$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft File: r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json) Hash identifier: JWB8MVqzkFPi5PYIgUUcxyj4yfNbmUH4mackhisnXQo= Subject key identifier: 78:3C:61:04:A1:BC:3C:DB:6A:F5:58:0A:84:87:3E:5C:3F:3A:58:0E Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 Certificate issuer: /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft Manifest number: 65 Signing time: Thu 03 Jul 2025 07:23:43 +0000 Manifest this update: Thu 03 Jul 2025 07:23:42 +0000 Manifest next update: Thu 10 Jul 2025 07:23:42 +0000 Files and hashes: 1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: zS6VW/OGSMC54nqMX0j62oFb7G5xnRWYFCHNuvuKaoo=) 2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: rKGqZf7K9QKHRBXlpgZth78K2mjkrDt+mwCvAfFIYLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1 Validity Not Before: Jul 3 07:23:42 2025 GMT Not After : Jul 10 07:23:42 2025 GMT Subject: CN=68662ffe-5b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:b0:d0:c6:fc:aa:70:e4:ad:41:5c:1f:fb: 74:73:3e:48:39:c6:77:80:7f:e7:11:e1:e0:d3:b1: 0e:25:1c:b6:c4:ec:28:e0:b8:14:d8:72:64:a9:41: b2:c0:49:28:db:47:67:33:53:9c:fc:c2:41:80:4d: e1:18:2f:dc:57:cd:0d:ad:e5:df:3a:d4:48:4c:84: 3d:8a:a3:b5:39:13:bb:be:1b:ba:51:27:0a:03:f0: 20:b2:a5:b2:50:23:c5:84:0f:f0:39:32:ad:f7:05: f5:e6:57:22:fa:6c:b7:20:2c:1a:07:1f:99:1b:b7: a4:a2:3f:0f:8a:e3:e0:81:9a:dc:2f:19:ac:5c:ff: 17:d4:28:52:e5:e8:ca:c5:c4:d3:40:26:b7:49:38: 8d:e1:03:74:19:e1:f6:c8:f3:21:2d:03:4d:5a:ce: 4d:68:47:ae:5b:14:c9:b2:3e:43:a6:4f:7f:ce:06: ca:89:da:69:57:6b:f7:bd:86:a6:02:f7:ef:e5:93: 4a:5a:a7:0b:6f:3b:8e:e0:bd:6e:42:35:99:53:02: 16:e3:cc:19:eb:94:00:85:f0:63:87:fb:af:15:06: 07:98:32:a4:c6:31:19:24:63:ba:94:f9:7b:49:c4: d3:38:0f:42:74:73:31:be:40:fa:7e:c8:ba:dd:b8: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:61:04:A1:BC:3C:DB:6A:F5:58:0A:84:87:3E:5C:3F:3A:58:0E X509v3 Authority Key Identifier: keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8e:95:83:89:2c:88:2b:89:0e:40:be:de:ad:f8:fc:d6:57: 52:d7:06:58:95:41:a1:81:ff:69:30:0a:50:98:11:2e:72:c4: 07:4e:87:62:4b:99:99:a8:8c:b3:30:66:0a:42:a8:82:38:14: 83:6f:a7:e0:6c:ae:ba:a1:83:c2:95:82:13:23:fd:6c:f0:4a: c4:f2:f3:9e:e7:c5:a5:ce:e8:48:9b:64:52:5d:6c:c7:58:ef: c5:c5:30:cb:d4:6a:89:39:bb:7f:97:cf:d8:f5:34:87:d9:39: 8a:4f:67:1e:bb:f3:62:8f:4b:3d:33:f1:4d:8e:37:f8:10:06: 68:a3:17:1d:dd:8b:4f:79:14:ec:f9:d2:a6:62:d8:f5:7e:70: e1:8a:77:aa:c2:b6:aa:62:e7:11:7e:bb:7f:90:e2:04:25:7f: 29:fb:03:5c:32:4d:6d:da:3a:b3:3d:d1:74:ae:c3:a5:77:71: 25:84:a5:94:78:c6:b5:ae:21:d2:3e:1e:3d:26:87:b4:af:c1: eb:e5:b0:ae:fe:67:3e:c5:51:1b:84:a4:2e:9a:de:6e:ec:37: b7:13:ca:ad:fd:ff:83:a8:dc:dd:78:2e:7f:da:2c:ef:37:17: 2b:f3:da:62:f7:01:83:a6:55:0d:e0:8a:c1:79:24:5e:cc:2a: 6b:dc:38:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoQUY0NjFENTdBOTBBMzM1QjJGQTc3QTdBQUVDMTY3MzQ5 NTQ5MjNCMTAeFw0yNTA3MDMwNzIzNDJaFw0yNTA3MTAwNzIzNDJaMBgxFjAUBgNV BAMTDTY4NjYyZmZlLTViM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBFbDQxvyqcOStQVwf+3RzPkg5xneAf+cR4eDTsQ4lHLbE7CjguBTYcmSpQbLA SSjbR2czU5z8wkGATeEYL9xXzQ2t5d861EhMhD2Ko7U5E7u+G7pRJwoD8CCypbJQ I8WED/A5Mq33BfXmVyL6bLcgLBoHH5kbt6SiPw+K4+CBmtwvGaxc/xfUKFLl6MrF xNNAJrdJOI3hA3QZ4fbI8yEtA01azk1oR65bFMmyPkOmT3/OBsqJ2mlXa/e9hqYC 9+/lk0papwtvO47gvW5CNZlTAhbjzBnrlACF8GOH+68VBgeYMqTGMRkkY7qU+XtJ xNM4D0J0czG+QPp+yLrduMW7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeDxhBKG8 PNtq9VgKhIc+XD86WA4wHwYDVR0jBBgwFoAUr0YdV6kKM1svp3p6rsFnNJVJI7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2LzhEQUUwNUEwRDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFzdnAzcDZyc0ZuTkpWSkk3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjBZZFY2a0tNMXN2cDNwNnJzRm5OSlZKSTdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2LzhEQUUwNUEwRDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyL3IwWWRWNmtLTTFz dnAzcDZyc0ZuTkpWSkk3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFeOlYOJLIgriQ5Avt6t+PzWV1LXBliVQaGB/2kwClCYES5yxAdOh2JL mZmojLMwZgpCqII4FINvp+Bsrrqhg8KVghMj/WzwSsTy857nxaXO6EibZFJdbMdY 78XFMMvUaok5u3+Xz9j1NIfZOYpPZx6782KPSz0z8U2ON/gQBmijFx3di095FOz5 0qZi2PV+cOGKd6rCtqpi5xF+u3+Q4gQlfyn7A1wyTW3aOrM90XSuw6V3cSWEpZR4 xrWuIdI+Hj0mh7SvwevlsK7+Zz7FURuEpC6a3m7sN7cTyq39/4Oo3N14Ln/aLO83 Fyvz2mL3AYOmVQ3gisF5JF7MKmvcOC8= -----END CERTIFICATE-----Generated at Thu Jul 3 23:34:54 2025 by rpki-client