$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: gcs8Iu2Rp6kmWxMwHeOkNsDWVl764KxvVoJY0TfcHLw= Subject key identifier: 78:5A:EC:C8:41:79:2A:D8:2A:1E:CC:83:70:7B:8E:2C:81:49:1F:6F Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 349B Signing time: Wed 02 Jul 2025 15:14:15 +0000 Manifest this update: Wed 02 Jul 2025 15:14:14 +0000 Manifest next update: Wed 09 Jul 2025 15:14:14 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: oM7rqkuUEK2gHoczyzEMq0AhDAN4XsnM8K9isKbmwvc=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Jul 2 15:14:14 2025 GMT Not After : Jul 9 15:14:14 2025 GMT Subject: CN=68654cc6-773f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:5a:9a:ef:c5:e9:09:d1:0c:b3:ed:c2:e7: f9:26:62:2c:b9:49:9d:35:0f:4c:2a:4c:a2:36:d3: 7d:60:7d:42:68:19:21:97:e7:45:f1:c0:a6:d2:0e: 06:1f:07:45:68:ed:f4:58:d6:98:a4:a0:7a:cd:3d: 0c:bb:a2:10:19:66:cd:10:28:91:23:06:6c:e7:83: da:85:ff:1a:16:5e:bf:f9:d8:85:24:cc:9f:e6:78: 4b:a0:39:c2:c2:62:f1:77:8d:f8:2c:14:a5:3b:9d: 24:cf:24:31:60:dd:41:a9:69:d4:83:29:86:77:f9: 67:05:5c:4d:b1:92:c5:47:32:f3:a7:f7:bf:15:b4: 0a:ca:2d:62:e4:80:02:4f:d0:fb:98:c8:3e:55:96: c6:53:87:4e:ce:bc:b3:54:f9:e6:f3:38:fb:b6:2b: 7b:9d:51:bd:76:8e:ae:bd:e5:5a:ed:7e:e9:34:e2: 9a:7d:94:d9:ac:5e:28:04:5b:00:bc:90:e0:4b:33: fb:59:ed:5a:8d:9d:4a:b5:e2:0b:84:72:42:02:96: 72:81:e3:95:b8:28:42:48:0a:4d:2a:6e:ec:62:66: 2a:3a:14:2f:64:a5:de:9c:1e:42:87:8c:f6:4d:72: 93:ec:7b:c4:f0:06:af:85:3a:e2:42:73:90:e4:24: b1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5A:EC:C8:41:79:2A:D8:2A:1E:CC:83:70:7B:8E:2C:81:49:1F:6F X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7c:4b:76:a6:fa:b9:70:03:79:b6:87:5a:df:80:47:75:44: 45:8b:b0:cc:f0:fc:40:10:f5:7c:92:c1:56:2b:64:f5:26:1e: 75:ee:d4:4e:e5:41:9e:9b:3e:af:a5:a3:eb:60:61:51:26:0a: 18:d7:35:b4:16:4f:8d:20:9f:6c:ea:cc:b8:35:f3:7a:79:0c: 88:84:d3:40:f7:10:0e:a8:07:4e:a9:4a:83:1c:43:f7:04:57: f9:cd:1e:93:65:b8:48:6f:92:7f:a5:9c:f2:53:76:75:cd:c5: b6:e5:e5:82:54:65:99:ef:fe:dc:50:21:14:8d:48:f3:1f:50: da:68:5f:1c:a7:99:7d:cf:0f:b6:e3:ed:53:58:d4:97:79:88: ea:37:e3:b2:91:c3:a5:38:b2:4d:6d:19:87:29:12:7b:1a:74: 9a:37:f1:6e:19:f0:e1:03:77:8b:99:e0:50:30:8a:68:62:ff: f5:d9:32:40:26:de:13:8c:07:00:3a:1e:54:73:ca:a9:22:a6: 94:18:2c:d8:f2:02:80:06:a8:68:f7:11:c4:a1:2f:a7:da:a9: 3c:3b:10:7b:48:67:c0:e7:20:d5:f0:48:e0:8c:ed:a2:2b:ed: c9:13:4d:c9:48:f1:9c:bd:6e:4e:9c:83:79:2c:22:22:94:42: fd:bd:52:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUwNzAyMTUxNDE0WhcNMjUwNzA5MTUxNDE0WjAYMRYwFAYD VQQDEw02ODY1NGNjNi03NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz9amu/F6QnRDLPtwuf5JmIsuUmdNQ9MKkyiNtN9YH1CaBkhl+dF8cCm0g4G HwdFaO30WNaYpKB6zT0Mu6IQGWbNECiRIwZs54Pahf8aFl6/+diFJMyf5nhLoDnC wmLxd434LBSlO50kzyQxYN1BqWnUgymGd/lnBVxNsZLFRzLzp/e/FbQKyi1i5IAC T9D7mMg+VZbGU4dOzryzVPnm8zj7tit7nVG9do6uveVa7X7pNOKafZTZrF4oBFsA vJDgSzP7We1ajZ1KteILhHJCApZygeOVuChCSApNKm7sYmYqOhQvZKXenB5Ch4z2 TXKT7HvE8AavhTriQnOQ5CSxAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHha7MhB eSrYKh7Mg3B7jiyBSR9vMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAfEt2pvq5cAN5toda34BHdURFi7DM8PxAEPV8ksFWK2T1Jh517tRO 5UGemz6vpaPrYGFRJgoY1zW0Fk+NIJ9s6sy4NfN6eQyIhNNA9xAOqAdOqUqDHEP3 BFf5zR6TZbhIb5J/pZzyU3Z1zcW25eWCVGWZ7/7cUCEUjUjzH1DaaF8cp5l9zw+2 4+1TWNSXeYjqN+OykcOlOLJNbRmHKRJ7GnSaN/FuGfDhA3eLmeBQMIpoYv/12TJA Jt4TjAcAOh5Uc8qpIqaUGCzY8gKABqho9xHEoS+n2qk8OxB7SGfA5yDV8EjgjO2i K+3JE03JSPGcvW5OnIN5LCIilEL9vVJr -----END CERTIFICATE-----Generated at Thu Jul 3 07:03:21 2025 by rpki-client