$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft File: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json) Hash identifier: T9j7RkybuEcRrAJhFLzNIENZ4HoXXk48p+UAOg6dTEY= Subject key identifier: BF:CD:33:D5:E4:26:22:DC:A7:2D:3C:6B:DB:65:CE:1D:71:C3:8B:86 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft Manifest number: 0169 Signing time: Thu 15 May 2025 03:37:01 +0000 Manifest this update: Thu 15 May 2025 03:37:00 +0000 Manifest next update: Thu 22 May 2025 03:37:00 +0000 Files and hashes: 1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: ZSAauzaqsCpKStSZrmhRVviOH+s5JzN+Jxmfvqlytiw=) 2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: eMfy7OINYllKPw/hYmLN+RLPDufOse3B1bVnfxelXA4=) 3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: uXWLPj49wt34ZFOdgRvzFts1coN6e2ycjWdiQjNmKsk=) 4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 3fkGbyflBIYBaEGX9UwZRIaOP3YpNHP6p1lJeAeN+Pc=) 5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: 2T6E2IzaBIpKo85tSWVvYebgls3pQQ9SNaIoG7eWLz4=) 6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: q1C12AJZxBjIQzqN4k7K7GMZE1FYJg2qefZeo78vHPs=) 7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: ekGkDDIKWLiqVV7h6ESwSg8vnFxwfp+WHxsTHsOalhs=) 8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: AW+Nxj8w4krax5vO+aa2r3fRVGb6J4InT/gDIakIwPQ=) 9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: xzZgqMDA4sRVnfCdaLDA6dVoRCpm16rxzJc3wo1vyY4=) 10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: DKGzaOaDogHp8zZnJNJ8Xu7A6tqaHSnOfSE1S0tRHtw=) 11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: 2dWDYylTvBf7qUkUKq2WQpJFP4UJD1LaLQZoGDi+eMQ=) 12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jf5vNKMEs/HYJC+ZfLIR6MHcZqRlwRNx9C1pqFQO2oU=) 13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: 2F6msvEoxhf3yMkdkG6hwiZZB9ls61DIlAbmxkj7kXQ=) 14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA=) 15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: qF8dwyJS0OcLRM+lRZeGO8KZj/gqh2DhUGlNyStGdKM=) 16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: lahqqWdJv5iCoCPv96NgkWAwgDwpfB7aX0xa2UIAojg=) 17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: sGNeudGsjKQYxdr3S2rAF3HoccrfyBnH+QSvEfzchv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: May 15 03:37:00 2025 GMT Not After : May 22 03:37:00 2025 GMT Subject: CN=6825615c-77b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:aa:48:aa:48:b3:23:b1:df:c1:02:ee:6c: dc:b6:ab:13:5b:3f:5c:36:3c:92:0a:11:55:1f:44: e4:77:75:ba:5d:e7:3c:0c:01:53:1e:7d:c8:58:41: ee:f0:68:47:8f:9a:54:5b:a6:d5:a8:70:5d:1f:36: