsalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+XvvAAlUGdnVtYLylthZNwBQQH1xUsCqmrMRX4PD+3gj6SPDjA9M3 oDplr1UJpBABHhUrxVYSaQg2FtGZL8WOCVIX55CwTQgce5BxEC6HOF83D9v7HJK+ 5zVZjC9Ff8miPPIDSYDZq8lVY7OV/KWuXc8imVZoMHacI9nQC0/lyCoaFaxxNEQR ve3oaQlRAEKIAWDntL6LcfMHzxVtwJPeN2cswu1y1ezGD+cBDly3M/frZ1sSKk9B KGMaC9R95ZcLcQ7z+2y/aspk1q6LZvRb95xgB7YCJyM+zWYuMLvqdqOrtTqX0WZB x0p2yxEDr2mnbS8Mo0WlXFSOAW6km8Z1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:50:57 2025 by rpki-client