$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: X1GXF51mrd88G3djPTSEOfg4GdAiNOsIi+2lwP2Nf/w= Subject key identifier: F2:08:9E:8C:E1:7C:51:A6:4C:92:5E:89:2C:1F:B6:C8:DE:05:07:60 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 015C Signing time: Sun 15 Jun 2025 03:13:28 +0000 Manifest this update: Sun 15 Jun 2025 03:13:28 +0000 Manifest next update: Sun 22 Jun 2025 03:13:28 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: iWiAuEoTfi7H2ZX8f/gFHZagzCj77Yv/1mnSfGkroxk=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: 6KqNq4cdtHhz/rpHpQGDibxzs+UH6NBhNOISI8YbXQE=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: 4JGUeecx58BBmafBCfjWDOEaD/pbsFBnC8eWlzMDtQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Jun 15 03:13:28 2025 GMT Not After : Jun 22 03:13:28 2025 GMT Subject: CN=684e3a58-efda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:c8:32:9f:f3:f9:99:df:fb:4a:df:d7:ff: 60:01:70:bb:d1:be:e9:a2:97:5d:7e:37:53:53:3a: 26:1b:82:6c:e1:bb:1c:41:99:1a:7c:e2:62:8c:34: dd:fb:40:65:c1:39:7a:e6:fb:7b:65:c4:e7:99:1f: c1:1f:4f:90:bd:b9:32:f8:c5:38:1e:1c:2c:a6:fb: 48:2e:fb:fb:98:a3:5f:f9:08:79:00:bf:e4:d6:4d: d9:25:8a:c3:70:3f:c6:be:ae:0c:17:96:07:da:5f: d3:a9:fa:06:7b:3d:7c:b2:f9:31:bf:e7:6a:55:eb: 8a:f9:0e:87:e3:79:9d:d4:f0:cc:fc:55:0d:a9:87: b2:d8:d8:44:e9:e8:de:88:c8:7b:e7:a6:1c:0d:71: 61:5d:e9:d9:db:61:bd:0a:58:94:68:02:4f:82:0a: cb:ee:72:ba:94:0e:7e:f9:ce:69:6e:d0:0b:9e:63: b3:3e:7d:51:da:e7:e6:f4:e8:d1:ed:08:a6:9c:1c: 70:eb:06:15:dd:92:ae:6c:ef:6e:c9:a5:bf:43:69: 93:53:d9:89:e1:06:bd:fe:4f:a1:7a:65:4e:49:e3: 77:bc:06:72:17:d8:eb:20:5d:84:06:b4:70:0e:74: 1a:c2:1e:dd:9b:94:71:6b:03:53:ea:93:95:8f:f9: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:08:9E:8C:E1:7C:51:A6:4C:92:5E:89:2C:1F:B6:C8:DE:05:07:60 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a0:27:ab:a5:62:4e:13:a6:a6:b8:ef:00:48:65:8c:63:ae: 89:dd:0a:53:b1:37:eb:60:45:7a:14:83:91:e0:ac:16:ac:8b: ea:57:71:5a:90:68:a3:0e:48:bb:28:97:06:57:48:a2:57:64: e5:f7:bd:ff:96:a1:2f:5b:0f:f0:7a:df:0f:3c:99:54:8e:a5: 7a:f6:72:27:41:df:86:d2:47:70:db:ad:a6:70:6c:27:e8:50: 83:61:96:03:49:13:2a:fa:0b:ae:fc:8f:ef:2b:ba:a9:85:65: 5c:f1:4c:60:12:9c:30:92:9d:79:2a:06:c2:28:e9:dd:d3:bc: 03:54:81:22:61:07:6a:09:d0:0f:cd:8a:b1:4c:bc:f2:f8:0b: b7:c5:6e:62:46:b7:35:ac:d8:cf:bb:a1:fc:52:fc:93:96:7b: 5f:38:69:84:fc:59:30:6b:83:cf:4e:bd:59:39:54:c8:7c:81: 0d:8b:93:ed:1b:49:73:81:b9:b4:74:04:88:da:29:73:6d:c8: 96:ad:14:fc:69:2c:18:67:36:c9:66:1a:02:65:6c:35:26:f4: 97:4c:a5:6b:fa:40:53:90:3d:36:0a:3f:72:fe:72:e0:e4:5a: 5a:14:66:12:f9:17:5a:94:9d:70:1a:98:6c:0a:7f:38:33:a1: c3:eb:9d:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUwNjE1MDMxMzI4WhcNMjUwNjIyMDMxMzI4WjAYMRYwFAYD VQQDEw02ODRlM2E1OC1lZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOTIMp/z+Znf+0rf1/9gAXC70b7popddfjdTUzomG4Js4bscQZkafOJijDTd +0BlwTl65vt7ZcTnmR/BH0+Qvbky+MU4HhwspvtILvv7mKNf+Qh5AL/k1k3ZJYrD cD/Gvq4MF5YH2l/TqfoGez18svkxv+dqVeuK+Q6H43md1PDM/FUNqYey2NhE6eje iMh756YcDXFhXenZ22G9CliUaAJPggrL7nK6lA5++c5pbtALnmOzPn1R2ufm9OjR 7QimnBxw6wYV3ZKubO9uyaW/Q2mTU9mJ4Qa9/k+hemVOSeN3vAZyF9jrIF2EBrRw DnQawh7dm5RxawNT6pOVj/nUOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIInozh fFGmTJJeiSwftsjeBQdgMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUoCerpWJOE6amuO8ASGWMY66J3QpTsTfrYEV6FIOR4KwWrIvqV3Fa kGijDki7KJcGV0iiV2Tl973/lqEvWw/wet8PPJlUjqV69nInQd+G0kdw262mcGwn 6FCDYZYDSRMq+guu/I/vK7qphWVc8UxgEpwwkp15KgbCKOnd07wDVIEiYQdqCdAP zYqxTLzy+Au3xW5iRrc1rNjPu6H8UvyTlntfOGmE/Fkwa4PPTr1ZOVTIfIENi5Pt G0lzgbm0dASI2ilzbciWrRT8aSwYZzbJZhoCZWw1JvSXTKVr+kBTkD02Cj9y/nLg 5FpaFGYS+RdalJ1wGphsCn84M6HD651e -----END CERTIFICATE-----Generated at Sun Jun 15 08:10:35 2025 by rpki-client