$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json) Hash identifier: rQKZ5qSDsGFbMlkGmRvtme1DCfl0Y9tQMzwUP0MpBLQ= Subject key identifier: 4F:C7:E1:61:1A:CC:FC:B5:00:AB:FA:87:57:F7:5A:48:3D:47:C3:04 Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft Manifest number: 016C Signing time: Thu 19 Jun 2025 03:35:35 +0000 Manifest this update: Thu 19 Jun 2025 03:35:34 +0000 Manifest next update: Thu 26 Jun 2025 03:35:34 +0000 Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: epMslMQi8T2zQmPX+kqRsUhLsqv00wzFqd+0s2DO38Y=) 2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: l3vFzxttEXhfOuZjeQF8CrGkxbV17axCXSipPqSoFKA=) 3: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: ra0yVXf7WKyMc/TV/KsDqYCa6PLBvgSOfzPKvq7nVBw=) 4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: VlIb3exIwpSPjFwHyuIwV8wlOpGvSIVB8uNPjyxZHoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Validity Not Before: Jun 19 03:35:34 2025 GMT Not After : Jun 26 03:35:34 2025 GMT Subject: CN=68538587-8e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:20:79:04:23:66:25:cb:30:7e:b9:de:af: eb:b9:bd:bf:ec:77:ee:a1:93:ac:82:9e:6d:9c:cb: 38:60:52:09:45:0c:6b:d7:3b:1f:24:03:b3:fe:df: 88:76:db:4a:db:c1:c4:9c:15:9a:e3:f0:ec:aa:b2: 1e:ea:dd:09:bd:ba:d7:d8:c1:a6:c4:f0:91:96:c6: 20:64:4f:4c:4a:90:50:f3:a6:9c:0f:ac:29:39:bc: 23:7c:3e:62:8c:f3:ec:98:ac:77:77:44:b6:87:80: 6b:a9:1f:cc:65:e6:b1:f3:da:9b:8d:0c:fa:c7:3b: f5:5f:83:3d:3d:7c:d6:bf:1e:94:e9:ff:07:ff:86: 6b:24:a0:71:f4:3c:9c:a5:d3:a0:dd:be:11:31:b7: bd:ec:41:07:1a:06:d7:45:6f:9c:4e:d8:1c:0f:50: bd:28:4c:a5:67:ca:5b:12:e0:24:41:7c:de:c7:41: 3d:67:c5:7d:8b:d7:ed:12:c0:07:ed:e6:0c:ed:c9: ed:aa:a2:d5:01:be:93:93:6d:99:86:77:ec:81:5a: 59:1c:57:94:26:fe:ea:43:a6:dd:af:8b:55:31:15: 1a:e7:4a:75:b1:4e:41:d4:f8:48:06:37:56:dc:19: 0c:67:5d:43:6b:2c:09:a1:d9:11:39:97:fb:2d:14: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C7:E1:61:1A:CC:FC:B5:00:AB:FA:87:57:F7:5A:48:3D:47:C3:04 X509v3 Authority Key Identifier: keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:35:9a:4e:45:0d:fc:41:1d:80:b6:e8:f2:50:00:eb:aa:f9: c7:43:06:b4:c1:69:29:3a:63:b1:86:66:47:69:ea:ce:b6:cf: a0:27:aa:df:e2:c3:59:62:dd:61:c0:0c:f6:16:e9:92:7f:27: fb:a0:4b:0a:09:20:86:e8:37:f6:c4:89:0d:c1:0a:04:a8:bb: e0:d4:65:54:be:aa:cc:d6:63:ca:17:b3:48:1f:87:9c:95:8a: cd:f0:64:93:05:31:56:d4:8f:5a:29:ea:db:0e:de:66:d2:9f: 17:dd:d9:f2:11:5c:4d:9c:81:03:81:d2:f0:64:97:61:23:ff: 16:59:b2:28:03:af:88:4f:cd:4e:d9:a1:a4:2c:ad:8e:7b:04: 55:45:23:80:0f:34:b2:4b:40:42:21:6a:0c:ea:1a:07:41:e6: 4e:2a:3c:60:31:79:9d:97:1b:dd:d4:35:1e:07:cb:43:f5:dd: da:00:6c:e6:5a:c7:6b:a3:86:71:2b:4c:4e:f9:b0:16:9b:90: a6:9e:2a:94:7a:fe:6c:a6:3e:62:f2:4b:2e:39:fc:e7:a8:7a: bf:8e:e0:d6:5f:77:1a:e8:42:82:0f:2e:66:2d:88:c2:fe:b2: 70:69:f2:de:88:f0:1e:e6:99:81:c6:37:46:83:62:64:a2:28: ad:0c:31:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw MDZCQjUxODYwHhcNMjUwNjE5MDMzNTM0WhcNMjUwNjI2MDMzNTM0WjAYMRYwFAYD VQQDEw02ODUzODU4Ny04ZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCogeQQjZiXLMH653q/rub2/7HfuoZOsgp5tnMs4YFIJRQxr1zsfJAOz/t+I dttK28HEnBWa4/DsqrIe6t0JvbrX2MGmxPCRlsYgZE9MSpBQ86acD6wpObwjfD5i jPPsmKx3d0S2h4BrqR/MZeax89qbjQz6xzv1X4M9PXzWvx6U6f8H/4ZrJKBx9Dyc pdOg3b4RMbe97EEHGgbXRW+cTtgcD1C9KEylZ8pbEuAkQXzex0E9Z8V9i9ftEsAH 7eYM7cntqqLVAb6Tk22ZhnfsgVpZHFeUJv7qQ6bdr4tVMRUa50p1sU5B1PhIBjdW 3BkMZ11DaywJodkROZf7LRRWpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/H4WEa zPy1AKv6h1f3Wkg9R8MEMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrNZpORQ38QR2AtujyUADrqvnHQwa0wWkpOmOxhmZHaerOts+gJ6rf 4sNZYt1hwAz2FumSfyf7oEsKCSCG6Df2xIkNwQoEqLvg1GVUvqrM1mPKF7NIH4ec lYrN8GSTBTFW1I9aKerbDt5m0p8X3dnyEVxNnIEDgdLwZJdhI/8WWbIoA6+IT81O 2aGkLK2OewRVRSOADzSyS0BCIWoM6hoHQeZOKjxgMXmdlxvd1DUeB8tD9d3aAGzm Wsdro4ZxK0xO+bAWm5CmniqUev5spj5i8ksuOfznqHq/juDWX3ca6EKCDy5mLYjC /rJwafLeiPAe5pmBxjdGg2JkoiitDDEP -----END CERTIFICATE-----Generated at Fri Jun 20 12:34:12 2025 by rpki-client