$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: yClLb250NkFverw2MUuonNS09XBXyhAAMsOukFIGKV4= Subject key identifier: 22:93:69:81:48:50:11:30:E8:DE:14:2C:FF:EF:C9:98:07:44:B3:FF Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 1B Signing time: Tue 01 Jul 2025 08:45:36 +0000 Manifest this update: Tue 01 Jul 2025 08:45:35 +0000 Manifest next update: Tue 08 Jul 2025 08:45:35 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: f/Dj1xqYpQmJX8XWdgUEndlcbc6BynyEs4eHrTKvTQc=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Jul 1 08:45:35 2025 GMT Not After : Jul 8 08:45:35 2025 GMT Subject: CN=6863a02f-b919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:a2:56:5f:35:3d:d3:da:9f:c2:24:34:92: d8:26:bf:a6:60:d8:66:94:46:50:48:88:ab:41:fb: 0e:80:cd:b2:87:7f:97:a0:e7:ca:b4:ed:03:4a:38: b8:5e:ae:bd:d3:3d:6c:f1:c1:9f:79:3b:e1:e3:49: 4f:92:c4:09:de:74:5b:65:0a:16:88:f0:3d:ce:19: c8:77:0f:ae:24:91:60:54:6e:11:3d:47:35:aa:c5: 86:a6:4e:8f:6a:20:9b:00:68:f0:d6:dc:97:29:c5: 1a:1c:94:14:4e:7a:b6:18:b7:73:b6:d5:ec:39:ce: 53:b6:8c:d9:31:3c:ec:89:30:1e:c6:6f:fb:55:2e: a2:eb:41:ec:ea:7d:54:74:9c:5c:c5:0d:d4:ee:e5: 6b:67:45:cd:8d:71:2e:1a:67:ba:01:63:e6:ce:7b: da:4b:d9:e0:50:35:79:c0:89:8e:00:18:70:a6:68: 57:99:6d:5a:b5:45:8e:c8:cb:17:a9:81:51:6d:aa: b4:37:b0:d1:d1:d9:92:74:62:c2:16:1c:51:de:25: 02:15:1f:7c:79:16:c1:ba:ab:a2:12:14:08:8a:0f: 9c:f9:46:84:b2:80:aa:44:7f:08:e4:2b:73:92:b1: 30:c4:2b:5f:9a:86:e0:e2:23:e0:b4:ed:77:cf:8d: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:93:69:81:48:50:11:30:E8:DE:14:2C:FF:EF:C9:98:07:44:B3:FF X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:32:4c:59:c6:f2:c4:85:b2:99:9d:38:02:94:29:5b:6d:cb: f8:7e:91:3b:8c:2c:93:1a:c9:00:b6:4f:39:0c:55:22:64:ca: bf:e1:56:74:47:90:db:04:fe:b0:94:6a:6a:1d:f5:b7:1f:51: ca:1f:0b:46:c7:8a:53:74:a1:83:98:a1:10:78:de:f7:91:7c: b9:2e:18:bd:48:4a:49:f3:16:8d:53:64:0e:e7:5a:d6:70:a3: 65:7d:92:e2:14:d6:9e:1b:32:aa:ee:fe:ad:9b:eb:8b:40:4a: b5:6f:14:4c:10:47:4a:34:02:ff:92:8a:56:25:17:ef:3c:b6: 37:35:4a:da:24:5c:ae:fa:26:50:8b:62:85:5a:f0:f0:bd:de: bc:fa:73:e2:e4:11:18:64:f0:94:6b:26:8e:ac:d6:f8:7d:63: 0e:79:df:fb:d3:26:a6:38:ab:4d:dc:5d:3c:8e:0a:31:62:1d: 48:ee:6d:7d:fa:72:06:87:3e:14:e4:8c:ea:c9:ad:70:e8:44: d6:2a:7e:1f:5c:d2:b3:f8:09:cb:f2:a9:51:33:5f:2f:e7:34: 55:81:51:b1:81:a7:5b:28:12:bd:d0:ee:aa:02:74:60:91:38: f2:93:81:cb:85:5d:11:ea:d4:5a:2c:40:27:3f:fc:ac:b1:73: 2d:c3:a5:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTA3MDEwODQ1MzVaFw0yNTA3MDgwODQ1MzVaMBgxFjAUBgNV BAMTDTY4NjNhMDJmLWI5MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGOqJWXzU909qfwiQ0ktgmv6Zg2GaURlBIiKtB+w6AzbKHf5eg58q07QNKOLhe rr3TPWzxwZ95O+HjSU+SxAnedFtlChaI8D3OGch3D64kkWBUbhE9RzWqxYamTo9q IJsAaPDW3JcpxRoclBROerYYt3O21ew5zlO2jNkxPOyJMB7Gb/tVLqLrQezqfVR0 nFzFDdTu5WtnRc2NcS4aZ7oBY+bOe9pL2eBQNXnAiY4AGHCmaFeZbVq1RY7Iyxep gVFtqrQ3sNHR2ZJ0YsIWHFHeJQIVH3x5FsG6q6ISFAiKD5z5RoSygKpEfwjkK3OS sTDEK1+ahuDiI+C07XfPjdyXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIpNpgUhQ ETDo3hQs/+/JmAdEs/8wHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABEyTFnG8sSFspmdOAKUKVtty/h+kTuMLJMayQC2TzkMVSJkyr/hVnRH kNsE/rCUamod9bcfUcofC0bHilN0oYOYoRB43veRfLkuGL1ISknzFo1TZA7nWtZw o2V9kuIU1p4bMqru/q2b64tASrVvFEwQR0o0Av+SilYlF+88tjc1StokXK76JlCL YoVa8PC93rz6c+LkERhk8JRrJo6s1vh9Yw553/vTJqY4q03cXTyOCjFiHUjubX36 cgaHPhTkjOrJrXDoRNYqfh9c0rP4CcvyqVEzXy/nNFWBUbGBp1soEr3Q7qoCdGCR OPKTgcuFXRHq1FosQCc//Kyxcy3DpZU= -----END CERTIFICATE-----Generated at Thu Jul 3 08:41:57 2025 by rpki-client