$ rpki-client -vvf rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft File: tEoweljCbW-uB_4_KF7Wo4K0y0M.mft (raw, json) Hash identifier: 5TEnZ3LpFOwriTSJrrD84SJWX5EI/UGW7/NpZ/g3a/0= Subject key identifier: 35:F1:BB:42:4C:9B:73:76:84:7D:64:77:C5:B9:AF:AB:95:6F:24:4F Authority key identifier: B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43 Certificate issuer: /CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft Manifest number: 014F Signing time: Thu 03 Jul 2025 04:16:53 +0000 Manifest this update: Thu 03 Jul 2025 04:16:52 +0000 Manifest next update: Thu 10 Jul 2025 04:16:52 +0000 Files and hashes: 1: tEoweljCbW-uB_4_KF7Wo4K0y0M.crl (hash: cGiXjsiLk1Tbf181jnpq76xReIQcHoYNrPtgXSKCgqE=) 2: CC954D50577211EEA63EF217C4F9AE02.roa (hash: EiQjdRFuXlYtCLTZbFxXGgOgXEXHeuVWajTCS8s1TyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165CEF, serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43 Validity Not Before: Jul 3 04:16:52 2025 GMT Not After : Jul 10 04:16:52 2025 GMT Subject: CN=68660435-1819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:a2:92:db:1c:75:19:8b:77:cd:ac:26:fd: 56:7a:63:1a:5e:14:60:1e:c5:98:2a:e3:f4:89:d4: 33:cc:5d:79:34:e7:57:b9:bc:c1:a9:1b:ae:d1:1b: de:21:9a:79:2a:1f:fd:d4:b1:bd:d7:43:fd:b8:bd: ae:1d:1d:0d:ed:ff:62:7e:93:78:2f:09:da:32:75: 85:0f:9e:3f:8c:ea:3b:bd:93:99:84:0d:0f:58:bb: c5:c0:fe:03:89:99:7b:2f:9f:5e:c5:4b:03:dd:74: a7:fb:ba:1e:17:d9:30:db:fb:d2:1a:d4:e8:54:60: 08:09:a1:58:b4:db:d2:3b:16:87:76:b1:9a:06:7b: 17:8f:a2:56:6d:54:fe:c1:3b:18:86:f3:52:0a:31: 17:68:b8:aa:1f:a2:b2:db:2d:dd:85:c0:9d:18:1e: 1f:7b:2f:57:46:a7:14:10:3e:c2:89:90:d5:7b:1d: d3:37:59:81:cd:b4:e9:8a:7b:9f:52:ea:a1:0e:bd: e4:b9:6f:44:43:2b:57:ef:70:01:8a:c5:d0:79:f0: 24:b3:f8:87:a2:91:ea:57:f3:4b:68:ad:76:6e:3b: 2f:e1:96:2e:db:41:c7:ca:df:e0:0e:78:95:bf:5c: 63:52:4e:bb:13:39:b8:80:1a:c5:cb:87:6e:d1:e8: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F1:BB:42:4C:9B:73:76:84:7D:64:77:C5:B9:AF:AB:95:6F:24:4F X509v3 Authority Key Identifier: keyid:B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a2:1b:cf:97:5b:d7:e3:37:99:da:f0:60:59:42:78:a8:92: d2:f4:70:27:86:a6:8a:91:80:7c:90:02:2c:f5:8f:39:a2:48: e6:6a:eb:a1:44:04:8f:8f:e9:d9:a5:1f:b2:14:7d:cf:1a:26: 9a:90:69:55:cd:3e:8a:8f:58:39:62:43:a3:49:d3:7a:bc:90: a2:13:17:e0:50:00:4f:d6:36:3b:00:8d:44:9d:ef:19:9e:a0: 69:74:97:f3:4d:df:35:64:49:68:88:65:07:9d:2a:8e:a8:c1: 7e:24:34:e5:97:c1:60:a6:a5:2f:be:fc:cc:52:a6:2a:59:36: ed:d9:63:3e:01:3a:bc:1d:44:54:5c:f8:46:38:f4:c7:68:f4: 5a:c2:84:71:8e:26:f9:02:84:71:cc:3a:3f:42:83:f6:9c:a5: f9:0f:2f:2c:3a:96:b3:d9:4c:6f:11:fc:89:d9:f5:61:61:4e: 92:2d:c8:8d:5f:06:6e:94:cd:c9:25:f4:ce:b8:73:43:05:dc: bc:2b:7f:0a:a9:a6:9c:9a:ca:39:9c:56:d8:ca:47:9f:c2:37: d8:1c:72:9f:34:0c:16:e1:d8:df:7f:c5:a7:d4:3f:ba:f1:eb: 34:64:c6:94:a7:fd:63:75:e1:08:a3:08:56:51:70:fe:1f:28: b0:df:5b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDRUYxMTAvBgNVBAUTKEI0NEEzMDdBNThDMjZENkZBRTA3RkUzRjI4NUVENkEz ODJCNENCNDMwHhcNMjUwNzAzMDQxNjUyWhcNMjUwNzEwMDQxNjUyWjAYMRYwFAYD VQQDEw02ODY2MDQzNS0xODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLiiktscdRmLd82sJv1WemMaXhRgHsWYKuP0idQzzF15NOdXubzBqRuu0Rve IZp5Kh/91LG910P9uL2uHR0N7f9ifpN4LwnaMnWFD54/jOo7vZOZhA0PWLvFwP4D iZl7L59exUsD3XSn+7oeF9kw2/vSGtToVGAICaFYtNvSOxaHdrGaBnsXj6JWbVT+ wTsYhvNSCjEXaLiqH6Ky2y3dhcCdGB4fey9XRqcUED7CiZDVex3TN1mBzbTpinuf UuqhDr3kuW9EQytX73ABisXQefAks/iHopHqV/NLaK12bjsv4ZYu20HHyt/gDniV v1xjUk67Ezm4gBrFy4du0eh49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXxu0JM m3N2hH1kd8W5r6uVbyRPMB8GA1UdIwQYMBaAFLRKMHpYwm1vrgf+Pyhe1qOCtMtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUNFRi8yNzc0OUMzNjU3 NzIxMUVFOURBRTYxNTVDNEY5QUUwMi90RW93ZWxqQ2JXLXVCXzRfS0Y3V280SzB5 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RFb3dlbGpDYlctdUJfNF9LRjdXbzRLMHkwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUNFRi8yNzc0OUMzNjU3NzIxMUVFOURBRTYxNTVDNEY5QUUwMi90RW93ZWxqQ2JX LXVCXzRfS0Y3V280SzB5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuohvPl1vX4zeZ2vBgWUJ4qJLS9HAnhqaKkYB8kAIs9Y85okjmauuh RASPj+nZpR+yFH3PGiaakGlVzT6Kj1g5YkOjSdN6vJCiExfgUABP1jY7AI1Ene8Z nqBpdJfzTd81ZEloiGUHnSqOqMF+JDTll8FgpqUvvvzMUqYqWTbt2WM+ATq8HURU XPhGOPTHaPRawoRxjib5AoRxzDo/QoP2nKX5Dy8sOpaz2UxvEfyJ2fVhYU6SLciN XwZulM3JJfTOuHNDBdy8K38Kqaacmso5nFbYykefwjfYHHKfNAwW4djff8Wn1D+6 8es0ZMaUp/1jdeEIowhWUXD+Hyiw31vN -----END CERTIFICATE-----Generated at Fri Jul 4 21:47:08 2025 by rpki-client