$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json) Hash identifier: yyAwp3EhZ/RYe5AVpMywXJC6UZo9w68Jw+HEEzyLauI= Subject key identifier: B7:4F:C4:60:C1:CC:89:67:DA:E8:10:DC:A6:D2:95:89:B5:2A:64:C5 Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Certificate serial: 05EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft Manifest number: 05E5 Signing time: Wed 02 Jul 2025 23:16:31 +0000 Manifest this update: Wed 02 Jul 2025 23:16:30 +0000 Manifest next update: Wed 09 Jul 2025 23:16:30 +0000 Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: vYrlJBDN7xUloaArcSg2pYaW5J+b4JsKgKWsrPuPNow=) 2: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: 0H9iVWOcGuVvN/MVa3XeV+I+PG+LvrsVTNSfk98zbHw=) 3: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: DsgHJydaVuiP2/JOiaGz7+8hzbblvMVmJcBWMtJLoOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1519 (0x5ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Validity Not Before: Jul 2 23:16:30 2025 GMT Not After : Jul 9 23:16:30 2025 GMT Subject: CN=6865bdce-e442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:a1:30:86:94:03:34:75:52:77:13:2e:d7: 34:35:7d:bd:d4:c9:c6:22:fd:41:91:ba:95:1e:b8: 82:23:7a:ca:e9:1e:b3:1e:f9:49:42:f1:f6:c8:3d: bb:3f:4d:c8:63:cc:04:5c:71:c1:ed:6f:23:f7:60: 7e:82:b4:9f:65:34:e0:42:a0:f2:1e:f4:dc:ee:cd: b0:3f:39:19:b5:5a:57:e7:26:a0:e9:ab:c1:54:3c: ef:7b:fa:30:04:9d:24:bb:72:68:40:b7:dc:f4:d4: 3d:61:45:76:00:8f:2d:20:1f:fe:57:47:0e:93:f2: 6b:34:56:89:2c:9c:5e:c0:a0:77:a2:e4:b8:14:94: 37:a4:09:c3:83:77:04:bc:47:56:01:59:b6:db:3f: 18:5c:4d:73:5e:b6:64:be:70:cf:22:ea:88:cb:6a: d8:4b:22:92:10:06:f4:3a:68:5d:23:b6:f9:0e:3a: 72:b1:4e:80:d6:d8:a9:46:5b:ef:65:bc:ae:50:19: 0f:b0:1e:ee:6a:5f:04:91:66:8f:cc:0b:15:98:7c: 3b:0e:d7:f3:12:37:72:56:af:19:b1:77:9d:54:2a: ac:3c:ba:c4:45:0d:69:a6:ed:b4:56:ba:7a:e2:97: 93:63:47:4b:08:23:1e:11:33:39:d1:e1:e7:ec:14: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4F:C4:60:C1:CC:89:67:DA:E8:10:DC:A6:D2:95:89:B5:2A:64:C5 X509v3 Authority Key Identifier: keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:20:14:ac:94:ca:cb:ba:e8:01:3e:99:4e:07:e9:28:4e:80: d2:3c:29:87:61:52:31:95:bf:c8:8b:85:cc:0c:bf:76:de:ac: 3b:4e:7f:47:44:1d:46:ef:6c:55:9a:20:8c:d2:4f:b6:c9:aa: 47:7e:97:30:39:31:a2:57:f1:35:30:a6:f9:da:69:f8:75:8e: ab:5d:9e:85:67:44:d5:0f:86:06:65:39:9d:d1:5c:ce:05:9f: 0e:de:5f:33:9e:42:ca:11:bb:b7:57:22:dc:2e:32:fb:f0:33: c3:12:08:4a:e9:74:db:aa:0a:b1:5a:34:08:3e:d3:29:a3:0e: 6e:a0:d3:35:71:de:2e:fc:d1:07:7a:27:31:01:42:01:73:08: 90:64:a5:2c:c4:65:f6:f5:9b:fd:43:22:78:46:c3:0e:4e:da: 7c:58:a1:37:28:29:cf:32:c3:44:d7:ca:59:07:40:c4:8c:b5: c9:4d:2d:5b:38:87:0b:f8:b3:f8:a9:b5:a2:e2:22:fb:a6:70: 02:92:a7:59:b7:cc:60:de:50:d7:8e:df:dd:8b:63:3f:e1:30: 46:8a:b0:5c:75:d4:d8:b7:2d:f5:e6:4c:c4:3e:ad:6e:c6:eb: 3b:92:52:94:7f:7c:53:d8:36:0a:ce:f2:da:13:f4:98:13:35: f2:9e:2c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOTUxMTAvBgNVBAUTKEI0OEU0MDczQjgxMEJDRjlDNzk0ODE5QzgwRkRFNzFE NTNGMkRFMkMwHhcNMjUwNzAyMjMxNjMwWhcNMjUwNzA5MjMxNjMwWjAYMRYwFAYD VQQDEw02ODY1YmRjZS1lNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDShMIaUAzR1UncTLtc0NX291MnGIv1BkbqVHriCI3rK6R6zHvlJQvH2yD27 P03IY8wEXHHB7W8j92B+grSfZTTgQqDyHvTc7s2wPzkZtVpX5yag6avBVDzve/ow BJ0ku3JoQLfc9NQ9YUV2AI8tIB/+V0cOk/JrNFaJLJxewKB3ouS4FJQ3pAnDg3cE vEdWAVm22z8YXE1zXrZkvnDPIuqIy2rYSyKSEAb0OmhdI7b5DjpysU6A1tipRlvv ZbyuUBkPsB7ual8EkWaPzAsVmHw7DtfzEjdyVq8ZsXedVCqsPLrERQ1ppu20Vrp6 4peTY0dLCCMeETM50eHn7BQ1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdPxGDB zIln2ugQ3KbSlYm1KmTFMB8GA1UdIwQYMBaAFLSOQHO4ELz5x5SBnID95x1T8t4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5NS9ERTJGRjFGNEJB QzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQbkhsSUdjZ1AzbkhWUHkz aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJNUFjN2dRdlBuSGxJR2NnUDNuSFZQeTNpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5NS9ERTJGRjFGNEJBQzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQ bkhsSUdjZ1AzbkhWUHkzaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSIBSslMrLuugBPplOB+koToDSPCmHYVIxlb/Ii4XMDL923qw7Tn9H RB1G72xVmiCM0k+2yapHfpcwOTGiV/E1MKb52mn4dY6rXZ6FZ0TVD4YGZTmd0VzO BZ8O3l8znkLKEbu3VyLcLjL78DPDEghK6XTbqgqxWjQIPtMpow5uoNM1cd4u/NEH eicxAUIBcwiQZKUsxGX29Zv9QyJ4RsMOTtp8WKE3KCnPMsNE18pZB0DEjLXJTS1b OIcL+LP4qbWi4iL7pnACkqdZt8xg3lDXjt/di2M/4TBGirBcddTYty315kzEPq1u xus7klKUf3xT2DYKzvLaE/SYEzXynixh -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:17 2025 by rpki-client