$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft File: AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json) Hash identifier: xE99vHXo6N9aOZALPMd2xWsPdz5mYYzx6iosJMEfMNo= Subject key identifier: 0D:61:A0:5D:14:90:A4:26:81:B0:B3:0B:F3:0A:C0:1E:F8:1B:AA:5F Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 Certificate issuer: /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft Manifest number: 01B7 Signing time: Sun 15 Jun 2025 02:20:46 +0000 Manifest this update: Sun 15 Jun 2025 02:20:46 +0000 Manifest next update: Sun 22 Jun 2025 02:20:46 +0000 Files and hashes: 1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: F3VRs7avX497Frx+1tbgPmz4NVdXaLx/ohwj+hMh4rE=) 2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: ZbTPGmKh281ymLxinCV1W0SdNG3gcop2OrOUFYRhJy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Validity Not Before: Jun 15 02:20:46 2025 GMT Not After : Jun 22 02:20:46 2025 GMT Subject: CN=684e2dfe-e65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:01:f9:78:1b:ed:7e:34:db:11:df:90:30: 50:72:ca:d0:0c:6a:6e:cb:4a:4a:11:e7:65:ff:24: 8c:87:be:8c:96:8f:ab:ac:14:b4:03:a1:65:63:15: b3:37:4d:53:ff:b9:40:04:b8:cc:30:92:22:80:f6: e0:a6:a1:58:b2:b7:59:5c:fe:b2:0e:0b:7d:b4:ac: a5:40:7d:48:08:2e:97:42:79:e7:08:2a:a1:e1:e7: 73:ad:56:78:e9:48:26:bd:c1:52:ed:e5:d9:13:96: d4:66:58:16:1f:a7:14:49:d8:ce:92:c6:c2:d9:14: a7:40:a5:40:cb:8a:8f:9f:31:98:b3:63:7e:36:f5: bc:ff:66:fb:cb:b4:ef:45:57:e9:60:c5:f2:63:60: 7b:f2:14:de:5b:70:65:95:08:c1:6b:d0:d8:ab:d6: cd:14:48:45:6b:51:e7:b0:23:59:77:41:31:27:85: 34:aa:15:57:7b:5d:ea:de:b1:62:1d:03:e4:4b:67: a4:65:c7:34:59:75:2c:4a:37:0f:e9:2d:05:62:c6: 9c:84:2e:2c:f2:b8:c0:70:a5:04:18:eb:be:32:48: d0:1c:32:2d:7b:1b:33:09:70:67:f0:fc:80:1b:6f: e9:a9:d3:e6:ab:f4:1a:58:9f:dc:bb:00:fe:32:38: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:61:A0:5D:14:90:A4:26:81:B0:B3:0B:F3:0A:C0:1E:F8:1B:AA:5F X509v3 Authority Key Identifier: keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7e:6f:de:25:ae:05:64:e0:1b:96:88:43:5a:e9:a1:3e:37: c5:86:2b:6c:e4:44:f0:72:d2:c8:20:bd:c9:8e:92:69:f5:71: 67:4b:3c:d3:24:34:d3:1d:6e:6b:9d:c0:4a:bc:ba:23:30:51: a4:f3:a0:9c:c6:1e:83:45:2b:d4:9f:14:58:4e:4b:1e:fd:5a: f2:82:8f:25:d8:ce:04:d1:52:60:57:8f:74:24:eb:f9:c7:6d: d6:ef:06:ac:6a:32:e7:06:f9:cc:9c:d3:13:9e:3c:83:78:68: 5e:fe:de:cc:7f:a9:e3:14:ae:ca:c4:3e:8a:5c:ae:43:0a:da: 59:ae:0b:6b:d8:ca:2a:e3:5c:b0:b1:34:95:cd:ef:74:67:27: 78:3c:1c:75:54:dd:2d:75:22:60:3c:fd:ae:b3:ca:5a:67:84: 7b:6f:c5:42:c4:89:a7:33:3d:bd:2b:85:9f:60:00:0c:70:f3: b8:83:67:3f:6c:74:c2:a6:f1:56:9d:c0:b5:1a:4a:88:4f:5f: df:3e:10:89:db:6f:58:c0:a5:91:38:25:82:dc:c5:70:16:a1: 8a:1f:7d:63:fb:21:30:5c:94:ff:91:8a:e8:7b:7e:51:11:58: e7:8d:5c:82:bc:1f:2e:3c:cf:b2:3e:fb:21:b8:25:eb:76:f6: 97:6a:b6:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4OEExMTAvBgNVBAUTKDAyODExQzMxRDUwQzkxRkZGRDVFREE2OEI5RUY4MUMz RjlFOUZCMTIwHhcNMjUwNjE1MDIyMDQ2WhcNMjUwNjIyMDIyMDQ2WjAYMRYwFAYD VQQDEw02ODRlMmRmZS1lNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXoB+Xgb7X402xHfkDBQcsrQDGpuy0pKEedl/ySMh76Mlo+rrBS0A6FlYxWz N01T/7lABLjMMJIigPbgpqFYsrdZXP6yDgt9tKylQH1ICC6XQnnnCCqh4edzrVZ4 6UgmvcFS7eXZE5bUZlgWH6cUSdjOksbC2RSnQKVAy4qPnzGYs2N+NvW8/2b7y7Tv RVfpYMXyY2B78hTeW3BllQjBa9DYq9bNFEhFa1HnsCNZd0ExJ4U0qhVXe13q3rFi HQPkS2ekZcc0WXUsSjcP6S0FYsachC4s8rjAcKUEGOu+MkjQHDItexszCXBn8PyA G2/pqdPmq/QaWJ/cuwD+MjhcKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1hoF0U kKQmgbCzC/MKwB74G6pfMB8GA1UdIwQYMBaAFAKBHDHVDJH//V7aaLnvgcP56fsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4QS9DOTYzNTdDQUFB OTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtmXzlYdHBvdWUtQndfbnAt eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FvRWNNZFVNa2ZfOVh0cG91ZS1Cd19ucC14SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4QS9DOTYzNTdDQUFBOTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtm XzlYdHBvdWUtQndfbnAteEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXfm/eJa4FZOAblohDWumhPjfFhits5ETwctLIIL3JjpJp9XFnSzzT JDTTHW5rncBKvLojMFGk86Ccxh6DRSvUnxRYTkse/Vrygo8l2M4E0VJgV490JOv5 x23W7wasajLnBvnMnNMTnjyDeGhe/t7Mf6njFK7KxD6KXK5DCtpZrgtr2Moq41yw sTSVze90Zyd4PBx1VN0tdSJgPP2us8paZ4R7b8VCxImnMz29K4WfYAAMcPO4g2c/ bHTCpvFWncC1GkqIT1/fPhCJ229YwKWROCWC3MVwFqGKH31j+yEwXJT/kYroe35R EVjnjVyCvB8uPM+yPvshuCXrdvaXarZ6 -----END CERTIFICATE-----Generated at Sun Jun 15 20:40:16 2025 by rpki-client