$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft File: i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json) Hash identifier: k6Ae7vFgxnhzJ+1G/kyGEajU0d9fU5fOgBYw62ygkK0= Subject key identifier: B4:32:73:47:A0:88:18:67:6F:F1:E5:72:78:B8:99:C0:87:4C:24:1D Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft Manifest number: 8D Signing time: Thu 03 Jul 2025 06:40:31 +0000 Manifest this update: Thu 03 Jul 2025 06:40:31 +0000 Manifest next update: Thu 10 Jul 2025 06:40:31 +0000 Files and hashes: 1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: cnMlxP+LedtkB3UADSUDNhkYZVyDAipKF47KJ1Y7MiM=) 2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: DRt8K6jlAria6yTB9gWZIhOKN+7LEqAGx7rHUxgtPQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A Validity Not Before: Jul 3 06:40:31 2025 GMT Not After : Jul 10 06:40:31 2025 GMT Subject: CN=686625df-d879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:20:ec:bf:e5:55:24:2f:af:f2:b6:9b:21: 97:4b:d6:e5:26:33:7b:a8:9f:cb:ee:d7:02:24:19: 55:ae:98:2c:99:6c:62:db:f6:a1:7d:c7:87:cd:7c: 58:cb:a5:d2:88:98:08:a3:57:d9:ec:4b:04:10:8f: 3d:41:78:61:98:2f:b4:e6:e6:57:92:e3:a3:1a:f1: 0c:fa:6f:64:0f:e2:67:6a:38:d8:8a:f1:8a:ee:1b: 50:4f:42:cf:91:30:b0:f3:76:78:c2:06:66:bc:de: 8e:30:e3:5a:f9:1f:fb:ab:6a:90:9b:21:ae:07:27: a7:55:d8:2c:b3:b5:d4:73:82:76:6f:aa:eb:91:c4: 8b:b2:a8:4e:ce:45:cf:0c:eb:c3:be:fc:b9:21:01: 06:de:dc:ef:ad:cf:a7:6d:d1:5e:93:12:d4:37:d7: d3:0e:80:8c:88:10:5e:ef:44:be:4f:5f:a1:f7:0c: 77:9b:51:3a:d7:64:bd:08:fb:c2:b1:9c:15:e5:d9: 78:4e:b4:83:39:d7:01:20:c7:7a:57:bc:35:dc:a7: fb:b7:80:97:76:30:81:9d:ce:bb:1d:e0:3a:7f:d7: b5:f0:4a:0a:8a:64:e4:11:29:9e:5e:af:98:0e:24: 21:6b:77:56:1b:87:ad:18:e4:72:ab:a9:0f:ab:fa: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:32:73:47:A0:88:18:67:6F:F1:E5:72:78:B8:99:C0:87:4C:24:1D X509v3 Authority Key Identifier: keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:38:6e:b8:0d:26:89:34:12:87:5a:57:17:34:6d:ca:97:50: bd:33:d9:26:d5:ef:92:02:d0:aa:51:5c:e7:c8:b0:51:be:4a: b4:dc:d2:66:de:90:27:b8:91:81:c7:39:43:29:db:d4:79:9d: 3d:e2:5b:d3:47:fa:bd:c8:a6:84:3d:cf:a1:26:24:e5:a2:d8: 00:49:b9:38:fd:bb:89:8a:2d:13:e0:ff:7d:cd:66:07:de:02: 3c:45:72:39:69:17:63:a7:31:56:09:8c:d2:8d:6c:77:07:28: 77:60:6e:dd:23:b7:24:e0:49:8c:f9:8c:99:fb:80:f6:99:cb: 8f:30:7e:f6:f2:7c:ae:8c:c1:6b:94:0b:d9:58:92:f4:3e:98: b3:02:be:bf:f2:2a:f0:bf:9d:3e:c5:78:3a:24:3e:30:ff:f5: 70:ea:d7:c3:17:55:70:ce:52:11:2d:93:72:1d:28:d6:d4:1e: 92:1f:90:2e:7c:e8:2c:01:70:e6:10:ea:92:41:f1:4b:f5:1c: 82:cb:02:90:d2:2a:8f:37:df:83:74:4d:a0:12:36:54:b2:35: ed:68:75:a4:50:d9:1b:30:5c:b1:f5:8a:3c:c2:57:10:2a:98: 5c:7d:af:a2:0c:e3:30:cb:13:8e:72:d8:cc:92:17:6d:93:10: f9:ac:e3:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDhCNUU4RUJBQkUwOUExRjQ5M0QxMDI1M0MxQTNCOTM5 MzlCRkNBOEEwHhcNMjUwNzAzMDY0MDMxWhcNMjUwNzEwMDY0MDMxWjAYMRYwFAYD VQQDEw02ODY2MjVkZi1kODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQMg7L/lVSQvr/K2myGXS9blJjN7qJ/L7tcCJBlVrpgsmWxi2/ahfceHzXxY y6XSiJgIo1fZ7EsEEI89QXhhmC+05uZXkuOjGvEM+m9kD+JnajjYivGK7htQT0LP kTCw83Z4wgZmvN6OMONa+R/7q2qQmyGuByenVdgss7XUc4J2b6rrkcSLsqhOzkXP DOvDvvy5IQEG3tzvrc+nbdFekxLUN9fTDoCMiBBe70S+T1+h9wx3m1E612S9CPvC sZwV5dl4TrSDOdcBIMd6V7w13Kf7t4CXdjCBnc67HeA6f9e18EoKimTkESmeXq+Y DiQha3dWG4etGORyq6kPq/rd2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQyc0eg iBhnb/Hlcni4mcCHTCQdMB8GA1UdIwQYMBaAFItejrq+CaH0k9ECU8GjuTk5v8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8xQTM2MkE1Njgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9pMTZPdXI0Sm9mU1QwUUpUd2FPNU9UbV95 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2kxNk91cjRKb2ZTVDBRSlR3YU81T1RtX3lvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8xQTM2MkE1NjgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9pMTZPdXI0Sm9m U1QwUUpUd2FPNU9UbV95b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwOG64DSaJNBKHWlcXNG3Kl1C9M9km1e+SAtCqUVznyLBRvkq03NJm 3pAnuJGBxzlDKdvUeZ094lvTR/q9yKaEPc+hJiTlotgASbk4/buJii0T4P99zWYH 3gI8RXI5aRdjpzFWCYzSjWx3Byh3YG7dI7ck4EmM+YyZ+4D2mcuPMH728nyujMFr lAvZWJL0PpizAr6/8irwv50+xXg6JD4w//Vw6tfDF1VwzlIRLZNyHSjW1B6SH5Au fOgsAXDmEOqSQfFL9RyCywKQ0iqPN9+DdE2gEjZUsjXtaHWkUNkbMFyx9Yo8wlcQ Kphcfa+iDOMwyxOOctjMkhdtkxD5rOM3 -----END CERTIFICATE-----Generated at Fri Jul 4 11:16:48 2025 by rpki-client