ef:75:cf:dd:79:04:66:08:34:70:22:9d:da:0d:4c: 59:4d:32:4c:b4:5e:49:41:29:9f:d1:3f:30:31:ed: a7:05:06:de:7c:3e:de:fa:3d:01:dd:5d:1d:31:e3: d8:8d:73:77:c7:95:be:bf:e9:20:fd:67:78:6c:74: 1f:2a:1e:73:75:10:e6:b4:c4:2b:f5:9b:5b:8e:37: 7b:2c:72:0d:5e:7e:15:92:41:25:ac:b2:12:06:af: 50:34:6d:70:e9:e0:92:b1:48:6f:9c:8f:cd:4f:1b: 29:e0:01:a2:e5:34:f1:05:01:a4:ec:ef:c9:8b:31: 93:1f:a7:87:28:04:5a:1a:b6:e0:02:6b:91:73:0f: 16:b4:a1:10:52:a3:ca:15:aa:35:41:f0:70:12:5d: d8:b8:8e:38:8c:a1:19:84:f2:ba:a8:6a:0e:f4:20: 1f:90:d3:28:2b:a1:45:b0:47:f6:6d:2e:7d:a3:6a: 09:be:fe:ef:a4:08:91:71:f1:74:b0:5a:1b:51:b4: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CD:33:D5:E4:26:22:DC:A7:2D:3C:6B:DB:65:CE:1D:71:C3:8B:86 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:77:cc:20:a4:08:b0:21:e5:16:16:53:81:5b:c0:53:e6: 37:9a:ff:e5:0e:5c:ae:fc:7a:86:61:83:e4:09:df:81:49:91: c4:91:50:87:6d:ac:56:56:1a:9f:e4:b3:d0:82:56:d9:b8:a3: 86:f2:2c:f6:40:05:76:ce:f3:cc:35:0c:c4:09:68:eb:72:cb: 75:89:ab:ef:88:34:32:53:62:ff:c1:37:d6:13:dc:bb:6a:90: 5f:77:bb:d4:a1:f5:f9:94:40:6d:0d:59:ac:72:2c:94:7d:80: 38:16:3d:34:f2:0d:ac:bb:b4:f8:fd:63:24:22:fd:aa:28:99: c9:04:e8:6e:ab:1a:64:9d:a9:10:23:b5:7d:16:aa:4c:6a:6c: ef:aa:ad:55:4b:4f:b1:dd:a4:4b:45:75:04:29:ab:75:cc:c5: 55:ca:ad:60:2e:4e:2a:3a:b1:6d:6a:0e:7d:ed:c8:a4:53:f5: 47:d8:23:ef:4b:2e:2f:a8:30:5b:61:28:6c:1b:96:5e:27:e2: b5:55:8f:94:d2:87:7e:15:d6:b0:cf:29:f5:02:5c:b3:4a:8f: c8:77:fb:e6:7c:7c:0a:f2:74:dd:14:5d:d6:74:fe:24:7b:39: 06:a9:bf:d9:af:49:24:09:93:9c:0c:b4:8a:06:d2:82:ff:8a: 7a:42:2a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUwNTE1MDMzNzAwWhcNMjUwNTIyMDMzNzAwWjAYMRYwFAYD VQQDEw02ODI1NjE1Yy03N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmN2qSKpIsyOx38EC7mzctqsTWz9cNjySChFVH0Tkd3W6Xec8DAFTHn3IWEHu 8GhHj5pUW6bVqHBdHzbvdc/deQRmCDRwIp3aDUxZTTJMtF5JQSmf0T8wMe2nBQbe fD7e+j0B3V0dMePYjXN3x5W+v+kg/Wd4bHQfKh5zdRDmtMQr9Ztbjjd7LHINXn4V kkElrLISBq9QNG1w6eCSsUhvnI/NTxsp4AGi5TTxBQGk7O/JizGTH6eHKARaGrbg AmuRcw8WtKEQUqPKFao1QfBwEl3YuI44jKEZhPK6qGoO9CAfkNMoK6FFsEf2bS59 o2oJvv7vpAiRcfF0sFobUbQ/bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/NM9Xk JiLcpy08a9tlzh1xw4uGMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5hXfMIKQIsCHlFhZTgVvAU+Y3mv/lDlyu/HqGYYPkCd+BSZHEkVCH baxWVhqf5LPQglbZuKOG8iz2QAV2zvPMNQzECWjrcst1iavviDQyU2L/wTfWE9y7 apBfd7vUofX5lEBtDVmsciyUfYA4Fj008g2su7T4/WMkIv2qKJnJBOhuqxpknakQ I7V9FqpMamzvqq1VS0+x3aRLRXUEKat1zMVVyq1gLk4qOrFtag597cikU/VH2CPv Sy4vqDBbYShsG5ZeJ+K1VY+U0od+Fdawzyn1AlyzSo/Id/vmfHwK8nTdFF3WdP4k ezkGqb/Zr0kkCZOcDLSKBtKC/4p6QiqS -----END CERTIFICATE-----Generated at Thu May 15 09:58:00 2025 by rpki-client