$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft File: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft (raw, json) Hash identifier: KgpUFh1babmfleuqm2sC5bqSCEdD5Vzb9AdTtkCuMx8= Subject key identifier: EC:2C:47:7E:F1:F7:F8:8A:00:74:C2:6A:6F:7B:25:51:C1:13:05:D3 Authority key identifier: AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B Certificate issuer: /CN=A9111D25/serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft Manifest number: E7 Signing time: Tue 01 Jul 2025 05:54:32 +0000 Manifest this update: Tue 01 Jul 2025 05:54:32 +0000 Manifest next update: Tue 08 Jul 2025 05:54:32 +0000 Files and hashes: 1: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl (hash: 3wOzP4UJjIby4V2M1eQMr9WC3BaoScYWhMRLRUFdpjw=) 2: F869F6E6F27D11EE83652C2FC4F9AE02.roa (hash: wbE6Gfx7gEn/j1uk0tHQyPp2/l2ifTqo+zhIWQUgB5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D25, serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Validity Not Before: Jul 1 05:54:32 2025 GMT Not After : Jul 8 05:54:32 2025 GMT Subject: CN=68637818-f727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:17:a7:f1:62:a6:8d:18:cf:9d:c9:37:05:a3: 2b:be:09:05:5d:09:d7:ca:c1:25:c6:0a:43:1b:db: 04:f0:81:8e:61:f7:34:b7:ac:c0:e9:b3:67:83:0c: 11:94:fd:c0:89:d9:12:ef:e8:b0:b4:84:fa:c7:49: 8b:49:85:bf:09:ec:c1:fa:02:7e:98:bd:22:36:97: da:99:1b:76:b4:1c:4d:01:87:24:77:f4:d0:b1:77: cc:f0:cc:c9:08:c6:e5:64:d2:92:a3:38:ed:a4:22: 14:b8:8c:1c:7a:4a:d9:e7:d6:f3:19:55:bd:5e:21: 1f:83:28:8f:f4:a2:4b:6c:81:93:39:91:bc:76:20: 72:18:1a:41:22:8b:e5:b8:b8:c1:b3:47:79:18:19: 1f:5f:39:8a:25:d2:5f:e9:02:b6:c7:74:63:01:60: 98:af:aa:cd:b0:6d:83:02:02:6c:a9:a7:05:f2:13: 26:47:95:53:73:30:d4:c0:f1:9e:fe:9e:4d:24:d4: 12:82:3f:f0:fd:f5:f8:d8:e0:bd:b1:62:51:9f:68: 82:c0:e5:a8:d0:fc:53:71:e8:d5:1e:32:ad:a3:c8: dd:98:b7:c6:47:fa:1f:72:90:66:71:78:4a:16:01: 67:80:69:8e:88:25:bb:4f:1c:c6:ae:66:ad:fb:1d: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2C:47:7E:F1:F7:F8:8A:00:74:C2:6A:6F:7B:25:51:C1:13:05:D3 X509v3 Authority Key Identifier: keyid:AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3b:8c:07:5e:bd:f7:3f:84:f5:6c:96:1d:09:c7:a6:41:dc: b0:f0:af:02:44:e9:66:38:d6:09:cf:89:f0:e1:7a:89:47:47: 33:d6:81:ef:7f:71:d7:97:57:bb:78:e9:4e:44:b4:5a:8d:7d: 75:bc:a6:2d:73:14:a8:b0:a0:db:45:a5:94:02:ba:14:c4:59: 22:40:c0:41:89:f4:72:76:f9:a3:88:ae:bb:1d:d0:b4:56:8c: a9:cb:f4:29:2d:6c:60:33:c3:7b:2c:cf:0e:49:d7:7e:d8:c1: 5e:92:24:39:aa:58:55:66:32:44:2b:7d:76:d7:fa:c8:ad:ed: df:a4:c2:3b:17:24:77:56:6b:d9:6a:b8:50:c3:f9:18:24:7a: 8f:8c:ca:38:f6:3b:3f:c1:52:ca:af:10:fe:df:1c:86:5e:b6: e2:8e:4f:82:04:55:61:57:64:23:34:05:7d:ad:51:15:69:23: 00:b5:05:22:86:68:a1:d5:e1:6d:51:c1:37:d4:1f:c9:d4:2c: 3e:b8:f0:88:e2:26:63:f7:d6:41:58:fa:ee:4e:08:8b:05:e7: 86:39:00:a4:df:1c:09:47:0d:76:ce:b8:c1:49:92:95:da:5c: 88:e5:4b:7c:2c:3b:08:4d:c8:84:4e:09:c0:20:f2:21:08:57: 5f:e1:1b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMjUxMTAvBgNVBAUTKEFENkVFN0JBMTk1ODY1MEZBQTg0NkM4M0QwQThBNEIz NjVEQUY1NUIwHhcNMjUwNzAxMDU1NDMyWhcNMjUwNzA4MDU1NDMyWjAYMRYwFAYD VQQDEw02ODYzNzgxOC1mNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ren8WKmjRjPnck3BaMrvgkFXQnXysElxgpDG9sE8IGOYfc0t6zA6bNngwwR lP3AidkS7+iwtIT6x0mLSYW/CezB+gJ+mL0iNpfamRt2tBxNAYckd/TQsXfM8MzJ CMblZNKSozjtpCIUuIwcekrZ59bzGVW9XiEfgyiP9KJLbIGTOZG8diByGBpBIovl uLjBs0d5GBkfXzmKJdJf6QK2x3RjAWCYr6rNsG2DAgJsqacF8hMmR5VTczDUwPGe /p5NJNQSgj/w/fX42OC9sWJRn2iCwOWo0PxTcejVHjKto8jdmLfGR/ofcpBmcXhK FgFngGmOiCW7TxzGrmat+x1lCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwsR37x 9/iKAHTCam97JVHBEwXTMB8GA1UdIwQYMBaAFK1u57oZWGUPqoRsg9CopLNl2vVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQyNS84RjlGMDM4NkYy N0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpRLXFoR3lEMEtpa3MyWGE5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXN251aGxZWlEtcWhHeUQwS2lrczJYYTlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQyNS84RjlGMDM4NkYyN0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpR LXFoR3lEMEtpa3MyWGE5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+O4wHXr33P4T1bJYdCcemQdyw8K8CROlmONYJz4nw4XqJR0cz1oHv f3HXl1e7eOlORLRajX11vKYtcxSosKDbRaWUAroUxFkiQMBBifRydvmjiK67HdC0 Voypy/QpLWxgM8N7LM8OSdd+2MFekiQ5qlhVZjJEK3121/rIre3fpMI7FyR3VmvZ arhQw/kYJHqPjMo49js/wVLKrxD+3xyGXrbijk+CBFVhV2QjNAV9rVEVaSMAtQUi hmih1eFtUcE31B/J1Cw+uPCI4iZj99ZBWPruTgiLBeeGOQCk3xwJRw12zrjBSZKV 2lyI5Ut8LDsITciETgnAIPIhCFdf4Rty -----END CERTIFICATE-----Generated at Tue Jul 1 12:52:53 2025 by rpki-client