$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: PB9cVvAbnCs1PfP0sixv02ZCK81cQCBTAx9oKwEk0CE= Subject key identifier: F5:00:46:DD:C3:8E:53:E8:FE:A6:2D:B6:61:42:93:2D:18:15:B4:0C Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0134 Signing time: Tue 17 Jun 2025 03:32:18 +0000 Manifest this update: Tue 17 Jun 2025 03:32:17 +0000 Manifest next update: Tue 24 Jun 2025 03:32:17 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: L4PgbnRDXTMngEt6h2OXY7cepadFkgvYLoAPHAjlPIM=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Jun 17 03:32:17 2025 GMT Not After : Jun 24 03:32:17 2025 GMT Subject: CN=6850e1c1-0552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:b4:6d:be:cb:c2:c4:8c:f6:85:50:4d:2f: 98:08:ab:cd:5d:53:94:42:1a:1e:8e:33:b3:25:1d: 2e:97:70:5a:4f:21:a1:73:9b:af:08:32:df:42:c2: 1a:5d:3b:03:be:a1:ae:e5:4d:2c:7a:46:9b:f1:54: 08:8d:17:3e:1c:0b:f7:5b:60:cc:dc:a8:24:b0:ee: 3e:b0:8e:2d:5b:8a:7c:d3:b2:a7:69:a3:6a:54:ea: f6:fa:48:1f:53:a7:0d:76:ae:7c:ff:58:7d:ea:05: e2:51:d2:8e:23:f1:35:c2:98:a6:20:82:99:77:4f: dc:76:81:03:49:90:b6:80:98:6f:f8:2b:e4:05:f7: 74:b5:d8:09:e8:31:36:be:18:7e:8e:cd:89:88:70: 04:e8:a7:40:b6:20:05:7f:3e:c1:ed:9b:ba:6c:5f: 8f:79:52:ca:87:b7:a3:f3:04:d4:8c:84:4d:49:04: 7f:23:55:c3:b5:2e:0d:51:41:fe:f5:d0:08:ed:9d: ea:7c:3a:c2:4f:dc:ca:63:6a:18:84:12:06:9a:1e: 29:11:ae:0f:99:da:b6:3b:53:58:ff:85:fb:27:9f: 8f:4c:de:72:70:96:25:a7:12:02:94:4b:3e:da:70: 85:66:68:fb:a8:50:04:be:ca:09:48:7e:a5:df:dc: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:00:46:DD:C3:8E:53:E8:FE:A6:2D:B6:61:42:93:2D:18:15:B4:0C X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ce:a3:ac:98:04:be:e2:08:57:47:24:2f:14:19:1c:f6:3d: 64:35:9a:ac:43:33:07:9b:b2:98:e6:12:8e:df:29:05:6a:79: 90:97:69:f7:28:81:b9:a6:a2:8c:a5:ca:9c:04:92:65:96:5b: fa:68:01:4e:00:4e:87:5c:f3:63:b1:98:6d:f8:52:64:a6:da: 9e:29:b5:dc:49:f0:f1:6f:41:de:39:fd:4e:56:0c:0b:89:d9: 91:e0:a8:25:34:8b:01:3d:d4:16:dc:ae:d1:c5:89:b0:95:33: 09:a5:ec:7d:a9:d9:a7:f5:a8:c9:1e:dc:20:8d:da:65:e8:32: be:c5:46:23:d9:d9:5d:4b:89:53:53:9d:1a:51:59:ec:7c:01: 6d:23:d1:e2:cf:b4:5b:0e:67:1b:b2:3f:e0:cc:2c:4e:52:fe: 4c:46:cf:94:ee:8f:dc:4e:1a:6f:54:02:43:63:94:94:97:7b: 27:04:62:dc:89:c6:54:c8:2a:e5:ed:d8:c7:ef:37:8d:c2:ed: b4:40:2a:38:17:08:c3:6b:29:36:b2:bf:78:53:f3:85:77:6e: c8:f6:c5:a5:a6:d8:4a:cc:92:4e:5f:cc:c6:bb:35:ad:07:e0: 51:ce:da:6d:9b:9d:1c:2d:bc:ed:5b:23:1f:83:1b:f4:db:02: 69:66:44:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwNjE3MDMzMjE3WhcNMjUwNjI0MDMzMjE3WjAYMRYwFAYD VQQDEw02ODUwZTFjMS0wNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqza0bb7LwsSM9oVQTS+YCKvNXVOUQhoejjOzJR0ul3BaTyGhc5uvCDLfQsIa XTsDvqGu5U0sekab8VQIjRc+HAv3W2DM3KgksO4+sI4tW4p807KnaaNqVOr2+kgf U6cNdq58/1h96gXiUdKOI/E1wpimIIKZd0/cdoEDSZC2gJhv+CvkBfd0tdgJ6DE2 vhh+js2JiHAE6KdAtiAFfz7B7Zu6bF+PeVLKh7ej8wTUjIRNSQR/I1XDtS4NUUH+ 9dAI7Z3qfDrCT9zKY2oYhBIGmh4pEa4Pmdq2O1NY/4X7J5+PTN5ycJYlpxIClEs+ 2nCFZmj7qFAEvsoJSH6l39xgvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUARt3D jlPo/qYttmFCky0YFbQMMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGzqOsmAS+4ghXRyQvFBkc9j1kNZqsQzMHm7KY5hKO3ykFanmQl2n3 KIG5pqKMpcqcBJJlllv6aAFOAE6HXPNjsZht+FJkptqeKbXcSfDxb0HeOf1OVgwL idmR4KglNIsBPdQW3K7RxYmwlTMJpex9qdmn9ajJHtwgjdpl6DK+xUYj2dldS4lT U50aUVnsfAFtI9Hiz7RbDmcbsj/gzCxOUv5MRs+U7o/cThpvVAJDY5SUl3snBGLc icZUyCrl7djH7zeNwu20QCo4FwjDayk2sr94U/OFd27I9sWlpthKzJJOX8zGuzWt B+BRztptm50cLbztWyMfgxv02wJpZkTo -----END CERTIFICATE-----Generated at Thu Jun 19 04:30:52 2025 by rpki-client