$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: rRY02jjpRfCPT3pUCilDy4mjSPv34QnkMhgVw0zcpXk= Subject key identifier: 2B:F1:A2:33:D0:DC:8F:AA:05:6E:B2:B0:F7:82:40:8F:26:2C:1A:91 Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1BDC Signing time: Sat 14 Jun 2025 16:11:23 +0000 Manifest this update: Sat 14 Jun 2025 16:11:23 +0000 Manifest next update: Sat 21 Jun 2025 16:11:23 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: 5IinH6UxyYRzfVABUEzhjOYKa6YF9PLUYvGlM2qsn+c=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7144 (0x1be8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Jun 14 16:11:23 2025 GMT Not After : Jun 21 16:11:23 2025 GMT Subject: CN=684d9f2b-4fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:52:17:f7:04:79:6e:f9:c4:ce:43:6c:f3: ea:da:49:30:54:8a:f0:57:fe:95:c7:2f:f4:9d:6e: b5:ad:6e:5b:fb:ac:bd:16:cb:7c:16:23:bf:86:c3: b0:40:b8:d6:69:0c:9e:0a:2e:02:cc:f1:27:f9:a5: 33:12:ce:d7:70:f4:d2:80:f9:e8:f9:4a:a0:66:f8: d2:64:b9:8f:f7:b4:6f:bb:e3:3f:6e:c6:6f:16:19: 58:93:16:e3:5c:b4:1d:ac:46:7c:74:ff:ee:cf:f2: bf:71:22:1d:df:a5:b4:e0:56:3d:98:35:d6:6c:f6: 80:63:1b:11:83:19:9a:52:13:a7:68:b6:e5:01:79: d0:bb:9b:43:09:ba:8e:a1:c5:48:6d:9b:72:eb:7b: 52:ba:6f:7e:94:99:5b:e1:9e:e3:87:d4:59:3b:56: 0d:04:09:9b:d1:96:bd:dc:af:5b:d3:03:da:73:b0: b6:92:80:6f:91:06:1a:4a:17:11:01:c0:3f:1f:81: 00:d4:7b:18:7d:3f:b7:49:fc:76:76:e8:77:e2:12: b2:2e:f7:6a:bd:9e:3e:bc:21:11:d3:4a:3d:1f:fa: a2:f7:00:46:bf:59:a7:38:0f:67:62:43:8e:30:2e: a9:af:b5:88:e9:09:47:1f:88:8f:d9:28:f0:a5:15: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:A2:33:D0:DC:8F:AA:05:6E:B2:B0:F7:82:40:8F:26:2C:1A:91 X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ea:f0:45:62:70:99:e7:15:aa:2a:78:38:2a:9f:f5:19:dd: 91:70:5f:c2:1b:ac:63:ab:d2:9e:c5:15:22:c7:4e:ed:6b:bc: da:f3:b7:4f:a4:69:4c:90:98:e3:57:43:20:a3:6e:c3:de:c0: 0e:28:9d:67:e0:01:88:ea:c2:e7:e6:44:af:8a:ca:26:a7:c0: 94:3e:26:44:92:39:e5:48:97:55:70:91:80:cf:13:c1:a6:8f: 26:24:6a:18:dd:66:42:91:1b:df:ee:23:94:8b:d1:5d:2c:61: cb:02:ce:0d:14:02:33:66:7c:b4:b5:a7:ee:9b:e4:9b:9a:2e: 16:00:5a:f6:f2:3b:a7:1f:65:13:45:71:de:a2:44:ed:f7:1c: 88:4f:c4:55:ca:c6:bf:bd:d2:45:e5:5f:80:79:70:f9:21:2a: 97:c0:c4:e0:d1:3e:25:10:13:ce:f0:82:24:b1:06:e7:e8:5f: 4a:1c:d6:ac:09:52:1e:be:fe:4d:9f:03:61:f4:5f:5a:bc:f5: ef:04:6c:95:d3:76:09:2e:80:9d:09:07:c6:a3:f7:02:b5:e3: d1:9f:f9:91:c4:b7:d7:7e:8f:6a:16:ee:41:29:c4:97:d9:a2: ce:d8:fe:98:d0:8f:c9:4a:b7:f7:59:68:84:8d:d1:2b:ad:ac: ac:cd:7f:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjUwNjE0MTYxMTIzWhcNMjUwNjIxMTYxMTIzWjAYMRYwFAYD VQQDEw02ODRkOWYyYi00ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA569SF/cEeW75xM5DbPPq2kkwVIrwV/6Vxy/0nW61rW5b+6y9Fst8FiO/hsOw QLjWaQyeCi4CzPEn+aUzEs7XcPTSgPno+UqgZvjSZLmP97Rvu+M/bsZvFhlYkxbj XLQdrEZ8dP/uz/K/cSId36W04FY9mDXWbPaAYxsRgxmaUhOnaLblAXnQu5tDCbqO ocVIbZty63tSum9+lJlb4Z7jh9RZO1YNBAmb0Za93K9b0wPac7C2koBvkQYaShcR AcA/H4EA1HsYfT+3Sfx2duh34hKyLvdqvZ4+vCER00o9H/qi9wBGv1mnOA9nYkOO MC6pr7WI6QlHH4iP2SjwpRX96QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvxojPQ 3I+qBW6ysPeCQI8mLBqRMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt6vBFYnCZ5xWqKng4Kp/1Gd2RcF/CG6xjq9KexRUix07ta7za87dP pGlMkJjjV0Mgo27D3sAOKJ1n4AGI6sLn5kSvisomp8CUPiZEkjnlSJdVcJGAzxPB po8mJGoY3WZCkRvf7iOUi9FdLGHLAs4NFAIzZny0tafum+Sbmi4WAFr28junH2UT RXHeokTt9xyIT8RVysa/vdJF5V+AeXD5ISqXwMTg0T4lEBPO8IIksQbn6F9KHNas CVIevv5NnwNh9F9avPXvBGyV03YJLoCdCQfGo/cCtePRn/mRxLfXfo9qFu5BKcSX 2aLO2P6Y0I/JSrf3WWiEjdErrayszX/H -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:19 2025 by rpki-client