$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json) Hash identifier: B6/tMbixLKo/m2ZcNwuz3ZBkI91LVU5wSiRsBE+Zt6I= Subject key identifier: EF:CA:05:09:84:22:41:60:A3:0E:D6:51:ED:1D:4C:82:F7:E2:72:9C Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft Manifest number: 01F1 Signing time: Fri 13 Jun 2025 01:34:53 +0000 Manifest this update: Fri 13 Jun 2025 01:34:52 +0000 Manifest next update: Fri 20 Jun 2025 01:34:52 +0000 Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: 8g6DyVd0DB+43zRLIeKIEFeQMXOpcgXWv7Q82GjE7IE=) 2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: QhihCyN5bbG8v0q4aS9nZCy8ZGeOjrQ8K/ICbkjXPrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Jun 13 01:34:52 2025 GMT Not After : Jun 20 01:34:52 2025 GMT Subject: CN=684b803d-3b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:dd:20:f8:56:30:b2:ae:83:49:98:ca:30: 6b:f9:11:69:3b:94:aa:cc:5b:a0:2d:71:ae:3a:2e: 56:e5:2e:d6:0c:7c:3e:7c:13:bf:d4:0a:f5:76:f7: a0:2a:7f:e7:9c:e8:99:2b:06:18:ad:87:7e:19:1a: 5b:2e:b9:b4:51:01:c8:08:b8:8a:38:43:be:21:4e: 27:cb:38:b4:70:e8:9c:f0:f6:be:fb:27:bb:39:90: 8e:78:2f:c0:58:e2:f5:aa:9e:b5:8d:ae:40:68:98: da:18:d6:d0:f6:00:c3:65:71:5a:62:f4:0f:d3:5f: 4e:04:fd:70:be:60:2a:10:d1:1b:22:24:4c:9c:59: 4f:59:f8:50:da:b2:fe:0a:f0:c4:78:61:24:0b:02: 86:d0:9c:f8:8b:6a:9e:69:d4:aa:e5:48:fe:18:d3: 68:5d:e4:41:60:bf:da:af:d2:aa:6a:0b:49:41:a5: 78:5e:c7:9b:96:04:a0:1b:ab:39:64:38:be:c6:41: 51:e6:df:ee:7c:62:91:a7:9e:27:bc:6b:dd:e3:f2: 06:03:be:d3:c9:fa:bc:87:95:ef:65:c1:89:8a:12: da:61:a2:1e:4a:a4:93:b9:6f:31:8c:49:55:4e:9c: d7:3e:83:8c:2c:ee:a3:fd:10:0b:d3:96:81:f0:c5: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:05:09:84:22:41:60:A3:0E:D6:51:ED:1D:4C:82:F7:E2:72:9C X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2f:0e:23:6d:81:e7:f2:ea:4c:aa:45:df:eb:40:d7:e9:2f: 06:24:2b:0a:00:d6:6a:a4:55:6b:7f:4b:33:ca:03:aa:9b:bb: ea:8b:99:ae:a3:4c:80:28:8b:6a:3b:93:4c:6c:ce:75:1d:a8: ff:8a:ce:d6:ec:04:a6:3a:9d:a3:76:d4:06:8c:c9:62:d8:dd: ac:db:0c:e4:4a:88:f3:32:45:9b:fa:a4:f8:19:b8:a2:7f:ac: bf:84:4d:9b:3c:55:9a:b6:27:24:8f:85:28:3b:aa:37:30:e6: 35:27:11:d6:bd:e4:c0:6b:e1:ba:d6:77:24:53:eb:d8:c8:ac: 3c:72:57:fc:a7:99:47:78:05:2a:d5:05:ff:98:65:45:00:d0: 85:44:22:b3:10:87:98:26:4b:21:2c:f1:f8:e1:32:e3:2c:d5: 78:91:b9:13:56:fc:5e:16:89:30:fa:be:a6:93:2d:9f:c5:c1: a4:0d:89:08:80:f0:46:e6:44:6a:93:13:5b:b6:f6:1d:2f:10: 63:c6:1b:13:31:90:19:89:09:31:12:f6:c1:52:58:e2:6c:09: 04:4e:f0:37:9b:fd:b1:9d:05:1a:f0:9b:a6:ac:b7:1f:60:a4: 65:56:4f:ac:e0:4c:ab:7b:78:54:d8:00:54:f0:0c:e9:f4:a0: 45:d9:00:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUwNjEzMDEzNDUyWhcNMjUwNjIwMDEzNDUyWjAYMRYwFAYD VQQDEw02ODRiODAzZC0zYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyezdIPhWMLKug0mYyjBr+RFpO5SqzFugLXGuOi5W5S7WDHw+fBO/1Ar1dveg Kn/nnOiZKwYYrYd+GRpbLrm0UQHICLiKOEO+IU4nyzi0cOic8Pa++ye7OZCOeC/A WOL1qp61ja5AaJjaGNbQ9gDDZXFaYvQP019OBP1wvmAqENEbIiRMnFlPWfhQ2rL+ CvDEeGEkCwKG0Jz4i2qeadSq5Uj+GNNoXeRBYL/ar9KqagtJQaV4XseblgSgG6s5 ZDi+xkFR5t/ufGKRp54nvGvd4/IGA77Tyfq8h5XvZcGJihLaYaIeSqSTuW8xjElV TpzXPoOMLO6j/RAL05aB8MVDPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/KBQmE IkFgow7WUe0dTIL34nKcMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHLw4jbYHn8upMqkXf60DX6S8GJCsKANZqpFVrf0szygOqm7vqi5mu o0yAKItqO5NMbM51Haj/is7W7ASmOp2jdtQGjMli2N2s2wzkSojzMkWb+qT4Gbii f6y/hE2bPFWatickj4UoO6o3MOY1JxHWveTAa+G61nckU+vYyKw8clf8p5lHeAUq 1QX/mGVFANCFRCKzEIeYJkshLPH44TLjLNV4kbkTVvxeFokw+r6mky2fxcGkDYkI gPBG5kRqkxNbtvYdLxBjxhsTMZAZiQkxEvbBUljibAkETvA3m/2xnQUa8JumrLcf YKRlVk+s4Eyre3hU2ABU8Azp9KBF2QCp -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:31 2025 by rpki-client