$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: PToffVPk3tN7gqSqBmVy9yiSh7HPt8JZu7kg9wZbgYI= Subject key identifier: D2:AC:F4:3A:3E:60:91:30:E5:F5:F1:83:66:CA:CF:6B:52:47:CD:F0 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 0145 Signing time: Tue 17 Jun 2025 03:19:58 +0000 Manifest this update: Tue 17 Jun 2025 03:19:58 +0000 Manifest next update: Tue 24 Jun 2025 03:19:58 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: WO8jyVSFF2EQcfWBZ8cEBmGcvTDt9AW155iTEmT9NSw=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Jun 17 03:19:58 2025 GMT Not After : Jun 24 03:19:58 2025 GMT Subject: CN=6850dede-53a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:41:c1:3e:02:a9:24:0d:ee:12:38:07:ae: aa:5a:50:f2:0e:93:64:04:63:6e:65:55:e4:d7:6a: 06:03:14:77:a2:4a:ec:db:31:3a:5a:b2:69:69:1d: a5:54:a2:fb:9d:09:71:f1:a8:18:9e:6c:b8:e9:b9: e4:fe:31:b0:a1:0f:81:b3:e4:43:bf:cc:7c:62:41: 39:ef:cf:4e:e1:5b:48:7d:78:b4:ac:80:27:db:dc: 3e:6b:51:78:a7:87:37:6c:fd:53:4b:b5:03:86:58: e7:d4:7d:20:85:37:e0:66:a2:9f:6b:3d:c1:f4:27: fb:8f:f5:1c:b4:8f:aa:fd:c5:db:85:42:13:75:71: ce:69:46:55:92:4d:f6:cc:df:42:dd:ba:c4:9d:8c: 08:02:37:27:1b:94:ef:13:ba:e3:11:e3:5c:3c:43: 7f:d7:ce:ae:33:58:f2:34:12:c6:c5:25:e7:ee:6a: 88:f1:77:61:6f:5b:6f:87:07:1d:72:f6:ff:15:eb: c6:37:46:23:67:3d:3e:5d:6e:66:fa:3d:21:63:38: 6d:99:a5:9a:8b:fb:50:3c:ad:13:66:08:7c:25:84: d5:74:76:c7:53:51:dc:d3:b3:ab:95:92:61:10:e8: eb:e6:dd:a2:f8:f3:37:06:47:b7:13:58:8c:80:68: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AC:F4:3A:3E:60:91:30:E5:F5:F1:83:66:CA:CF:6B:52:47:CD:F0 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d6:76:a1:c0:5c:f4:47:cb:84:33:82:50:2a:33:41:a4:5e: 5f:9a:51:b8:96:31:48:4a:18:44:44:21:97:23:04:a2:f5:47: 7b:ab:aa:1b:a7:59:a1:61:77:59:03:ac:d4:2e:d8:6d:db:52: 23:17:ab:86:42:21:4b:30:11:70:42:d1:66:93:eb:27:a1:03: 64:8b:aa:27:d5:00:6e:7a:85:0c:4b:c0:3a:b0:4b:03:45:ce: 98:fe:e7:db:8c:e1:99:de:c2:eb:1c:d4:e8:2d:ab:02:7f:8b: ee:6c:a7:1a:12:09:b2:8d:3c:67:a8:f1:ef:db:04:9a:c6:74: a4:5c:5b:51:15:b3:c1:2c:5a:ad:3c:05:09:5e:db:4e:53:7c: e0:79:bb:e3:f7:dd:e4:7e:8e:4c:64:42:3c:d3:69:ea:c5:94: 94:62:ab:72:ee:d9:58:47:8f:e7:d2:07:d4:12:23:3e:f4:91: ac:1d:be:a0:e1:ab:b7:f1:b7:5b:10:b6:e5:ea:60:a3:05:b7: 51:4c:a8:c5:d6:9e:18:d8:a9:7c:4b:fa:e5:39:f7:5a:76:9f: 80:3c:da:f5:b7:1f:a1:ac:1f:a0:7a:48:28:72:26:0d:ea:ca: ee:9f:59:9b:39:1d:c4:4a:7a:bd:48:57:36:ee:6c:69:19:11: 51:3b:4c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwNjE3MDMxOTU4WhcNMjUwNjI0MDMxOTU4WjAYMRYwFAYD VQQDEw02ODUwZGVkZS01M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRdBwT4CqSQN7hI4B66qWlDyDpNkBGNuZVXk12oGAxR3okrs2zE6WrJpaR2l VKL7nQlx8agYnmy46bnk/jGwoQ+Bs+RDv8x8YkE5789O4VtIfXi0rIAn29w+a1F4 p4c3bP1TS7UDhljn1H0ghTfgZqKfaz3B9Cf7j/UctI+q/cXbhUITdXHOaUZVkk32 zN9C3brEnYwIAjcnG5TvE7rjEeNcPEN/186uM1jyNBLGxSXn7mqI8Xdhb1tvhwcd cvb/FevGN0YjZz0+XW5m+j0hYzhtmaWai/tQPK0TZgh8JYTVdHbHU1Hc07OrlZJh EOjr5t2i+PM3Bke3E1iMgGgihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKs9Do+ YJEw5fXxg2bKz2tSR83wMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW1nahwFz0R8uEM4JQKjNBpF5fmlG4ljFIShhERCGXIwSi9Ud7q6ob p1mhYXdZA6zULtht21IjF6uGQiFLMBFwQtFmk+snoQNki6on1QBueoUMS8A6sEsD Rc6Y/ufbjOGZ3sLrHNToLasCf4vubKcaEgmyjTxnqPHv2wSaxnSkXFtRFbPBLFqt PAUJXttOU3zgebvj993kfo5MZEI802nqxZSUYqty7tlYR4/n0gfUEiM+9JGsHb6g 4au38bdbELbl6mCjBbdRTKjF1p4Y2Kl8S/rlOfdadp+APNr1tx+hrB+gekgociYN 6srun1mbOR3ESnq9SFc27mxpGRFRO0z5 -----END CERTIFICATE-----Generated at Wed Jun 18 22:27:02 2025 by rpki-client