$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json) Hash identifier: tuikRXWmX9s4535+8lMZwWqgxXDO0MT2evR2JI62JG4= Subject key identifier: 2A:AE:FA:E1:D2:9D:F5:07:36:BA:78:A8:45:5F:20:47:04:70:4E:DE Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft Manifest number: 019F Signing time: Thu 03 Jul 2025 03:25:12 +0000 Manifest this update: Thu 03 Jul 2025 03:25:11 +0000 Manifest next update: Thu 10 Jul 2025 03:25:11 +0000 Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: cXSLfR6pVpYVLbxmV48xsrmuLJ91rnTA2EF4TDP7pfo=) 2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163695, serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3 Validity Not Before: Jul 3 03:25:11 2025 GMT Not After : Jul 10 03:25:11 2025 GMT Subject: CN=6865f818-1033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:91:46:72:4c:50:67:9a:5f:05:10:0b:5b: c8:e6:27:fe:95:95:dc:40:0e:28:a4:ce:c6:e5:5d: b5:d3:af:e8:44:d8:c1:8c:77:77:71:a0:3a:14:8c: ce:5e:3b:07:7f:f9:b8:39:9c:5b:0b:2f:7c:60:5f: a6:64:e0:6e:d3:19:68:da:21:d2:60:66:ab:af:d4: d9:b1:94:ee:06:4a:6a:60:77:50:a4:d9:d6:64:73: 75:d3:0b:66:ae:ed:37:f7:1f:e5:44:cb:bd:cc:d2: 25:2c:a6:69:e0:06:0a:f3:65:dd:0f:62:9c:98:d0: e5:61:f7:b3:86:60:1b:7b:68:77:fe:88:29:12:38: 91:f6:32:1f:09:59:06:d4:8c:2c:4c:cf:0e:e0:f9: e4:da:7a:11:05:8b:2e:42:2e:d2:7d:73:67:82:12: c4:fe:30:62:f7:10:28:77:a4:cb:be:ab:45:f4:a6: a0:a3:3e:90:81:c1:32:6a:20:a3:1b:06:1a:67:be: fa:79:27:e0:bc:05:4a:11:b6:6e:2e:9a:42:3e:66: 28:8e:7a:8b:34:df:95:a4:70:d9:4b:45:06:a5:9f: 81:a4:0e:f5:5b:1c:43:6b:d7:31:25:5b:73:dd:12: 9f:2a:94:34:0f:56:47:99:b8:66:a8:b2:4f:3f:3c: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AE:FA:E1:D2:9D:F5:07:36:BA:78:A8:45:5F:20:47:04:70:4E:DE X509v3 Authority Key Identifier: keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b9:f4:0f:d9:92:ff:09:a8:ff:cc:67:29:2d:c6:23:e1:a6: 70:45:50:0c:4f:fe:da:35:5c:85:86:65:4e:77:d6:7f:dd:81: 99:ed:2a:69:ac:72:6d:af:ac:34:49:a2:63:f2:71:6d:d8:d4: 2e:37:47:62:54:d3:56:be:c9:5e:f4:ae:42:85:01:65:e0:b1: e0:ff:11:87:3a:a5:50:52:cd:44:6c:39:a0:f3:57:b1:83:92: 29:37:63:db:d8:75:fe:95:3e:78:0f:58:9a:9a:61:01:d7:c1: 26:f1:82:4b:6a:50:1e:e2:69:ea:db:be:b3:58:2a:9f:48:e7: eb:14:bd:34:b0:21:2a:0a:e2:d6:13:d3:6a:0a:0c:10:93:27: c1:1b:87:94:a9:18:a3:f9:a4:0f:5a:ed:e8:4b:25:94:c6:95: 4c:f6:f1:b5:d3:c0:a3:d4:3a:05:48:07:e9:92:6d:25:f4:fa: d1:ca:1d:57:05:96:0c:f7:c5:e2:47:77:b3:15:75:24:cd:d7: f6:c7:24:07:53:71:ff:39:81:28:cf:35:e1:7e:3c:f7:1a:f4: 78:2d:ff:48:fd:79:bf:47:38:77:10:dc:12:70:53:04:22:a6: 32:f7:3e:fb:41:89:0e:20:01:66:8a:7b:76:ce:e0:3e:41:71: 96:36:19:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2OTUxMTAvBgNVBAUTKEEzNzAzMEMzNTk2MzA0MDU4RTJGOTk0RjNGRDE0NzFB M0EyODNFQjMwHhcNMjUwNzAzMDMyNTExWhcNMjUwNzEwMDMyNTExWjAYMRYwFAYD VQQDEw02ODY1ZjgxOC0xMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fyRRnJMUGeaXwUQC1vI5if+lZXcQA4opM7G5V2106/oRNjBjHd3caA6FIzO XjsHf/m4OZxbCy98YF+mZOBu0xlo2iHSYGarr9TZsZTuBkpqYHdQpNnWZHN10wtm ru039x/lRMu9zNIlLKZp4AYK82XdD2KcmNDlYfezhmAbe2h3/ogpEjiR9jIfCVkG 1IwsTM8O4Pnk2noRBYsuQi7SfXNnghLE/jBi9xAod6TLvqtF9Kagoz6QgcEyaiCj GwYaZ776eSfgvAVKEbZuLppCPmYojnqLNN+VpHDZS0UGpZ+BpA71WxxDa9cxJVtz 3RKfKpQ0D1ZHmbhmqLJPPzzObQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqu+uHS nfUHNrp4qEVfIEcEcE7eMB8GA1UdIwQYMBaAFKNwMMNZYwQFji+ZTz/RRxo6KD6z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzY5NS84NzNBNjgwMERB OEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJBV09MNWxQUDlGSEdqb29Q ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28zQXd3MWxqQkFXT0w1bFBQOUZIR2pvb1ByTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzY5NS84NzNBNjgwMERBOEUxMUVEQkFDRkNBMjRDNEY5QUUwMi9vM0F3dzFsakJB V09MNWxQUDlGSEdqb29Qck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFufQP2ZL/Caj/zGcpLcYj4aZwRVAMT/7aNVyFhmVOd9Z/3YGZ7Spp rHJtr6w0SaJj8nFt2NQuN0diVNNWvsle9K5ChQFl4LHg/xGHOqVQUs1EbDmg81ex g5IpN2Pb2HX+lT54D1iammEB18Em8YJLalAe4mnq276zWCqfSOfrFL00sCEqCuLW E9NqCgwQkyfBG4eUqRij+aQPWu3oSyWUxpVM9vG108Cj1DoFSAfpkm0l9PrRyh1X BZYM98XiR3ezFXUkzdf2xyQHU3H/OYEozzXhfjz3GvR4Lf9I/Xm/Rzh3ENwScFME IqYy9z77QYkOIAFmint2zuA+QXGWNhko -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:11 2025 by rpki-client