$ rpki-client -vvf rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft File: oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft (raw, json) Hash identifier: AWmoi0p9wzCzblig1WJVbxhIrRcvY7LbsGF9eaM4ID4= Subject key identifier: FF:72:46:A3:7F:B9:AC:EA:B2:EE:AC:0D:81:2A:30:CE:97:99:31:56 Authority key identifier: A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 Certificate issuer: /CN=A918AAA1/serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft Manifest number: 014D Signing time: Sun 15 Jun 2025 03:21:56 +0000 Manifest this update: Sun 15 Jun 2025 03:21:56 +0000 Manifest next update: Sun 22 Jun 2025 03:21:56 +0000 Files and hashes: 1: oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl (hash: S2tmGJ0GnJP5e7M58lXNRaE086qNedIkWUojBx9G8mY=) 2: E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa (hash: P1qwhAicU6zPENCwTGFasnrb3+NFivcUL5Wq4dABBCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AAA1, serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Validity Not Before: Jun 15 03:21:56 2025 GMT Not After : Jun 22 03:21:56 2025 GMT Subject: CN=684e3c54-bc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:b0:74:5c:44:78:99:62:97:4a:8c:67:33: f0:f8:60:30:63:7d:57:1c:28:01:bc:4b:6f:d6:5b: 79:b7:27:f9:a0:48:c8:e6:46:b0:ec:81:e0:e7:32: 42:0a:58:71:f9:de:cb:18:8c:1b:4f:c6:70:a7:f9: 3c:cb:1b:c4:87:90:1e:cd:be:53:41:0f:92:d4:36: 88:07:3c:0f:85:c0:f5:89:46:ad:04:eb:dd:19:15: 76:24:8f:7e:0a:63:e8:86:ef:5c:d3:be:17:7f:85: 35:5a:37:cf:21:16:44:82:38:c4:ed:a5:ee:76:db: c0:a0:f2:de:40:8a:83:0d:98:90:d9:6c:f7:d8:02: b0:62:ed:ee:a5:18:1c:fe:af:05:45:f5:fe:b7:ef: 8f:5c:35:77:1a:d8:32:27:84:79:1d:af:7f:2f:b9: 62:49:43:a4:94:92:36:e4:1e:22:ca:bb:91:fe:4a: 77:76:67:6c:c5:f8:49:8e:c1:8d:4b:66:02:09:cf: 2d:3e:f4:1e:51:91:90:78:f1:14:21:2a:09:82:6c: 9c:bf:0d:02:37:e5:e1:d4:67:01:d8:3b:6c:f9:40: c4:9a:99:97:55:c0:25:8e:8a:b4:2c:70:07:4b:c1: 6a:96:32:d4:97:ce:c7:1c:33:64:18:0d:d4:72:d8: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:72:46:A3:7F:B9:AC:EA:B2:EE:AC:0D:81:2A:30:CE:97:99:31:56 X509v3 Authority Key Identifier: keyid:A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:88:2c:85:1e:d2:7e:7e:b9:37:2c:de:55:20:4b:27:ca:ab: b7:ed:4e:97:4c:26:fe:71:da:18:a1:16:7f:5e:b1:d9:dd:34: 35:e6:2c:10:0f:a1:1e:6f:f5:0c:1d:4b:8f:3a:4a:0a:a9:ee: 68:42:d4:b0:3c:25:fc:55:3b:5c:2e:05:49:77:a4:92:af:d7: 0f:94:ff:27:88:74:04:b0:06:1d:f2:e9:06:3b:22:4c:25:2a: 94:5f:60:5a:38:8a:0b:2d:29:85:f3:94:97:4b:51:18:b5:80: c9:18:56:fb:1f:15:23:c9:ea:ba:a9:e1:1c:90:d5:91:dd:d9: 5b:31:39:07:be:f7:6e:be:40:f1:44:eb:cb:04:77:e2:8a:9f: 4d:24:39:5f:a2:35:cc:95:fe:8a:47:a3:5c:72:2f:b0:d2:c2: d8:33:c7:35:bf:f7:51:39:3f:21:d2:51:34:94:75:47:28:f6: c5:7d:30:4a:f1:bc:15:db:ba:b2:ae:e9:c4:d6:5d:34:d7:85: b0:fa:ef:77:0d:53:e0:43:6a:df:48:7b:80:aa:d6:6e:44:e4: 6f:62:43:a5:a6:ef:57:0c:9c:5f:0a:92:ab:a0:a5:83:87:59: b3:3d:21:5b:39:dd:6b:06:df:1d:e7:43:51:a8:df:bf:7d:22: d2:a3:22:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQTExMTAvBgNVBAUTKEEyREEzNjM3RDMyNTNGODk5N0Q4OEQwQkQ4REE5NTk4 Rjc4M0Y5OTEwHhcNMjUwNjE1MDMyMTU2WhcNMjUwNjIyMDMyMTU2WjAYMRYwFAYD VQQDEw02ODRlM2M1NC1iYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvWwdFxEeJlil0qMZzPw+GAwY31XHCgBvEtv1lt5tyf5oEjI5kaw7IHg5zJC Clhx+d7LGIwbT8Zwp/k8yxvEh5Aezb5TQQ+S1DaIBzwPhcD1iUatBOvdGRV2JI9+ CmPohu9c074Xf4U1WjfPIRZEgjjE7aXudtvAoPLeQIqDDZiQ2Wz32AKwYu3upRgc /q8FRfX+t++PXDV3GtgyJ4R5Ha9/L7liSUOklJI25B4iyruR/kp3dmdsxfhJjsGN S2YCCc8tPvQeUZGQePEUISoJgmycvw0CN+Xh1GcB2Dts+UDEmpmXVcAljoq0LHAH S8FqljLUl87HHDNkGA3UcthuKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9yRqN/ uazqsu6sDYEqMM6XmTFWMB8GA1UdIwQYMBaAFKLaNjfTJT+Jl9iNC9jalZj3g/mR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFBMS84MTE0Qzc5QzQ4 NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0bVgySTBMMk5xVm1QZUQt WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290bzJOOU1sUDRtWDJJMEwyTnFWbVBlRC1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFBMS84MTE0Qzc5QzQ4NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0 bVgySTBMMk5xVm1QZUQtWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsiCyFHtJ+frk3LN5VIEsnyqu37U6XTCb+cdoYoRZ/XrHZ3TQ15iwQ D6Eeb/UMHUuPOkoKqe5oQtSwPCX8VTtcLgVJd6SSr9cPlP8niHQEsAYd8ukGOyJM JSqUX2BaOIoLLSmF85SXS1EYtYDJGFb7HxUjyeq6qeEckNWR3dlbMTkHvvduvkDx ROvLBHfiip9NJDlfojXMlf6KR6Ncci+w0sLYM8c1v/dROT8h0lE0lHVHKPbFfTBK 8bwV27qyrunE1l0014Ww+u93DVPgQ2rfSHuAqtZuRORvYkOlpu9XDJxfCpKroKWD h1mzPSFbOd1rBt8d50NRqN+/fSLSoyK1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:56:29 2025 by rpki-client