$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json) Hash identifier: uR+TjWSEKq8Emt/T+4UAVY28o08qeE8K+qZJSEsSvx0= Subject key identifier: B2:1C:0A:9F:84:0F:2D:49:F7:B8:C6:9D:3E:32:99:14:5D:3E:4E:0F Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft Manifest number: 15 Signing time: Sun 15 Jun 2025 07:05:00 +0000 Manifest this update: Sun 15 Jun 2025 07:04:59 +0000 Manifest next update: Sun 22 Jun 2025 07:04:59 +0000 Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: /SQ3iLc0zey7UOfd4Vmnk3yBV+SPBbW3NzUW3/0/iiE=) 2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Validity Not Before: Jun 15 07:04:59 2025 GMT Not After : Jun 22 07:04:59 2025 GMT Subject: CN=684e709b-f84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:16:24:6e:1f:9b:10:3b:84:63:d4:28:01: e5:24:08:1a:88:3a:54:43:da:28:2a:17:82:33:46: 49:1f:7d:fa:79:01:f9:e5:1d:5b:70:b1:69:8e:5a: 7b:b6:a8:f4:70:8d:5f:6b:8f:74:89:5c:e0:ad:c2: de:5c:fb:c2:2f:5d:b0:61:76:a4:fc:4c:6e:13:31: 9e:cf:0a:4e:69:da:1d:f6:7d:ca:f9:b5:41:7f:c5: 77:f4:9f:a3:40:08:f1:29:fd:44:4e:cc:1b:ac:ea: 1e:2e:99:e1:5d:a3:75:4d:06:61:8c:b7:8a:1a:b4: fd:94:8f:af:d4:4f:ec:f3:44:bb:2a:14:a1:ff:57: 11:32:c2:45:c6:71:65:c9:6a:c0:77:c9:31:4d:8d: da:e5:2b:35:84:c2:9b:cc:27:63:01:79:ed:c0:c1: 85:84:d7:84:82:67:c8:17:dc:95:df:b2:83:91:d5: e9:0c:4f:cd:21:53:24:01:a3:46:3e:39:10:8b:95: ae:9a:eb:32:87:ef:57:9c:8b:39:f0:5b:db:40:e8: 62:b1:00:a4:cd:37:df:0b:2b:b4:54:41:0b:7d:b2: bd:b4:ee:9e:fa:39:01:46:f9:38:52:50:8c:63:7e: 6c:5d:31:60:cb:eb:9c:eb:cb:7c:68:28:b2:4f:3c: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1C:0A:9F:84:0F:2D:49:F7:B8:C6:9D:3E:32:99:14:5D:3E:4E:0F X509v3 Authority Key Identifier: keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:bb:11:b3:07:14:fa:c6:26:95:cf:8f:8b:ba:7c:ee:90:45: a9:d7:2f:c8:a8:31:57:a0:54:d6:1c:02:78:4b:d1:8b:38:94: a7:d9:0f:f0:9f:33:59:62:0c:07:5e:8c:49:25:4f:89:21:06: 29:ab:1e:c4:b0:45:81:a3:ad:ec:b7:fe:24:06:36:ca:3b:61: f2:cd:e9:39:25:9d:da:df:79:70:12:1f:1e:e9:24:89:8d:54: fa:3d:9b:37:59:57:6c:fc:73:19:2f:53:f5:5a:79:54:e6:83: a9:33:ff:d7:c4:65:e6:bb:2c:41:f0:7f:bd:9d:c2:80:2c:42: 74:de:33:b8:17:cb:46:8a:9e:f0:49:2d:0b:de:8c:d9:1b:c8: 16:8a:b1:6b:bf:ab:d1:ac:22:57:44:41:8b:48:ff:94:33:27: df:88:bd:7b:a2:31:e9:e8:f6:d3:68:7a:c9:36:e7:c5:f2:b4: b9:b5:fb:90:f5:45:6b:52:2a:3c:22:86:3c:c0:05:d9:8d:b1: 89:5e:af:f2:ee:66:8a:3d:2f:e3:99:34:8e:d6:97:c0:e1:09: ed:d4:0a:10:36:89:a5:1b:42:e4:36:8f:48:b4:fb:99:e0:8c: 42:8f:4a:fb:68:6d:03:67:86:8a:c9:1b:e6:0a:42:6c:e8:53: d9:ac:63:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTVENjExMC8GA1UEBRMoQTEyRTVFMUIyMjExNzIxODNCRjZCNjU3REYxQTA2RDMw Q0ExMEJGRjAeFw0yNTA2MTUwNzA0NTlaFw0yNTA2MjIwNzA0NTlaMBgxFjAUBgNV BAMTDTY4NGU3MDliLWY4NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfjxYkbh+bEDuEY9QoAeUkCBqIOlRD2igqF4IzRkkfffp5AfnlHVtwsWmOWnu2 qPRwjV9rj3SJXOCtwt5c+8IvXbBhdqT8TG4TMZ7PCk5p2h32fcr5tUF/xXf0n6NA CPEp/UROzBus6h4umeFdo3VNBmGMt4oatP2Uj6/UT+zzRLsqFKH/VxEywkXGcWXJ asB3yTFNjdrlKzWEwpvMJ2MBee3AwYWE14SCZ8gX3JXfsoOR1ekMT80hUyQBo0Y+ ORCLla6a6zKH71eciznwW9tA6GKxAKTNN98LK7RUQQt9sr207p76OQFG+ThSUIxj fmxdMWDL65zry3xoKLJPPGVHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUshwKn4QP LUn3uMadPjKZFF0+Tg8wHwYDVR0jBBgwFoAUoS5eGyIRchg79rZX3xoG0wyhC/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNUQ2LzZFQUZCNTI0MkND QjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hnNzlyWlgzeG9HMHd5aENf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1M1ZUd5SVJjaGc3OXJaWDN4b0cwd3loQ184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NUQ2LzZFQUZCNTI0MkNDQjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hn NzlyWlgzeG9HMHd5aENfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALu7EbMHFPrGJpXPj4u6fO6QRanXL8ioMVegVNYcAnhL0Ys4lKfZD/Cf M1liDAdejEklT4khBimrHsSwRYGjrey3/iQGNso7YfLN6TklndrfeXASHx7pJImN VPo9mzdZV2z8cxkvU/VaeVTmg6kz/9fEZea7LEHwf72dwoAsQnTeM7gXy0aKnvBJ LQvejNkbyBaKsWu/q9GsIldEQYtI/5QzJ9+IvXuiMeno9tNoesk258XytLm1+5D1 RWtSKjwihjzABdmNsYler/LuZoo9L+OZNI7Wl8DhCe3UChA2iaUbQuQ2j0i0+5ng jEKPSvtobQNnhorJG+YKQmzoU9msY8E= -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:54 2025 by rpki-client