$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft File: pK73BplO997sjIomg0NykQSEsbA.mft (raw, json) Hash identifier: eLujMYFOD/xTiY6nDfazxAU/Sn7yKVrQStha1PesuFA= Subject key identifier: B3:62:10:E1:B2:2A:52:3B:59:52:B1:03:7E:E9:38:45:79:72:26:7E Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0 Certificate issuer: /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0 Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft Manifest number: 06A6 Signing time: Sat 14 Jun 2025 21:56:56 +0000 Manifest this update: Sat 14 Jun 2025 21:56:55 +0000 Manifest next update: Sat 21 Jun 2025 21:56:55 +0000 Files and hashes: 1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: M62dgvYNpls34jFY6d5il+3Wp/CwFklFLwWOYlhUCBM=) 2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: 4hu+Ea1WW3aPEC6/j9KPgOfcmbDhbVy01ftALoJDrTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196412, serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0 Validity Not Before: Jun 14 21:56:55 2025 GMT Not After : Jun 21 21:56:55 2025 GMT Subject: CN=684df027-ed16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:cc:62:0f:7f:62:15:6f:86:11:be:b4:d1: c1:57:94:80:5d:ce:7b:5f:59:04:e3:3f:e2:87:bc: 74:8f:8c:40:90:f8:8e:19:67:25:5f:3f:6d:b0:d3: 49:3d:da:d1:3d:8e:f9:5a:22:f2:e9:93:ff:0d:ca: f2:a7:71:33:52:49:fa:f0:68:90:94:41:22:9c:85: 00:d7:3f:5c:5b:fa:45:ea:41:bf:88:ad:8c:83:bf: bf:ec:20:64:8b:a3:a6:6b:d7:c5:dd:e2:ba:41:03: 9f:90:db:34:60:26:98:e0:e4:be:4a:5a:e0:ca:36: 64:de:98:2b:a3:ef:6c:fe:1d:5f:fa:73:6c:bc:96: 06:10:26:2d:c3:9b:f4:cb:9a:83:12:e7:92:22:59: 4a:43:1e:40:83:96:1c:e7:05:e1:ed:e5:3b:fa:60: 33:52:e0:50:e9:c7:fe:ea:8a:f9:6e:af:26:c4:3e: 34:9b:9a:f0:df:dc:88:ed:c3:df:c5:0f:07:e6:25: 1e:96:dd:ef:32:f4:cd:49:0f:9a:df:ce:c4:53:0d: a6:ba:2d:49:0d:64:94:e2:7a:db:ff:5c:51:49:59: fe:72:e5:0d:37:37:a2:fc:a9:c7:48:e4:f7:46:25: 58:20:8e:52:02:f9:7f:4b:ef:03:b9:a9:93:9c:69: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:62:10:E1:B2:2A:52:3B:59:52:B1:03:7E:E9:38:45:79:72:26:7E X509v3 Authority Key Identifier: keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b5:5c:45:7d:bc:e4:46:c2:0d:17:8f:f5:5a:04:61:80:ed: 03:9f:bd:eb:81:dd:7b:4a:d2:26:f6:3c:4b:0e:17:b4:65:49: 27:2c:73:ea:50:83:7c:b5:f3:51:c3:be:aa:69:08:34:a6:ae: f2:9c:50:ee:7d:d9:cb:c4:f5:37:b9:3f:88:2a:e5:e5:89:8d: 77:6b:74:92:f3:54:bc:d6:a8:54:69:f7:9d:fd:50:e7:f5:ef: 4e:1a:4a:61:13:a9:0f:18:ad:1b:5a:1c:a2:4c:a8:e5:a8:81: c0:41:6d:09:3a:e4:0c:d6:6a:e5:ef:28:4e:93:5b:0c:ea:4d: df:12:74:75:58:21:6b:33:06:c2:98:36:c9:80:08:98:fa:70: 33:f4:2f:fe:99:37:a5:bb:a1:e6:4c:17:24:e0:19:c3:a8:ea: d0:64:c6:1f:02:d6:69:94:a7:ee:be:ec:3f:27:64:0f:16:e7: 54:22:ff:8d:ab:3a:91:df:5d:2d:bb:bf:2b:aa:5c:91:c6:29: 66:45:64:0f:2a:7a:7a:0d:10:01:4b:bc:0f:52:20:c6:d9:21: a7:29:c2:c4:01:b9:cc:4c:de:95:16:ca:47:d1:59:8e:c3:bd: bd:23:05:ca:cc:a6:98:69:de:70:d9:47:ca:2d:11:4a:b3:78: 14:ab:a2:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0MTIxMTAvBgNVBAUTKEE0QUVGNzA2OTk0RUY3REVFQzhDOEEyNjgzNDM3Mjkx MDQ4NEIxQjAwHhcNMjUwNjE0MjE1NjU1WhcNMjUwNjIxMjE1NjU1WjAYMRYwFAYD VQQDEw02ODRkZjAyNy1lZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6TMYg9/YhVvhhG+tNHBV5SAXc57X1kE4z/ih7x0j4xAkPiOGWclXz9tsNNJ PdrRPY75WiLy6ZP/Dcryp3EzUkn68GiQlEEinIUA1z9cW/pF6kG/iK2Mg7+/7CBk i6Oma9fF3eK6QQOfkNs0YCaY4OS+SlrgyjZk3pgro+9s/h1f+nNsvJYGECYtw5v0 y5qDEueSIllKQx5Ag5Yc5wXh7eU7+mAzUuBQ6cf+6or5bq8mxD40m5rw39yI7cPf xQ8H5iUelt3vMvTNSQ+a387EUw2mui1JDWSU4nrb/1xRSVn+cuUNNzei/KnHSOT3 RiVYII5SAvl/S+8DuamTnGmf7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNiEOGy KlI7WVKxA37pOEV5ciZ+MB8GA1UdIwQYMBaAFKSu9waZTvfe7IyKJoNDcpEEhLGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQxMi9BOEQ2NjI0MDZG OUExMUVCOEExM0RGMTdDNEY5QUUwMi9wSzczQnBsTzk5N3NqSW9tZzBOeWtRU0Vz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BLNzNCcGxPOTk3c2pJb21nME55a1FTRXNiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQxMi9BOEQ2NjI0MDZGOUExMUVCOEExM0RGMTdDNEY5QUUwMi9wSzczQnBsTzk5 N3NqSW9tZzBOeWtRU0VzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYtVxFfbzkRsINF4/1WgRhgO0Dn73rgd17StIm9jxLDhe0ZUknLHPq UIN8tfNRw76qaQg0pq7ynFDufdnLxPU3uT+IKuXliY13a3SS81S81qhUafed/VDn 9e9OGkphE6kPGK0bWhyiTKjlqIHAQW0JOuQM1mrl7yhOk1sM6k3fEnR1WCFrMwbC mDbJgAiY+nAz9C/+mTelu6HmTBck4BnDqOrQZMYfAtZplKfuvuw/J2QPFudUIv+N qzqR310tu78rqlyRxilmRWQPKnp6DRABS7wPUiDG2SGnKcLEAbnMTN6VFspH0VmO w729IwXKzKaYad5w2UfKLRFKs3gUq6KY -----END CERTIFICATE-----Generated at Sun Jun 15 05:05:19 2025 by rpki-client