$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: KLgh8HNNnQSIusRHxGUz6lp0bpaeRTCxTVR5fZGJbFI= Subject key identifier: 6D:7A:C7:0A:A8:60:4D:DB:7A:59:EB:A4:F5:F0:83:32:3A:FF:15:D4 Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 017F Signing time: Tue 01 Jul 2025 04:09:34 +0000 Manifest this update: Tue 01 Jul 2025 04:09:34 +0000 Manifest next update: Tue 08 Jul 2025 04:09:34 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: yefy+eX4MxwUFf1WC9Q+Bos8EStsHIUmzL0n9QmHgj8=) 2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=) 3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=) 4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: Jul 1 04:09:34 2025 GMT Not After : Jul 8 04:09:34 2025 GMT Subject: CN=68635f7e-cbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:a3:3f:83:fc:ff:18:43:4b:f8:59:17:91: e3:28:d9:ef:df:64:b6:f0:72:02:77:ee:63:65:64: 18:e5:0c:76:89:34:9d:03:56:1b:ad:7a:7a:31:6d: f0:b2:ed:4a:49:42:e9:83:05:54:e6:90:01:c4:06: ef:1b:91:7f:61:4e:8f:56:e1:c4:a6:09:69:0d:93: 2d:df:d8:a1:0e:9c:44:ea:c9:89:62:91:e2:41:ce: d0:54:66:38:1e:68:4d:3f:d7:67:5f:f8:ec:fd:73: cb:46:96:2a:7b:81:ae:5e:1e:99:1a:33:4e:25:24: bb:ca:99:ee:28:7d:5f:91:d2:5c:34:f7:92:84:65: a6:cc:43:93:c5:f4:97:da:00:18:38:d9:59:f6:5f: e5:2d:80:1f:e0:7e:06:21:93:08:48:a9:d0:ad:a2: 2e:71:dc:d0:77:29:5b:e7:2a:28:66:6c:1b:5c:cf: d5:ac:76:86:3e:b7:00:ad:49:1e:55:d6:98:6b:0f: 9c:24:ce:e1:d6:ed:8e:b1:b1:26:1e:4f:9f:97:e1: 64:93:7e:8f:a9:b5:10:90:e7:b2:9c:4b:8a:a6:ab: 42:e0:5d:70:a9:00:b3:58:6b:c1:49:ed:b6:30:ab: 6e:57:8d:40:a7:27:5b:f0:3c:fc:21:2f:df:ef:97: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7A:C7:0A:A8:60:4D:DB:7A:59:EB:A4:F5:F0:83:32:3A:FF:15:D4 X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:09:1f:d9:f0:68:c9:75:ce:42:33:87:10:a1:3d:63:9a: cb:a2:bc:b2:cc:f0:a8:33:94:ce:11:0e:61:f1:5b:7f:0b:4b: 51:09:56:10:40:20:85:42:7f:ff:13:53:fd:b0:42:de:76:80: ff:fb:9e:b6:87:61:4d:2b:f7:3d:e5:d1:f5:ea:8f:88:da:c0: b8:e8:c0:7d:8b:48:61:b0:94:54:09:d1:bc:5b:43:1c:ea:51: 5c:69:08:23:09:d8:ae:65:5d:f2:af:26:b7:9e:07:5a:63:49: d7:79:11:43:e9:9b:7f:fd:57:a3:e6:70:74:e3:95:61:02:71: 8e:f3:a4:a2:bf:1b:c2:0c:e9:16:03:05:c2:53:7b:76:d5:0d: 71:81:47:03:d4:49:db:ec:0d:d4:d8:7e:63:d1:c9:fc:e7:6e: ad:bb:99:b8:0a:3d:92:90:1c:4f:0d:f9:8d:68:e1:70:f0:20: 33:45:db:a6:51:5e:45:de:20:d6:69:76:4d:33:79:c3:dd:13: d0:2c:c3:17:a6:69:6e:e1:30:db:3c:a9:e8:59:4f:d4:f9:ef: fa:b0:a3:bf:77:0d:6e:51:56:68:45:b6:a1:13:7b:cb:8f:a8: c7:52:4c:4f:71:ba:1f:ae:b2:08:2f:5c:ac:e7:92:c2:1f:51: e1:4f:95:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjUwNzAxMDQwOTM0WhcNMjUwNzA4MDQwOTM0WjAYMRYwFAYD VQQDEw02ODYzNWY3ZS1jYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JijP4P8/xhDS/hZF5HjKNnv32S28HICd+5jZWQY5Qx2iTSdA1YbrXp6MW3w su1KSULpgwVU5pABxAbvG5F/YU6PVuHEpglpDZMt39ihDpxE6smJYpHiQc7QVGY4 HmhNP9dnX/js/XPLRpYqe4GuXh6ZGjNOJSS7ypnuKH1fkdJcNPeShGWmzEOTxfSX 2gAYONlZ9l/lLYAf4H4GIZMISKnQraIucdzQdylb5yooZmwbXM/VrHaGPrcArUke VdaYaw+cJM7h1u2OsbEmHk+fl+Fkk36PqbUQkOeynEuKpqtC4F1wqQCzWGvBSe22 MKtuV41Apydb8Dz8IS/f75dfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG16xwqo YE3belnrpPXwgzI6/xXUMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWygkf2fBoyXXOQjOHEKE9Y5rLoryyzPCoM5TOEQ5h8Vt/C0tRCVYQ QCCFQn//E1P9sELedoD/+562h2FNK/c95dH16o+I2sC46MB9i0hhsJRUCdG8W0Mc 6lFcaQgjCdiuZV3yrya3ngdaY0nXeRFD6Zt//Vej5nB045VhAnGO86SivxvCDOkW AwXCU3t21Q1xgUcD1Enb7A3U2H5j0cn8526tu5m4Cj2SkBxPDfmNaOFw8CAzRdum UV5F3iDWaXZNM3nD3RPQLMMXpmlu4TDbPKnoWU/U+e/6sKO/dw1uUVZoRbahE3vL j6jHUkxPcbofrrIIL1ys55LCH1HhT5Uq -----END CERTIFICATE-----Generated at Wed Jul 2 13:41:28 2025 by rpki-client