$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json) Hash identifier: z2OdHVKzA7+EQNhgpQxkyV5RP/EAcV/vQpmW41o+SWc= Subject key identifier: 6D:BE:A2:1D:F6:2C:AA:82:84:BE:52:E5:F4:D3:F0:1D:8B:BA:06:35 Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft Manifest number: 0105 Signing time: Thu 03 Jul 2025 05:19:57 +0000 Manifest this update: Thu 03 Jul 2025 05:19:56 +0000 Manifest next update: Thu 10 Jul 2025 05:19:56 +0000 Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: 6mIgHz4eCQxUjw+tUyxxZYseSeoX+w5ZXwcOMYqgzxc=) 2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Validity Not Before: Jul 3 05:19:56 2025 GMT Not After : Jul 10 05:19:56 2025 GMT Subject: CN=686612fd-2b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:5a:6e:07:e1:5c:08:70:32:46:74:92:fa: 82:3a:2a:c2:a9:c8:71:ca:7a:3f:f4:2c:3d:1a:c7: bb:b7:ca:cb:61:af:1a:ec:2b:ad:0c:a2:c0:d0:0c: 10:8b:51:4b:c4:2e:64:40:de:c2:69:a5:b3:b5:4b: 9a:7a:aa:a4:ec:ad:ab:9a:56:82:b1:8b:1d:b8:ad: 40:b1:4c:7a:b6:08:db:d8:bf:33:60:a5:f6:34:52: 6d:db:70:d9:ab:84:c4:04:db:08:2d:e3:41:43:12: 55:81:e5:d9:8e:3a:18:0d:c5:71:72:2b:11:05:7c: 96:3d:56:2c:8c:0e:f7:da:a5:fd:92:e2:73:1b:0d: b8:ef:9c:f2:74:63:67:8b:c7:3d:64:75:ff:e6:1c: e2:1c:7c:f2:ac:49:75:58:b5:d0:fc:f5:11:43:70: ee:c9:4e:a4:b3:f0:d9:1b:c8:97:92:06:bb:c7:97: c2:3b:83:8d:36:da:b1:42:bf:1e:77:54:09:24:01: 36:8d:c8:16:3d:81:17:45:20:99:36:6a:cf:ab:5d: 62:24:22:79:40:e2:ea:af:17:49:25:47:e3:c7:f9: df:e4:fe:00:38:48:f3:c3:4a:c9:97:78:f2:b1:55: b7:9f:4c:2f:57:c6:47:8d:9f:6d:81:c8:9d:db:dd: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:A2:1D:F6:2C:AA:82:84:BE:52:E5:F4:D3:F0:1D:8B:BA:06:35 X509v3 Authority Key Identifier: keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:4b:73:d0:77:68:db:b1:84:1a:8a:e1:08:fe:bd:d4:5d:3e: 10:d6:8e:0b:18:dd:2b:f4:e9:ae:c3:ff:8f:23:c3:f6:4b:e4: 00:80:60:f0:7d:23:78:92:ff:dc:58:17:3c:72:34:f5:ce:11: ea:30:cd:1f:28:5d:e6:44:9f:20:f6:85:78:cb:9d:5f:62:78: c3:07:f8:92:77:99:8e:ca:68:5a:ff:9f:ac:af:ed:92:98:f6: 38:cc:1a:01:07:99:85:4d:59:03:f0:5d:2d:68:07:c4:ea:2d: cb:ab:cd:7c:f4:e6:8a:9b:00:a6:83:e0:b9:af:fa:24:16:4e: aa:2d:d8:c4:fb:a8:5f:27:55:0c:d3:14:2a:8c:b2:13:f6:31: 67:a5:15:86:f9:1a:83:70:69:2d:9d:9c:62:9e:67:1c:38:c8: 20:31:93:51:f2:31:96:bf:10:3a:3b:6f:77:79:fd:4c:60:6e: b1:70:48:f3:30:62:b5:01:14:1a:40:d1:4c:0a:9f:fc:69:12: f3:19:32:d4:2b:6b:52:d2:5b:ad:84:61:08:e5:f4:dc:db:81: 82:3a:0d:36:c8:e0:7c:85:06:28:6c:7d:90:c8:65:10:a4:b0: 90:f6:29:3b:fe:a6:15:72:c5:72:72:65:ef:5c:64:ca:ef:d5: 4e:5a:db:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEQ3NDc0MDExNENCQUY0RjU5OUFBN0U1REMzNDEyRTEy MkZBODcxNEMwHhcNMjUwNzAzMDUxOTU2WhcNMjUwNzEwMDUxOTU2WjAYMRYwFAYD VQQDEw02ODY2MTJmZC0yYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtJabgfhXAhwMkZ0kvqCOirCqchxyno/9Cw9Gse7t8rLYa8a7CutDKLA0AwQ i1FLxC5kQN7CaaWztUuaeqqk7K2rmlaCsYsduK1AsUx6tgjb2L8zYKX2NFJt23DZ q4TEBNsILeNBQxJVgeXZjjoYDcVxcisRBXyWPVYsjA732qX9kuJzGw2475zydGNn i8c9ZHX/5hziHHzyrEl1WLXQ/PURQ3DuyU6ks/DZG8iXkga7x5fCO4ONNtqxQr8e d1QJJAE2jcgWPYEXRSCZNmrPq11iJCJ5QOLqrxdJJUfjx/nf5P4AOEjzw0rJl3jy sVW3n0wvV8ZHjZ9tgcid2939oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2+oh32 LKqChL5S5fTT8B2LugY1MB8GA1UdIwQYMBaAFNdHQBFMuvT1map+XcNBLhIvqHFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9DREYzREExNkQy MkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQV1pxbjVkdzBFdUVpLW9j VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9DREYzREExNkQyMkIxMUVFOThBQ0RCNDNDNEY5QUUwMi8xMGRBRVV5NjlQ V1pxbjVkdzBFdUVpLW9jVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTS3PQd2jbsYQaiuEI/r3UXT4Q1o4LGN0r9Omuw/+PI8P2S+QAgGDw fSN4kv/cWBc8cjT1zhHqMM0fKF3mRJ8g9oV4y51fYnjDB/iSd5mOymha/5+sr+2S mPY4zBoBB5mFTVkD8F0taAfE6i3Lq8189OaKmwCmg+C5r/okFk6qLdjE+6hfJ1UM 0xQqjLIT9jFnpRWG+RqDcGktnZxinmccOMggMZNR8jGWvxA6O293ef1MYG6xcEjz MGK1ARQaQNFMCp/8aRLzGTLUK2tS0luthGEI5fTc24GCOg02yOB8hQYobH2QyGUQ pLCQ9ik7/qYVcsVycmXvXGTK79VOWtts -----END CERTIFICATE-----Generated at Fri Jul 4 13:48:04 2025 by rpki-client