$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: Lyojtstg1nfUqceGhBfdo7FvoyoFeMxw5m5hwPAeWBM= Subject key identifier: 80:D6:27:21:FC:F4:7F:0D:DD:95:B2:76:42:07:21:1E:CF:77:D9:0C Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0161 Signing time: Tue 17 Jun 2025 03:02:44 +0000 Manifest this update: Tue 17 Jun 2025 03:02:44 +0000 Manifest next update: Tue 24 Jun 2025 03:02:44 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: uaqcu25XPHb3IfJIvCVJwfHR8IrNweWwtbn2mRF3xoM=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Jun 17 03:02:44 2025 GMT Not After : Jun 24 03:02:44 2025 GMT Subject: CN=6850dad4-b1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:36:c2:e2:86:95:90:d4:ef:be:92:a0:39: 69:46:07:02:51:e8:9a:5b:d8:d8:a2:ca:59:59:ac: b6:8d:47:bb:8b:95:c3:8e:e2:f7:d1:fe:10:c1:01: 70:a4:6c:7b:6f:61:b5:7e:55:b8:65:f8:4a:b2:78: ba:77:ed:5c:3a:44:da:3b:f2:85:df:1e:aa:6e:30: b1:22:ba:6b:f5:35:8b:5a:25:8c:48:f7:40:ec:5a: e2:ee:f7:08:ce:28:64:a3:85:dc:9d:49:5f:67:de: 06:db:d5:7f:ae:c0:2f:03:43:43:25:0f:90:7a:00: 0b:d3:9d:1a:57:5d:c2:76:4f:93:37:cc:ee:29:8a: 29:cb:a9:cb:86:1c:c6:2c:0f:29:7d:4e:aa:b9:7d: 54:6a:18:77:44:0d:cf:ed:17:43:96:d9:72:06:0d: b0:a1:9b:f1:6b:a4:55:5d:4b:fb:57:69:fe:c1:9c: c5:bc:28:ca:54:84:96:bf:4a:5c:35:80:3b:15:04: 6e:83:dd:d7:7a:61:8d:ec:dd:5f:01:e0:ba:67:90: 65:de:17:e8:0b:dd:d3:28:6a:9d:58:1e:06:91:27: 59:52:38:23:95:7e:f4:2e:6b:3b:97:7e:74:b0:9d: 86:fd:63:2f:e4:0d:b7:db:58:fe:91:11:63:5c:5d: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D6:27:21:FC:F4:7F:0D:DD:95:B2:76:42:07:21:1E:CF:77:D9:0C X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ba:1a:ba:91:f4:d2:f0:22:b1:f4:72:a9:09:4a:b7:8a:65: 58:c9:b0:c1:01:0a:fe:d9:a4:04:c0:7d:86:3a:bd:84:50:85: b3:fb:0f:e3:79:ca:96:51:42:a4:f8:d9:54:05:81:f6:5c:ee: 66:84:73:b5:19:23:7a:b5:ee:cd:26:24:d6:60:ab:e2:80:c5: 45:cd:de:cc:d6:1a:ff:7f:3f:5b:e0:fe:f4:63:22:af:a2:8f: 87:52:25:a3:43:97:b4:63:07:d2:14:2c:a3:09:45:08:a4:5d: 44:1a:01:f7:d1:1b:c3:3c:45:ee:54:b7:55:17:ed:6c:f5:81: 94:7a:63:37:b1:a0:00:2a:e0:06:ea:73:1f:16:80:a6:c5:00: 15:d3:ea:4a:d0:7c:6d:96:7a:06:78:08:75:62:9d:cb:51:a6: 3d:da:e1:fb:46:04:48:43:15:ab:28:3a:f0:36:b4:e2:17:7f: 09:88:14:c7:6d:41:57:1e:96:12:67:71:0a:60:96:e6:8b:fd: 80:0a:68:4d:2c:3c:94:d4:ec:f4:81:6c:60:f0:7c:67:40:1f: 8e:14:cd:86:0a:fe:45:7e:05:55:0a:1a:22:7e:67:b7:82:c4: f3:6d:8f:31:cf:0d:5d:0b:80:8d:83:b4:02:a5:ad:25:de:c2: 0f:26:76:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwNjE3MDMwMjQ0WhcNMjUwNjI0MDMwMjQ0WjAYMRYwFAYD VQQDEw02ODUwZGFkNC1iMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVk2wuKGlZDU776SoDlpRgcCUeiaW9jYospZWay2jUe7i5XDjuL30f4QwQFw pGx7b2G1flW4ZfhKsni6d+1cOkTaO/KF3x6qbjCxIrpr9TWLWiWMSPdA7Fri7vcI zihko4XcnUlfZ94G29V/rsAvA0NDJQ+QegAL050aV13Cdk+TN8zuKYopy6nLhhzG LA8pfU6quX1Uahh3RA3P7RdDltlyBg2woZvxa6RVXUv7V2n+wZzFvCjKVISWv0pc NYA7FQRug93XemGN7N1fAeC6Z5Bl3hfoC93TKGqdWB4GkSdZUjgjlX70Lms7l350 sJ2G/WMv5A2321j+kRFjXF3xpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDWJyH8 9H8N3ZWydkIHIR7Pd9kMMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIuhq6kfTS8CKx9HKpCUq3imVYybDBAQr+2aQEwH2GOr2EUIWz+w/j ecqWUUKk+NlUBYH2XO5mhHO1GSN6te7NJiTWYKvigMVFzd7M1hr/fz9b4P70YyKv oo+HUiWjQ5e0YwfSFCyjCUUIpF1EGgH30RvDPEXuVLdVF+1s9YGUemM3saAAKuAG 6nMfFoCmxQAV0+pK0HxtlnoGeAh1Yp3LUaY92uH7RgRIQxWrKDrwNrTiF38JiBTH bUFXHpYSZ3EKYJbmi/2ACmhNLDyU1Oz0gWxg8HxnQB+OFM2GCv5FfgVVChoifme3 gsTzbY8xzw1dC4CNg7QCpa0l3sIPJnZg -----END CERTIFICATE-----Generated at Thu Jun 19 01:08:38 2025 by rpki-client