$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: U1K4lfR7jHAaBbb0XKR+S/jy0Yw4Kyw9tRIjOaEdNcw= Subject key identifier: 78:13:CB:84:B9:49:DB:1E:53:1E:C8:9B:36:CC:18:16:1A:FD:AA:AC Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: 0194 Signing time: Thu 03 Jul 2025 03:34:17 +0000 Manifest this update: Thu 03 Jul 2025 03:34:17 +0000 Manifest next update: Thu 10 Jul 2025 03:34:17 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: xgQywgsetDy7humhgdMt6gM8vntKuu1faeLsNA0KMGw=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Validity Not Before: Jul 3 03:34:17 2025 GMT Not After : Jul 10 03:34:17 2025 GMT Subject: CN=6865fa39-3aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ea:4a:82:79:2e:2e:77:4a:00:76:4d:ed:64: 60:4f:c8:5d:f7:d0:bd:c9:a6:77:9f:b5:50:72:a7: e8:dd:ec:00:30:be:4b:7c:44:94:7d:f3:a3:96:bb: c7:d5:d8:b7:65:76:1a:99:07:b2:cb:ba:35:bb:5b: 1e:c1:c0:a1:ab:a1:c4:5d:95:95:d9:46:54:bd:d3: 5b:e4:f4:df:65:5c:70:9c:4a:5e:6b:a2:9b:56:e8: a3:1b:cd:6e:c9:3f:0e:f1:61:92:d6:dd:ad:38:df: 09:7d:ad:81:d6:21:f7:58:a8:9d:00:95:70:41:54: b2:19:5b:b7:d9:e7:b0:eb:30:4a:e4:3f:20:15:65: 7c:32:5f:90:8b:47:fd:94:ac:8f:0d:b1:c8:2c:e9: eb:2d:ca:c3:da:ea:08:59:86:34:2e:08:d8:c0:a6: 91:b7:12:c7:de:ad:33:d4:5c:c9:6a:ad:82:06:da: 5c:2b:24:e9:73:ed:f4:db:44:89:a9:a4:74:e0:16: 44:88:78:0e:6c:71:8a:8b:34:9c:20:c1:c4:aa:da: 93:6e:b5:50:a0:d5:c0:b1:da:2e:c6:b9:29:3f:53: 25:aa:3f:e8:a5:57:bc:03:d2:f9:f0:c3:11:91:79: 6b:bc:9a:ee:62:4f:09:ec:bd:cd:d3:ad:8f:97:5e: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:13:CB:84:B9:49:DB:1E:53:1E:C8:9B:36:CC:18:16:1A:FD:AA:AC X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ab:48:31:6b:d5:80:c0:a7:64:f9:95:9f:71:4b:e0:6a:33: c0:c1:42:ed:91:5f:76:1b:da:2b:62:a0:7b:77:43:2f:05:7e: 34:cc:81:01:0d:8e:05:0f:b6:4a:76:0e:5b:e0:e5:ac:8c:44: b6:2d:bb:ed:22:b7:d8:8c:63:42:fa:65:55:31:7c:75:0d:29: e1:59:d2:71:27:1f:fa:ea:92:9f:70:45:1e:00:b8:d5:be:e2: b2:ab:0e:68:e3:80:96:06:2c:8d:72:2c:d9:0d:f4:49:16:06: 62:0b:cc:1b:e1:f1:89:e2:5d:88:de:cc:81:4a:b2:7c:11:b3: a0:32:c0:5f:8d:53:41:78:07:84:bc:74:50:fd:5d:d3:85:4b: 74:c8:a7:53:09:f9:4b:29:44:97:29:90:a5:2d:cb:aa:a5:9b: 83:98:30:96:82:f5:32:bf:79:ac:38:95:75:82:b3:2d:33:b8: 71:75:36:1c:7b:f6:8f:8c:be:7b:13:30:36:69:4e:31:95:aa: 1e:2b:72:b3:be:8b:2e:d4:40:95:00:cb:f8:b7:0f:55:ca:e2: 02:90:6a:e7:e2:3c:59:13:6a:bd:60:71:d8:19:51:96:56:fa: e2:55:ef:19:55:07:90:79:c4:71:4e:1d:84:2e:75:db:aa:61: 78:60:9d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjUwNzAzMDMzNDE3WhcNMjUwNzEwMDMzNDE3WjAYMRYwFAYD VQQDEw02ODY1ZmEzOS0zYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1epKgnkuLndKAHZN7WRgT8hd99C9yaZ3n7VQcqfo3ewAML5LfESUffOjlrvH 1di3ZXYamQeyy7o1u1sewcChq6HEXZWV2UZUvdNb5PTfZVxwnEpea6KbVuijG81u yT8O8WGS1t2tON8Jfa2B1iH3WKidAJVwQVSyGVu32eew6zBK5D8gFWV8Ml+Qi0f9 lKyPDbHILOnrLcrD2uoIWYY0LgjYwKaRtxLH3q0z1FzJaq2CBtpcKyTpc+3020SJ qaR04BZEiHgObHGKizScIMHEqtqTbrVQoNXAsdouxrkpP1Mlqj/opVe8A9L58MMR kXlrvJruYk8J7L3N062Pl17ijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgTy4S5 SdseUx7ImzbMGBYa/aqsMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaq0gxa9WAwKdk+ZWfcUvgajPAwULtkV92G9orYqB7d0MvBX40zIEB DY4FD7ZKdg5b4OWsjES2LbvtIrfYjGNC+mVVMXx1DSnhWdJxJx/66pKfcEUeALjV vuKyqw5o44CWBiyNcizZDfRJFgZiC8wb4fGJ4l2I3syBSrJ8EbOgMsBfjVNBeAeE vHRQ/V3ThUt0yKdTCflLKUSXKZClLcuqpZuDmDCWgvUyv3msOJV1grMtM7hxdTYc e/aPjL57EzA2aU4xlaoeK3Kzvosu1ECVAMv4tw9VyuICkGrn4jxZE2q9YHHYGVGW VvriVe8ZVQeQecRxTh2ELnXbqmF4YJ29 -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:38 2025 by rpki-client