$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: +ZQffZOHyxonYnIrU06nGDvjMKqJkSQGdGtQMt/Q+qk= Subject key identifier: 61:F2:1E:77:9E:AE:62:81:67:DB:A9:0E:A1:33:D9:D4:D2:EC:C6:5C Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 0437 Signing time: Tue 01 Jul 2025 00:53:07 +0000 Manifest this update: Tue 01 Jul 2025 00:53:07 +0000 Manifest next update: Tue 08 Jul 2025 00:53:07 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: 18nXhhC6mrjmDKX0uQS1Mx3wobgzP7rGVondn6AMfJU=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: x1o/7SXGT/4CedCgS5u41onm9GYNi5PSdU5ws280Sfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Jul 1 00:53:07 2025 GMT Not After : Jul 8 00:53:07 2025 GMT Subject: CN=68633173-ebd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:3f:33:dd:7b:29:71:e0:0f:5a:f1:1c:2a: 7b:19:0d:40:de:e9:6c:2e:10:49:78:1b:16:16:f4: ea:08:7c:ea:3e:e7:c6:e4:fa:04:78:ff:9d:9e:50: df:9c:a5:db:9a:6e:cb:e4:53:de:12:2f:20:29:ce: 9b:fb:aa:e9:67:55:50:28:41:8e:6a:58:f8:67:ba: 5c:9a:62:62:3b:46:86:4d:3f:d1:4a:4c:b8:95:8b: 22:13:8c:3b:82:16:88:92:65:64:11:ad:89:e9:f8: fa:a4:10:20:f3:f8:68:70:97:b9:b3:ab:77:ba:5a: 1a:4a:9d:03:48:79:39:f6:e4:51:c5:b0:54:a4:6f: 16:9f:34:1c:fd:a0:39:be:df:14:29:e5:3d:55:7b: 60:00:04:5d:fc:08:fd:13:ab:af:e6:3b:10:8a:f3: 49:32:34:04:03:fb:82:ce:6a:d1:44:61:de:4d:f2: a9:53:ac:10:67:fd:22:9f:bb:5f:ab:dd:5b:91:03: 4a:df:fc:eb:ea:c7:ed:1b:76:45:94:e6:aa:cf:6b: d3:e6:06:ea:4a:27:49:fb:f8:31:87:c0:9a:cd:c5: 42:d5:77:45:d5:15:ae:a9:01:3b:8a:83:06:f3:27: b4:f7:7d:18:18:32:e2:b0:08:af:04:6a:c5:e7:0b: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F2:1E:77:9E:AE:62:81:67:DB:A9:0E:A1:33:D9:D4:D2:EC:C6:5C X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3a:d8:55:14:ba:b0:40:ac:bd:1b:1b:d3:39:ae:34:3c:8a: a9:9a:6a:13:69:0c:b8:40:48:f4:ef:e8:7f:14:94:80:29:21: 9e:df:31:86:00:08:8d:c7:89:b9:0d:10:60:2a:cb:64:d3:64: 89:66:3a:a3:55:1a:44:55:59:2c:17:be:cd:46:d1:60:df:1d: a1:af:de:a8:b7:32:69:0a:05:e4:b4:f4:ac:38:a7:1f:14:af: d2:fb:a9:bb:e5:8d:8c:8b:d9:49:cf:6f:db:a0:3c:c3:0a:4a: 26:61:73:34:d9:16:36:61:aa:b0:1a:22:83:27:3f:b5:65:4e: bf:57:42:82:81:f1:1c:a0:1f:9a:9b:c5:d4:6b:45:a1:15:8e: 5f:47:de:4b:4b:07:a0:68:6f:42:30:2b:55:41:07:5a:64:5c: 69:c5:6c:61:b2:ba:2a:7b:9d:98:68:4a:c3:07:ea:95:ce:d4: ee:e7:85:c1:6c:dc:12:d2:42:60:10:f9:90:d6:ef:93:c5:a4: 22:d3:01:a3:44:90:a4:74:85:ae:33:82:75:e1:a7:ac:5a:a9: c0:a3:bb:d1:d7:8c:4d:48:75:26:b1:ae:f7:6f:a3:90:71:97: 75:a3:a3:53:4b:76:24:e8:24:48:12:53:cc:25:e7:61:de:ea: ba:0b:8c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjUwNzAxMDA1MzA3WhcNMjUwNzA4MDA1MzA3WjAYMRYwFAYD VQQDEw02ODYzMzE3My1lYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVs/M917KXHgD1rxHCp7GQ1A3ulsLhBJeBsWFvTqCHzqPufG5PoEeP+dnlDf nKXbmm7L5FPeEi8gKc6b+6rpZ1VQKEGOalj4Z7pcmmJiO0aGTT/RSky4lYsiE4w7 ghaIkmVkEa2J6fj6pBAg8/hocJe5s6t3uloaSp0DSHk59uRRxbBUpG8WnzQc/aA5 vt8UKeU9VXtgAARd/Aj9E6uv5jsQivNJMjQEA/uCzmrRRGHeTfKpU6wQZ/0in7tf q91bkQNK3/zr6sftG3ZFlOaqz2vT5gbqSidJ+/gxh8CazcVC1XdF1RWuqQE7ioMG 8ye0930YGDLisAivBGrF5wvzPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHyHnee rmKBZ9upDqEz2dTS7MZcMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OthVFLqwQKy9GxvTOa40PIqpmmoTaQy4QEj07+h/FJSAKSGe3zGG AAiNx4m5DRBgKstk02SJZjqjVRpEVVksF77NRtFg3x2hr96otzJpCgXktPSsOKcf FK/S+6m75Y2Mi9lJz2/boDzDCkomYXM02RY2YaqwGiKDJz+1ZU6/V0KCgfEcoB+a m8XUa0WhFY5fR95LSwegaG9CMCtVQQdaZFxpxWxhsroqe52YaErDB+qVztTu54XB bNwS0kJgEPmQ1u+TxaQi0wGjRJCkdIWuM4J14aesWqnAo7vR14xNSHUmsa73b6OQ cZd1o6NTS3Yk6CRIElPMJedh3uq6C4w5 -----END CERTIFICATE-----Generated at Wed Jul 2 05:25:36 2025 by rpki-client