$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: BOV8vgt6L2NLGQuSaeI6Fqt4PimRYqBGc6WW2UyFF+M= Subject key identifier: A4:C5:A7:B9:D0:86:F0:2A:46:6C:A4:77:FC:FB:6B:97:D1:C6:D0:B1 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: AB Signing time: Thu 03 Jul 2025 06:16:06 +0000 Manifest this update: Thu 03 Jul 2025 06:16:06 +0000 Manifest next update: Thu 10 Jul 2025 06:16:06 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: oeDl+fsJvfB+gTKn+X/h2OgpAzceBrI38hhl+RDPtHI=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: TlHlbn6q/SJJmLaIdFeAVpNRm4YQAAsTE8XrQ+CUo9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Jul 3 06:16:06 2025 GMT Not After : Jul 10 06:16:06 2025 GMT Subject: CN=68662026-3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:b2:aa:0d:3d:75:68:18:c6:84:69:d2:72: 03:fc:9d:f3:09:b3:bf:97:65:fa:2d:b5:24:da:2a: 81:5b:14:84:80:e3:1a:4b:fb:7d:00:3f:5d:e5:5b: 18:1e:86:2a:d8:7d:7f:96:ee:e9:57:2e:a6:5e:09: 79:d0:11:f2:61:56:8a:31:cd:4f:02:79:6b:c1:48: 34:d6:ee:e8:2f:2d:8e:c8:a2:5f:72:76:66:ee:25: 81:04:98:21:9b:d0:fb:4d:f7:92:1f:bd:ee:7f:24: ea:08:a3:e4:60:fb:e0:2e:58:8a:f0:6f:b0:33:a0: f3:55:72:6c:e1:54:16:98:32:7e:e6:22:69:c5:83: 36:e6:d5:63:3b:41:6b:f4:d1:de:9b:14:0c:ab:39: 1b:63:85:78:aa:8e:8a:ac:c0:44:88:e5:fb:1f:c2: 60:e1:81:b0:cc:d3:2a:a7:ae:59:74:3c:2e:17:bc: 50:61:d6:4a:81:7a:b4:dc:df:91:2c:b0:22:2a:ab: 91:bf:d1:5b:90:4d:eb:d1:90:24:d0:fe:d8:c8:91: 28:6c:d7:90:83:9f:09:e7:7d:58:cf:40:f2:36:6d: 25:dd:6b:ec:d0:68:6e:22:da:03:fb:01:c8:1e:02: cc:1e:27:a7:70:fe:7c:26:09:a1:64:70:70:9e:fe: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:A7:B9:D0:86:F0:2A:46:6C:A4:77:FC:FB:6B:97:D1:C6:D0:B1 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:53:23:8d:71:73:05:85:76:5d:92:4c:7b:ad:02:e9:58:fd: 99:da:f8:41:01:b7:c4:0b:0a:e2:38:b8:2d:37:26:cb:e1:28: f8:c4:59:f9:14:6d:69:d1:35:eb:c5:a7:ed:09:87:ea:2b:c3: 61:f0:65:57:25:9c:1f:67:04:2d:ac:79:ef:f1:12:14:9a:ab: 9d:fe:2e:3b:71:62:56:b2:69:ce:c3:0c:5a:74:14:71:57:aa: 88:57:59:03:b6:1c:f0:08:3e:f3:48:a8:08:1c:8f:2a:4f:e3: 13:f9:c7:8b:d0:6f:36:d2:6a:f5:3b:c2:ea:6a:ef:16:2a:22: 5b:f2:d3:65:bf:0b:8f:4f:4e:7b:81:0d:28:26:cc:0e:89:20: a3:bf:5a:2c:ba:72:77:2b:5e:a4:d6:88:2d:23:3b:e9:6a:4e: 31:57:84:98:fc:20:4b:df:d5:49:8e:fc:e7:ac:a9:1d:d8:8f: 81:a0:aa:e5:d3:26:cd:dd:95:f9:93:82:ec:57:77:50:8b:2a: fb:c5:f7:1d:cf:99:45:07:32:e4:88:b6:d0:fd:0e:6e:cd:d1: 5b:26:11:6a:28:ba:a5:12:ba:6f:2d:2f:79:d4:f6:07:ea:87: b9:ba:40:c6:52:5e:6b:9f:b5:43:f8:d8:1b:bf:6c:65:46:ec: 89:4d:26:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUwNzAzMDYxNjA2WhcNMjUwNzEwMDYxNjA2WjAYMRYwFAYD VQQDEw02ODY2MjAyNi0zYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmeyqg09dWgYxoRp0nID/J3zCbO/l2X6LbUk2iqBWxSEgOMaS/t9AD9d5VsY HoYq2H1/lu7pVy6mXgl50BHyYVaKMc1PAnlrwUg01u7oLy2OyKJfcnZm7iWBBJgh m9D7TfeSH73ufyTqCKPkYPvgLliK8G+wM6DzVXJs4VQWmDJ+5iJpxYM25tVjO0Fr 9NHemxQMqzkbY4V4qo6KrMBEiOX7H8Jg4YGwzNMqp65ZdDwuF7xQYdZKgXq03N+R LLAiKquRv9FbkE3r0ZAk0P7YyJEobNeQg58J531Yz0DyNm0l3Wvs0GhuItoD+wHI HgLMHiencP58JgmhZHBwnv6K1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTFp7nQ hvAqRmykd/z7a5fRxtCxMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwUyONcXMFhXZdkkx7rQLpWP2Z2vhBAbfECwriOLgtNybL4Sj4xFn5 FG1p0TXrxaftCYfqK8Nh8GVXJZwfZwQtrHnv8RIUmqud/i47cWJWsmnOwwxadBRx V6qIV1kDthzwCD7zSKgIHI8qT+MT+ceL0G820mr1O8Lqau8WKiJb8tNlvwuPT057 gQ0oJswOiSCjv1osunJ3K16k1ogtIzvpak4xV4SY/CBL39VJjvznrKkd2I+BoKrl 0ybN3ZX5k4LsV3dQiyr7xfcdz5lFBzLkiLbQ/Q5uzdFbJhFqKLqlErpvLS951PYH 6oe5ukDGUl5rn7VD+Ngbv2xlRuyJTSYn -----END CERTIFICATE-----Generated at Thu Jul 3 15:00:28 2025 by rpki-client