$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: OF8C/mRKAtnmE0M43SWOGrQIwlFUF/Cqw1K8JmOHRCA= Subject key identifier: 0B:D5:81:B5:8A:C3:10:88:DA:7F:EB:2E:18:9A:84:D9:2F:45:7E:47 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 0339 Signing time: Thu 19 Jun 2025 00:54:27 +0000 Manifest this update: Thu 19 Jun 2025 00:54:27 +0000 Manifest next update: Thu 26 Jun 2025 00:54:27 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: IrLZz099aUOAqHa4wX5tXJ2twuk7q2Zk+0RVr6z2EOA=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: hQOYHlCjx2ScuN+oMwFJ/ejTbPq4orU4F7qi3kUTHdM=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: 7Gmx6aG6mVa6tW4ZmRdx25+Dm056uxm4nK4BIHzJbm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Jun 19 00:54:27 2025 GMT Not After : Jun 26 00:54:27 2025 GMT Subject: CN=68535fc3-0008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:08:f6:b3:4f:93:17:2b:7c:f8:12:f3:f3: fb:17:b0:d2:f8:ad:10:ad:36:d0:e8:ab:f8:97:81: 6f:13:ec:00:dc:21:a2:0b:cc:c7:54:1d:4c:4e:aa: 55:96:4c:a4:ff:ba:74:db:e9:6a:97:5c:eb:33:d9: fe:52:70:9f:f4:06:65:c8:a4:7b:27:b7:d5:91:03: 4e:79:45:4f:15:76:ea:a6:f9:5f:9e:37:a1:99:0d: ea:d8:45:d8:51:47:87:5b:08:eb:fd:44:8b:62:b1: 72:7c:dc:47:53:90:1b:80:11:13:0b:cb:75:de:fb: 6a:ec:67:a6:f9:69:7f:5d:be:2a:bb:80:f8:a3:2c: bd:d0:1d:c1:dd:a7:68:40:87:ed:2c:65:f9:39:77: f7:97:aa:0d:9c:11:5c:17:80:af:f6:7d:79:98:02: 56:1d:62:fe:93:cc:68:af:63:4f:99:8c:09:61:26: 31:a3:7a:d8:49:bc:4c:11:ed:7d:08:4c:75:0f:a9: 07:4d:8c:f5:2b:29:84:19:dd:f6:d7:6e:3b:2c:2f: b2:1a:8b:96:3b:c7:9f:57:9d:a3:d7:5d:a8:82:95: a9:d7:1c:bc:7c:81:d6:8e:bf:4b:5b:44:66:a5:9b: 90:d5:2c:e8:cf:53:09:43:9c:6e:a2:9c:11:99:b2: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D5:81:B5:8A:C3:10:88:DA:7F:EB:2E:18:9A:84:D9:2F:45:7E:47 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:24:cb:7b:0f:b5:cf:0c:90:1f:e7:c0:f2:94:a8:cf:d0:c7: c6:21:eb:40:13:d6:70:17:ea:17:de:39:f7:9c:71:ef:91:30: 94:ff:f1:f4:c5:d6:57:02:cc:76:87:a6:e4:d6:5d:a7:14:cb: 07:20:a0:ff:ce:56:62:d4:f5:6c:76:b6:bf:5f:ef:65:aa:87: f1:62:08:55:a0:ee:03:b7:74:d0:85:27:fb:33:88:36:f7:6d: 84:75:62:d5:93:6b:7e:be:47:8b:c8:b4:a5:8a:75:0a:3f:b4: 2f:55:71:28:47:06:b8:1a:3d:95:6d:7a:d6:60:8f:d5:78:ed: a1:1d:01:fc:12:30:80:0f:15:81:d5:ec:5f:2f:b0:f0:e2:63: a0:1e:5d:ab:3a:a6:26:2c:40:a6:69:28:1e:55:5a:8a:dd:ff: 15:d6:fc:9e:0f:57:b9:80:bc:d4:a3:71:2a:e0:2e:37:d5:cd: d1:f7:a3:1a:77:28:d1:a8:7d:05:c9:30:0a:d7:1b:e9:6e:1c: 34:31:07:b5:ef:40:22:65:7c:e2:34:0d:22:71:40:ba:2f:a1: cb:a1:ce:cd:0f:bc:e2:24:e6:7c:eb:a7:ca:24:a9:77:49:cc: 5d:4d:ca:1b:34:ce:04:38:d9:c8:13:57:1d:b6:c3:cc:9d:30: 31:51:a4:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjUwNjE5MDA1NDI3WhcNMjUwNjI2MDA1NDI3WjAYMRYwFAYD VQQDEw02ODUzNWZjMy0wMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlsI9rNPkxcrfPgS8/P7F7DS+K0QrTbQ6Kv4l4FvE+wA3CGiC8zHVB1MTqpV lkyk/7p02+lql1zrM9n+UnCf9AZlyKR7J7fVkQNOeUVPFXbqpvlfnjehmQ3q2EXY UUeHWwjr/USLYrFyfNxHU5AbgBETC8t13vtq7Gem+Wl/Xb4qu4D4oyy90B3B3ado QIftLGX5OXf3l6oNnBFcF4Cv9n15mAJWHWL+k8xor2NPmYwJYSYxo3rYSbxMEe19 CEx1D6kHTYz1KymEGd321247LC+yGouWO8efV52j112ogpWp1xy8fIHWjr9LW0Rm pZuQ1Szoz1MJQ5xuopwRmbLGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvVgbWK wxCI2n/rLhiahNkvRX5HMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxJMt7D7XPDJAf58DylKjP0MfGIetAE9ZwF+oX3jn3nHHvkTCU//H0 xdZXAsx2h6bk1l2nFMsHIKD/zlZi1PVsdra/X+9lqofxYghVoO4Dt3TQhSf7M4g2 922EdWLVk2t+vkeLyLSlinUKP7QvVXEoRwa4Gj2VbXrWYI/VeO2hHQH8EjCADxWB 1exfL7Dw4mOgHl2rOqYmLECmaSgeVVqK3f8V1vyeD1e5gLzUo3Eq4C431c3R96Ma dyjRqH0FyTAK1xvpbhw0MQe170AiZXziNA0icUC6L6HLoc7ND7ziJOZ866fKJKl3 ScxdTcobNM4EONnIE1cdtsPMnTAxUaSC -----END CERTIFICATE-----Generated at Fri Jun 20 07:53:41 2025 by rpki-client