$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: pFd4JW9WR8lnVobdx92kncT89/z950jWRoLZovgv4to= Subject key identifier: F2:41:41:18:75:67:82:6A:E5:B0:3E:E1:6B:0E:33:71:EF:40:E0:58 Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 45 Signing time: Sat 05 Jul 2025 07:44:45 +0000 Manifest this update: Sat 05 Jul 2025 07:44:45 +0000 Manifest next update: Sat 12 Jul 2025 07:44:45 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: 8a2yLnkYVIx3d98h1HXrpaNofifRjyM1Up7sCZPevqU=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: BR0iac6RCibng8iXx5EGv9yUT7uect2xiyJYOcbA9Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Jul 5 07:44:45 2025 GMT Not After : Jul 12 07:44:45 2025 GMT Subject: CN=6868d7ed-a97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:2b:42:e5:ac:4e:f5:5e:2a:6c:d7:41:00: 4b:7f:6d:f1:4e:85:0d:1c:af:5f:a9:80:47:b9:28: 7b:93:11:29:4f:0e:dc:ea:2c:c5:e1:a7:11:72:18: 8d:5e:26:eb:01:69:17:70:75:7c:30:64:ab:7d:29: ad:1b:42:3e:05:91:25:63:bd:f7:c8:da:13:8c:cc: 45:ea:63:bb:07:db:f7:ee:e7:86:41:2b:13:e8:23: 08:05:9b:a5:f1:3e:d2:ce:78:7d:8c:8f:70:15:aa: 0e:9b:62:89:f5:5c:d6:1e:ab:43:94:12:62:fd:83: e1:02:70:40:73:ee:12:8a:3d:05:9a:a8:6b:e1:7f: 97:b6:a0:a7:51:00:2c:fe:df:a1:cf:03:7b:86:bc: f7:70:8a:89:4e:63:7c:b2:96:10:97:8b:99:d9:87: ce:60:d1:ed:b9:42:52:05:45:ce:5d:7c:8c:3c:24: 55:1c:8f:8f:59:9b:4e:14:70:7c:bb:fd:23:ac:43: b8:4f:9e:5f:67:5c:5a:63:7d:4e:60:02:d6:37:f2: 82:c5:f9:9d:f3:e9:06:59:a9:0e:cb:39:65:16:b5: 78:1d:cd:c4:5d:fe:83:1c:78:c2:67:cc:30:83:07: 82:df:6d:e8:08:fd:e3:6b:97:e8:14:e8:27:01:1c: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:41:41:18:75:67:82:6A:E5:B0:3E:E1:6B:0E:33:71:EF:40:E0:58 X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6a:f0:ba:2e:a8:98:eb:76:12:52:b1:d2:8f:cb:2c:9e:4c: eb:f1:69:45:02:13:82:15:92:e1:48:49:97:05:61:3d:07:19: bf:94:06:d5:b5:b4:b4:58:f6:e0:61:58:0a:06:c6:89:48:9c: 17:41:3e:46:46:8a:6d:0a:32:52:57:77:c8:9b:57:3e:7b:20: 10:6b:d8:72:0f:60:69:53:76:bd:60:0e:69:59:17:4f:8b:27: d0:1c:68:8b:49:76:a3:19:83:9b:b0:3e:22:7c:d1:04:3d:86: 76:6d:ae:66:70:5f:b6:75:cf:21:8b:16:26:d4:a8:f1:df:e8: a6:ed:d3:31:03:78:de:e4:1b:cb:66:85:93:a5:cf:3b:17:cb: 97:1d:ca:bb:ec:a4:f8:94:83:87:cf:7c:05:c4:04:88:c4:76: ad:1e:5f:dd:0d:e3:12:94:20:0c:c7:7f:b3:c8:9d:b4:64:e7: e5:09:19:2c:a4:52:50:5e:00:23:af:c8:ea:21:14:b5:78:f6: 67:43:4c:ba:dd:8e:1a:69:9f:ab:28:92:bd:f6:d3:9f:6a:bf: fa:22:ae:59:5f:ce:c8:6f:0c:73:2d:e8:bd:94:44:1b:a0:c4: f2:95:bf:31:8a:f4:c6:b9:6f:4f:ce:8a:61:e4:c5:d7:2c:3d: ad:08:26:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTQ3NzExMC8GA1UEBRMoNzI0MUU4RjAzOEI5RjI1MkZCNjFDQTQxQjZBNEZDMTY3 Qjc3NTUyNjAeFw0yNTA3MDUwNzQ0NDVaFw0yNTA3MTIwNzQ0NDVaMBgxFjAUBgNV BAMTDTY4NjhkN2VkLWE5N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo0StC5axO9V4qbNdBAEt/bfFOhQ0cr1+pgEe5KHuTESlPDtzqLMXhpxFyGI1e JusBaRdwdXwwZKt9Ka0bQj4FkSVjvffI2hOMzEXqY7sH2/fu54ZBKxPoIwgFm6Xx PtLOeH2Mj3AVqg6bYon1XNYeq0OUEmL9g+ECcEBz7hKKPQWaqGvhf5e2oKdRACz+ 36HPA3uGvPdwiolOY3yylhCXi5nZh85g0e25QlIFRc5dfIw8JFUcj49Zm04UcHy7 /SOsQ7hPnl9nXFpjfU5gAtY38oLF+Z3z6QZZqQ7LOWUWtXgdzcRd/oMceMJnzDCD B4LfbegI/eNrl+gU6CcBHOuRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8kFBGHVn gmrlsD7haw4zce9A4FgwHwYDVR0jBBgwFoAUckHo8Di58lL7YcpBtqT8Fnt3VSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNDc3LzZCNzAzNUY4RjNG QzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2tIbzhEaTU4bEw3WWNwQnRxVDhGbnQzVlNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NDc3LzZCNzAzNUY4RjNGQzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxM N1ljcEJ0cVQ4Rm50M1ZTWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABZq8LouqJjrdhJSsdKPyyyeTOvxaUUCE4IVkuFISZcFYT0HGb+UBtW1 tLRY9uBhWAoGxolInBdBPkZGim0KMlJXd8ibVz57IBBr2HIPYGlTdr1gDmlZF0+L J9AcaItJdqMZg5uwPiJ80QQ9hnZtrmZwX7Z1zyGLFibUqPHf6Kbt0zEDeN7kG8tm hZOlzzsXy5cdyrvspPiUg4fPfAXEBIjEdq0eX90N4xKUIAzHf7PInbRk5+UJGSyk UlBeACOvyOohFLV49mdDTLrdjhppn6sokr32059qv/oirllfzshvDHMt6L2URBug xPKVvzGK9Ma5b0/OimHkxdcsPa0IJuA= -----END CERTIFICATE-----Generated at Sat Jul 5 21:58:51 2025 by rpki-client