$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: pNFfoeWl0MtmlZC+dhW2PIrL8315ibVVaZOZXckTpNI= Subject key identifier: 18:91:A2:03:4D:99:A5:5D:9C:AA:00:CD:D4:F2:64:25:DD:18:B7:80 Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03ED Signing time: Thu 03 Jul 2025 00:22:59 +0000 Manifest this update: Thu 03 Jul 2025 00:22:58 +0000 Manifest next update: Thu 10 Jul 2025 00:22:58 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: ebHwAy/5WhS+YIHLzANh+VKGtqs8uBTMZ4szk6bw0Cw=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Jul 3 00:22:58 2025 GMT Not After : Jul 10 00:22:58 2025 GMT Subject: CN=6865cd63-0d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:e8:45:0a:d0:ae:4f:c6:30:82:28:c8:df: 7f:fd:de:81:24:bc:ea:f8:f5:07:b0:e8:25:c2:96: 32:5c:35:4e:7f:8f:6f:05:e9:ee:5c:30:91:37:16: 18:a7:63:85:cb:60:2f:7b:61:f2:15:3a:06:20:8d: 02:d8:ff:5b:79:2e:cd:bf:3f:29:3e:09:32:c2:35: 4d:9d:f3:5e:b9:80:77:ec:a2:ba:53:25:cd:1a:e5: 65:f8:21:01:6d:ff:d6:86:79:d7:19:77:24:01:da: a9:9b:63:ec:68:fc:81:fb:88:93:70:29:c5:e0:81: c7:f6:24:09:8d:ba:53:8e:8f:93:87:85:8b:e5:52: e2:1e:c2:cb:c4:06:7e:a8:ad:93:8c:95:78:1a:c8: ba:68:7c:98:3d:b4:bb:f1:8b:49:5d:10:c1:fe:15: 41:a4:b8:2f:d2:7b:57:72:c3:66:71:c6:84:2c:b1: a5:23:76:8f:b4:a2:64:50:38:86:4f:a9:22:3e:a7: 86:cc:a3:e5:b7:02:2c:5a:0d:a1:a1:83:2e:e4:a3: c5:c3:87:4f:1d:d2:84:ab:30:c6:65:f5:ca:0b:ab: 39:bf:e5:aa:ab:76:78:a1:ae:a1:65:0e:eb:fc:e0: b4:94:c9:dc:e5:f3:9d:1c:50:a7:97:75:09:25:62: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:A2:03:4D:99:A5:5D:9C:AA:00:CD:D4:F2:64:25:DD:18:B7:80 X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a5:f7:97:b1:51:6a:6f:8e:ea:69:e2:ba:61:39:d7:b2:99: e0:87:2f:9c:33:e3:51:19:2e:7f:b1:39:b1:a4:53:ba:88:2f: 84:5a:10:87:24:9f:fc:f7:11:35:67:24:f6:c8:ad:56:e9:f5: 42:20:b9:8c:69:fa:c6:c9:73:6a:22:09:d1:18:8b:de:2e:6f: 16:b2:5d:65:a6:24:c2:c2:01:5a:54:2d:fa:e9:fe:18:bd:fb: 74:9a:4c:92:be:c7:40:3d:18:e2:63:29:1d:60:ba:5e:5c:c0: df:12:cd:86:26:b4:71:ea:18:49:74:5e:2e:02:78:68:69:29: e6:c5:fc:e9:d3:d4:ea:e7:da:a8:84:64:33:36:16:14:c1:0c: 50:83:b4:e9:e1:e8:f5:dd:ed:c1:7f:a5:05:df:06:40:fd:ac: 33:7b:75:de:94:da:df:b2:d2:3b:3f:f6:5a:30:ea:74:ae:11: c4:12:d6:cd:6f:c0:ae:66:83:3e:aa:c7:ad:bb:53:79:f2:5a: 8b:9c:7d:04:4f:d9:b0:27:5a:4d:40:47:d4:fa:7f:0d:6c:a0: 8c:1a:3c:78:91:63:2c:d4:f5:8f:23:96:90:dd:0c:df:be:29: f7:ef:80:58:06:73:a8:fc:67:64:df:18:2f:a9:04:29:41:ac: 8a:92:a4:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwNzAzMDAyMjU4WhcNMjUwNzEwMDAyMjU4WjAYMRYwFAYD VQQDEw02ODY1Y2Q2My0wZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHLoRQrQrk/GMIIoyN9//d6BJLzq+PUHsOglwpYyXDVOf49vBenuXDCRNxYY p2OFy2Ave2HyFToGII0C2P9beS7Nvz8pPgkywjVNnfNeuYB37KK6UyXNGuVl+CEB bf/WhnnXGXckAdqpm2PsaPyB+4iTcCnF4IHH9iQJjbpTjo+Th4WL5VLiHsLLxAZ+ qK2TjJV4Gsi6aHyYPbS78YtJXRDB/hVBpLgv0ntXcsNmccaELLGlI3aPtKJkUDiG T6kiPqeGzKPltwIsWg2hoYMu5KPFw4dPHdKEqzDGZfXKC6s5v+Wqq3Z4oa6hZQ7r /OC0lMnc5fOdHFCnl3UJJWIYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiRogNN maVdnKoAzdTyZCXdGLeAMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJpfeXsVFqb47qaeK6YTnXspnghy+cM+NRGS5/sTmxpFO6iC+EWhCH JJ/89xE1ZyT2yK1W6fVCILmMafrGyXNqIgnRGIveLm8Wsl1lpiTCwgFaVC366f4Y vft0mkySvsdAPRjiYykdYLpeXMDfEs2GJrRx6hhJdF4uAnhoaSnmxfzp09Tq59qo hGQzNhYUwQxQg7Tp4ej13e3Bf6UF3wZA/awze3XelNrfstI7P/ZaMOp0rhHEEtbN b8CuZoM+qsetu1N58lqLnH0ET9mwJ1pNQEfU+n8NbKCMGjx4kWMs1PWPI5aQ3Qzf vin374BYBnOo/Gdk3xgvqQQpQayKkqTU -----END CERTIFICATE-----Generated at Fri Jul 4 01:08:49 2025 by rpki-client