$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json) Hash identifier: 5BpuUB+5PJ7oD6mTlVCB2Ij3LOtszAFBCByUMWK9qCM= Subject key identifier: 1C:14:BB:CD:6C:4F:17:50:32:80:7E:C6:E4:62:BA:08:D5:2D:AE:4E Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft Manifest number: 0826 Signing time: Thu 12 Jun 2025 20:32:46 +0000 Manifest this update: Thu 12 Jun 2025 20:32:46 +0000 Manifest next update: Thu 19 Jun 2025 20:32:46 +0000 Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: L9i+FWff/pEuC2Y+fJRXh8vQs8YLR+RE+2fIK/y8/GE=) 2: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: ZWM4HJUjC3JgAEYknxCATq6PGI5BXk42LHpdEZQRJ0I=) 3: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: oVaIkIIp594wdZKn2XCmHgy069EyuIaCAvG8B279YGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D02, serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE Validity Not Before: Jun 12 20:32:46 2025 GMT Not After : Jun 19 20:32:46 2025 GMT Subject: CN=684b396e-7bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f8:54:2a:8c:6c:9d:37:07:7b:63:37:6a:0c: 60:19:3c:64:79:82:31:83:5c:ac:5b:77:11:90:e8: f4:c7:cd:cf:e1:03:2a:46:7d:f1:87:b5:6e:9b:dd: dc:5c:54:55:e8:f8:7e:63:77:2d:38:19:bc:fc:36: 37:57:4c:b7:db:e2:27:c9:08:98:71:2f:b0:0f:0b: 83:0e:b8:63:f9:d4:ba:8e:13:d4:a4:c1:3c:13:b2: d9:b2:28:bb:2f:93:da:38:b6:f6:18:a9:9b:07:72: de:68:91:18:1f:71:90:ee:e4:6e:06:09:7a:0e:af: 3f:fe:07:b9:4d:b3:0d:23:35:a0:8d:c9:8e:73:77: c7:53:ec:d4:4c:1f:9b:03:ac:35:11:6a:09:e8:12: 1c:b3:c0:5b:d4:82:32:b8:d2:92:d7:5c:4a:9c:6a: af:b3:73:2f:d6:69:91:46:18:1d:e7:77:10:ca:3c: bd:5c:d4:d8:77:26:d5:bb:8a:02:6c:a2:68:99:0b: fc:a0:d9:c1:8d:54:c2:a5:ec:63:fc:39:8c:98:35: e5:6b:27:d3:c7:38:f6:fe:24:58:f9:ac:e0:41:bb: 8c:40:a0:3f:71:be:f1:29:cd:6b:60:59:13:08:49: ce:f8:1c:aa:1b:91:41:0b:8b:3b:5f:22:22:a4:d9: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:BB:CD:6C:4F:17:50:32:80:7E:C6:E4:62:BA:08:D5:2D:AE:4E X509v3 Authority Key Identifier: keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c1:7d:f1:03:ea:2c:da:b9:05:93:5a:b0:41:d4:a7:36:df: de:3e:1b:cd:ad:40:45:62:0b:2e:a8:62:32:84:a2:96:df:a4: be:79:0f:ee:86:c9:b0:11:b3:da:24:37:15:4c:6f:6c:91:4c: fb:1e:be:37:9a:47:9d:f7:aa:3d:95:81:b6:bd:8e:73:9d:d5: 31:7a:01:4d:25:de:85:21:cb:14:0e:2c:16:f1:4c:1e:d5:fa: d8:41:de:03:02:99:99:ff:3a:33:c5:21:4e:d8:83:87:b1:53: c2:a3:b2:9a:01:30:2f:17:a7:4c:41:ae:4d:e7:1e:be:f7:11: 88:33:c5:55:d7:7f:1d:71:02:54:35:df:b9:61:8a:f7:ba:ed: f2:1a:bc:80:39:68:f2:2b:54:d0:b2:8e:6c:17:a9:49:ba:1f: e2:4a:54:e5:2f:84:e5:33:29:e3:af:a3:45:82:15:1e:42:cc: a6:79:fe:e0:36:14:13:4a:7e:68:c1:7d:bd:f1:b8:00:1d:7e: 13:c4:6e:e9:3d:03:80:71:bf:30:53:40:5e:a9:7b:8b:54:85: 3b:0d:df:33:aa:e5:ed:81:e5:8b:23:cb:91:5c:8d:a8:06:ac: f8:76:2e:9e:6b:c3:1a:c2:31:59:fc:2e:e9:08:3a:06:6e:19: 7f:0d:e7:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMDIxMTAvBgNVBAUTKEZDRTM2ODU1NDU2MDdBQzNCQ0MzMzQwRDAzOUIyMTY4 ODI3MTI3QkUwHhcNMjUwNjEyMjAzMjQ2WhcNMjUwNjE5MjAzMjQ2WjAYMRYwFAYD VQQDEw02ODRiMzk2ZS03YmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PhUKoxsnTcHe2M3agxgGTxkeYIxg1ysW3cRkOj0x83P4QMqRn3xh7Vum93c XFRV6Ph+Y3ctOBm8/DY3V0y32+InyQiYcS+wDwuDDrhj+dS6jhPUpME8E7LZsii7 L5PaOLb2GKmbB3LeaJEYH3GQ7uRuBgl6Dq8//ge5TbMNIzWgjcmOc3fHU+zUTB+b A6w1EWoJ6BIcs8Bb1IIyuNKS11xKnGqvs3Mv1mmRRhgd53cQyjy9XNTYdybVu4oC bKJomQv8oNnBjVTCpexj/DmMmDXlayfTxzj2/iRY+azgQbuMQKA/cb7xKc1rYFkT CEnO+ByqG5FBC4s7XyIipNl8HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwUu81s TxdQMoB+xuRiugjVLa5OMB8GA1UdIwQYMBaAFPzjaFVFYHrDvMM0DQObIWiCcSe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQwMi8yOEE1MDZGQUQ4 NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2VzTzh3elFOQTVzaGFJSnhK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PTm9WVVZnZXNPOHd6UU5BNXNoYUlKeEo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQwMi8yOEE1MDZGQUQ4NjcxMUVBOEI1MTYyMERDNEY5QUUwMi9fT05vVlVWZ2Vz Tzh3elFOQTVzaGFJSnhKNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANwX3xA+os2rkFk1qwQdSnNt/ePhvNrUBFYgsuqGIyhKKW36S+eQ/u hsmwEbPaJDcVTG9skUz7Hr43mked96o9lYG2vY5zndUxegFNJd6FIcsUDiwW8Uwe 1frYQd4DApmZ/zozxSFO2IOHsVPCo7KaATAvF6dMQa5N5x6+9xGIM8VV138dcQJU Nd+5YYr3uu3yGryAOWjyK1TQso5sF6lJuh/iSlTlL4TlMynjr6NFghUeQsymef7g NhQTSn5owX298bgAHX4TxG7pPQOAcb8wU0BeqXuLVIU7Dd8zquXtgeWLI8uRXI2o Bqz4di6ea8MawjFZ/C7pCDoGbhl/Dedh -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:14 2025 by rpki-client