$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: L+Xz2zTo/SgfvGZ27+7/s+o2q/ZVah2tpu8S85vDRZ4= Subject key identifier: 90:FD:8F:E6:BD:91:36:30:0B:BA:4A:B5:0B:C5:2F:61:F9:BE:1A:96 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0D6E Signing time: Sat 14 Jun 2025 17:55:11 +0000 Manifest this update: Sat 14 Jun 2025 17:55:10 +0000 Manifest next update: Sat 21 Jun 2025 17:55:10 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: HeYUYrlRDwYwxWM3+Hd3tr6PUEQHxW6jPKATSfN8ORw=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 4: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: WZVD3OFnLCd+Z+EztJUmZvetknrgOnaCpDqtEU+1mk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3491 (0xda3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Jun 14 17:55:10 2025 GMT Not After : Jun 21 17:55:10 2025 GMT Subject: CN=684db77e-1893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:22:6e:53:5d:dd:ea:96:2e:b8:13:ae:1b: 32:32:eb:0c:b0:72:e2:71:8b:7c:b2:76:71:e9:b5: 57:2f:78:7f:b2:68:b4:05:9a:a7:57:94:02:54:9d: 73:df:3f:5c:9c:9a:e7:29:ad:26:f8:7e:37:2d:49: 23:f9:8f:29:5b:d8:76:79:4f:ca:17:85:c2:c3:a6: 9a:70:eb:11:29:08:38:f4:65:53:b8:4d:7d:77:82: 79:dc:c6:59:3d:bc:7e:a9:dc:4c:18:ef:9f:ac:a4: c7:d2:73:66:91:bf:53:26:5e:22:a0:31:d1:af:69: 23:3d:29:72:36:b9:ed:10:94:9a:20:9e:33:04:dd: ba:1a:a0:1a:a1:0e:94:5e:c5:10:d0:4b:df:9b:a0: 13:53:a6:44:40:fd:fe:bf:c8:09:82:20:f5:b7:ef: 35:56:f2:7a:d1:d7:7c:e4:1e:30:9e:29:e1:e0:a5: bf:3a:42:f0:9c:d5:55:bd:6b:06:4f:55:37:a7:51: cc:2e:ac:b6:cd:7c:7e:73:e0:b1:48:4c:e5:84:46: 83:4c:aa:39:53:5c:6d:b1:b7:ec:b4:cf:95:46:d1: 76:f2:d8:14:d4:d8:66:d2:c4:38:ba:be:4b:45:e0: 17:7e:82:e3:2c:3e:f8:14:85:e0:6b:c1:78:c6:48: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:8F:E6:BD:91:36:30:0B:BA:4A:B5:0B:C5:2F:61:F9:BE:1A:96 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5d:30:e5:80:7c:b4:a3:36:88:33:c2:ff:62:f2:81:04:8d: f7:17:84:79:31:c7:c1:d5:92:d6:e3:2a:e8:fe:55:08:63:af: cb:5f:91:c6:22:4c:d4:b9:ca:e7:be:db:8e:df:ea:18:ab:51: 50:5c:94:3e:de:a1:17:e0:f3:05:20:1e:2d:3f:37:ff:e9:74: f8:04:ea:7b:29:d0:d0:53:31:db:96:15:3f:e0:34:31:be:62: 41:91:7f:22:8b:93:aa:8e:5d:64:3e:3b:31:a5:de:dd:f0:bd: 2b:6a:b7:29:de:0b:a4:99:32:6a:f1:5f:ec:1c:ed:ad:d4:ae: a3:20:76:b2:16:18:e4:ea:c1:a9:0d:cc:7e:a0:34:0f:9a:c9: 07:4a:61:61:0d:cd:af:87:33:3c:8c:0e:f7:e3:2d:8a:df:a1: 99:5c:c6:93:04:52:26:24:10:24:16:96:75:13:66:6f:ee:81: 91:a9:e9:b9:85:51:d1:50:cd:81:17:8e:54:67:1a:0c:ad:da: 63:95:0a:cb:c1:36:bc:34:fd:05:75:19:7a:94:fc:ee:84:7c: 1e:e7:f6:b8:25:53:fd:a3:4f:ca:41:65:78:f5:55:bf:7c:47: 09:99:69:a7:4b:30:e7:6e:ed:e7:d0:83:85:e4:c7:49:91:56: 5c:ef:44:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwNjE0MTc1NTEwWhcNMjUwNjIxMTc1NTEwWjAYMRYwFAYD VQQDEw02ODRkYjc3ZS0xODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hAiblNd3eqWLrgTrhsyMusMsHLicYt8snZx6bVXL3h/smi0BZqnV5QCVJ1z 3z9cnJrnKa0m+H43LUkj+Y8pW9h2eU/KF4XCw6aacOsRKQg49GVTuE19d4J53MZZ Pbx+qdxMGO+frKTH0nNmkb9TJl4ioDHRr2kjPSlyNrntEJSaIJ4zBN26GqAaoQ6U XsUQ0Evfm6ATU6ZEQP3+v8gJgiD1t+81VvJ60dd85B4wninh4KW/OkLwnNVVvWsG T1U3p1HMLqy2zXx+c+CxSEzlhEaDTKo5U1xtsbfstM+VRtF28tgU1Nhm0sQ4ur5L ReAXfoLjLD74FIXga8F4xkj+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD9j+a9 kTYwC7pKtQvFL2H5vhqWMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6XTDlgHy0ozaIM8L/YvKBBI33F4R5McfB1ZLW4yro/lUIY6/LX5HG IkzUucrnvtuO3+oYq1FQXJQ+3qEX4PMFIB4tPzf/6XT4BOp7KdDQUzHblhU/4DQx vmJBkX8ii5Oqjl1kPjsxpd7d8L0rarcp3gukmTJq8V/sHO2t1K6jIHayFhjk6sGp Dcx+oDQPmskHSmFhDc2vhzM8jA734y2K36GZXMaTBFImJBAkFpZ1E2Zv7oGRqem5 hVHRUM2BF45UZxoMrdpjlQrLwTa8NP0FdRl6lPzuhHwe5/a4JVP9o0/KQWV49VW/ fEcJmWmnSzDnbu3n0IOF5MdJkVZc70Ss -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:18 2025 by rpki-client