$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: I7IGIeK4fDiw9xV2XNsdAIHtk9lyDwBwjY3VstmDHSs= Subject key identifier: EB:D7:19:62:3F:97:2A:2D:E6:3A:16:86:01:EF:8D:CA:86:6D:54:C4 Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: 5F Signing time: Thu 03 Jul 2025 07:18:59 +0000 Manifest this update: Thu 03 Jul 2025 07:18:58 +0000 Manifest next update: Thu 10 Jul 2025 07:18:58 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: dL7wDiABRSgSM7CXm0E/yuMLZFKa0uQQ68Slydsfhtg=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Jul 3 07:18:58 2025 GMT Not After : Jul 10 07:18:58 2025 GMT Subject: CN=68662ee3-83b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:1d:89:ae:23:a7:40:3b:aa:09:ff:23:36: 58:32:73:4d:73:e6:50:ff:55:8d:bf:00:c8:67:59: a7:d9:13:59:15:51:b9:c3:6b:0b:b4:4b:34:91:bf: 9b:c0:47:93:dd:bb:d3:b8:cc:7b:7d:1a:a3:72:69: b9:b4:d3:ab:ee:10:f2:fc:36:78:b4:b2:6e:7d:3e: b5:41:59:5f:c1:7f:e4:59:5b:a1:65:01:29:23:6e: f1:f0:0f:65:f0:ea:35:8e:91:af:40:a8:14:5f:fb: ab:69:c7:f0:eb:01:66:23:f7:91:22:e4:28:83:17: f1:89:ee:a6:25:36:c2:fa:f4:00:8d:e6:b8:bd:ff: 46:2b:0f:92:48:39:95:10:4d:f1:9a:fb:2b:68:e9: be:55:05:20:33:13:fc:81:66:b5:f2:2c:6f:44:34: af:bd:0c:a0:5e:d8:be:df:dc:e6:83:3a:bd:30:3d: b7:32:6d:14:69:e0:01:34:df:d3:ec:de:0e:9b:ca: 76:4d:73:49:f2:b1:4f:ca:48:c8:83:27:ca:77:56: c3:44:ab:a6:b1:f9:48:06:39:6e:aa:69:91:8a:16: d8:3c:7c:61:b0:39:87:d2:0e:8b:dc:e5:93:62:ba: ac:ea:61:22:da:09:13:70:d8:1b:b6:5a:5f:03:4d: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D7:19:62:3F:97:2A:2D:E6:3A:16:86:01:EF:8D:CA:86:6D:54:C4 X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:08:1d:65:45:9c:d6:df:d9:d0:81:f4:b9:52:5e:c5:a1:cf: 52:f2:ef:74:a9:2a:40:24:2a:2a:f6:c3:2d:fe:49:ae:85:71: 83:05:2d:95:41:aa:45:64:c1:24:66:a5:e1:ba:98:2d:aa:87: 06:ec:e8:f1:9f:a1:cd:d5:bf:73:7d:14:d4:9f:8c:08:ca:d9: 03:f2:60:b0:9e:4d:1f:c6:f3:68:ca:e7:51:2e:d7:6a:42:0f: 3b:9f:47:cb:22:e8:1a:26:9e:46:bd:fb:6b:8d:59:a8:33:d6: e8:bf:43:ab:92:2e:22:ed:2e:c4:14:3c:8f:4c:5c:4d:bf:87: 1f:03:12:f0:3d:e3:b9:4c:90:75:02:62:3c:b1:ab:3f:07:c3: f9:75:5b:e3:51:d6:48:77:52:31:92:1d:27:89:2b:71:2a:aa: 0c:36:26:8e:e4:6d:3c:1b:70:e0:b1:61:c2:4f:e2:a8:09:20: 7c:21:6d:98:d6:a9:e0:02:8c:f0:62:93:17:97:ea:25:ec:6f: 8d:e3:00:bb:ac:d8:62:23:69:96:c7:78:f3:fc:50:4d:9f:95: 79:47:b8:6b:a3:89:9c:25:4a:31:9d:b5:a8:4d:4b:ee:2b:e8: 4c:5e:16:82:f5:3a:69:3d:e4:b1:8f:76:28:24:94:ec:09:fa: 97:dd:d3:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoQUU3M0I3MDU0OEZGNDIyRUQwMkQ1OUQxQ0EyNTc5M0Ew NUU5RTQyQTAeFw0yNTA3MDMwNzE4NThaFw0yNTA3MTAwNzE4NThaMBgxFjAUBgNV BAMTDTY4NjYyZWUzLTgzYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK+B2JriOnQDuqCf8jNlgyc01z5lD/VY2/AMhnWafZE1kVUbnDawu0SzSRv5vA R5Pdu9O4zHt9GqNyabm006vuEPL8Nni0sm59PrVBWV/Bf+RZW6FlASkjbvHwD2Xw 6jWOka9AqBRf+6tpx/DrAWYj95Ei5CiDF/GJ7qYlNsL69ACN5ri9/0YrD5JIOZUQ TfGa+yto6b5VBSAzE/yBZrXyLG9ENK+9DKBe2L7f3OaDOr0wPbcybRRp4AE039Ps 3g6bynZNc0nysU/KSMiDJ8p3VsNEq6ax+UgGOW6qaZGKFtg8fGGwOYfSDovc5ZNi uqzqYSLaCRNw2Bu2Wl8DTY4FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU69cZYj+X Ki3mOhaGAe+NyoZtVMQwHwYDVR0jBBgwFoAUrnO3BUj/Qi7QLVnRyiV5OgXp5Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzUwMTA5ODc2Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcm5PM0JVal9RaTdRTFZuUnlpVjVPZ1hwNUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzUwMTA5ODc2Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3 UUxWblJ5aVY1T2dYcDVDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFwIHWVFnNbf2dCB9LlSXsWhz1Ly73SpKkAkKir2wy3+Sa6FcYMFLZVB qkVkwSRmpeG6mC2qhwbs6PGfoc3Vv3N9FNSfjAjK2QPyYLCeTR/G82jK51Eu12pC DzufR8si6Bomnka9+2uNWagz1ui/Q6uSLiLtLsQUPI9MXE2/hx8DEvA947lMkHUC Yjyxqz8Hw/l1W+NR1kh3UjGSHSeJK3Eqqgw2Jo7kbTwbcOCxYcJP4qgJIHwhbZjW qeACjPBikxeX6iXsb43jALus2GIjaZbHePP8UE2flXlHuGujiZwlSjGdtahNS+4r 6ExeFoL1Omk95LGPdigklOwJ+pfd054= -----END CERTIFICATE-----Generated at Thu Jul 3 23:27:57 2025 by rpki-client