$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: J3dGFqfHg5SkC861lCImQ9AG8Slt/M/pgwWPhYdL5p8= Subject key identifier: 75:7A:84:99:69:6F:7B:ED:89:B4:1B:64:28:27:11:96:83:C0:1A:B0 Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 090B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 0902 Signing time: Mon 30 Jun 2025 20:31:46 +0000 Manifest this update: Mon 30 Jun 2025 20:31:46 +0000 Manifest next update: Mon 07 Jul 2025 20:31:46 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: i8OfoWn+cb/SbxnLZjg4zd2G9Fdq1PsQ1gpPWTbq0bg=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Jun 30 20:31:46 2025 GMT Not After : Jul 7 20:31:46 2025 GMT Subject: CN=6862f432-8cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:83:a4:5b:f3:43:0e:57:90:eb:be:6d:9f: 10:fa:f3:f4:72:db:88:8e:cb:b5:94:16:40:63:99: 43:cc:3f:a5:f8:61:4e:4d:fc:7b:df:1c:64:2c:a8: 6b:f1:40:4f:df:0b:c1:96:5c:bb:52:e6:fe:0d:9d: 4e:50:51:95:87:da:7d:b0:2d:d1:84:c5:9e:21:93: 21:76:b5:59:b8:e8:ac:23:32:65:d5:6c:7d:ee:ad: f8:4c:65:2f:fe:ea:3a:8d:f4:20:21:7a:8c:76:73: eb:db:9b:d4:d0:8c:95:4e:d6:b4:86:49:f5:9d:15: 62:88:c7:2a:c2:27:bc:9c:42:4c:93:06:36:e7:28: 03:8d:89:d8:f3:10:a8:14:79:96:d8:4a:1b:62:35: 34:ce:d6:6c:2c:41:ce:f7:f0:79:0b:b2:1e:89:8c: 2f:54:bd:78:b3:d3:19:f5:3e:b3:a5:29:6d:b5:65: 75:8e:a3:af:14:be:0d:ba:22:27:bd:55:2b:e8:ea: 1e:54:4c:9c:3a:57:6c:e6:8e:15:91:e7:00:03:07: 83:18:9c:42:3a:45:cd:a7:91:dc:f9:dd:76:26:c0: b2:fd:32:76:87:93:8a:f0:5c:53:18:22:29:22:61: 18:df:b6:fd:e0:16:9a:3c:f1:90:2a:1e:eb:3a:15: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7A:84:99:69:6F:7B:ED:89:B4:1B:64:28:27:11:96:83:C0:1A:B0 X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f9:0a:02:de:ee:5d:a1:6a:39:da:c8:2a:e3:20:21:16:7b: 79:db:83:12:54:df:34:84:e3:37:df:2f:30:99:6c:a2:6b:78: 0c:d3:ad:f3:81:40:22:72:bf:ea:01:bb:61:08:8d:dd:c9:83: 0e:ff:93:86:46:40:e8:f2:ba:b8:c2:29:28:94:fd:1d:ba:03: c8:d9:e8:66:fb:57:e9:0d:ef:24:76:8b:fe:2f:4c:59:1c:83: f3:7e:37:0e:ee:1f:59:3a:00:aa:f0:57:4d:85:8e:d4:fb:b2: b2:92:4b:15:fb:3f:7f:2c:a9:9d:7c:01:cf:c5:50:e1:d0:e7: 7f:2a:da:a2:11:11:f6:1d:b8:a4:18:d2:cb:fe:c2:6a:31:d5: 80:e2:1d:6b:80:c3:0d:9a:23:86:b1:ca:68:0b:da:96:8c:3b: 7b:9f:b1:c5:09:ca:aa:cf:fc:cc:37:3e:9e:e7:45:87:cc:79: 47:71:68:99:d7:87:f2:47:65:98:e5:ca:50:35:a8:fe:f1:3d: 61:bf:3f:38:46:71:f7:32:5c:91:f4:2f:89:97:5a:8b:53:de: 85:76:46:86:d8:4c:d8:97:ca:ce:64:a2:75:7d:4b:8c:b5:78: 46:c1:4b:5b:f1:07:7c:c6:00:39:2b:4a:0e:08:ab:61:d9:20: 6a:0f:ac:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjUwNjMwMjAzMTQ2WhcNMjUwNzA3MjAzMTQ2WjAYMRYwFAYD VQQDEw02ODYyZjQzMi04Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61SDpFvzQw5XkOu+bZ8Q+vP0ctuIjsu1lBZAY5lDzD+l+GFOTfx73xxkLKhr 8UBP3wvBlly7Uub+DZ1OUFGVh9p9sC3RhMWeIZMhdrVZuOisIzJl1Wx97q34TGUv /uo6jfQgIXqMdnPr25vU0IyVTta0hkn1nRViiMcqwie8nEJMkwY25ygDjYnY8xCo FHmW2EobYjU0ztZsLEHO9/B5C7IeiYwvVL14s9MZ9T6zpSlttWV1jqOvFL4NuiIn vVUr6OoeVEycOlds5o4VkecAAweDGJxCOkXNp5Hc+d12JsCy/TJ2h5OK8FxTGCIp ImEY37b94BaaPPGQKh7rOhUNLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV6hJlp b3vtibQbZCgnEZaDwBqwMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA+QoC3u5doWo52sgq4yAhFnt524MSVN80hOM33y8wmWyia3gM063z gUAicr/qAbthCI3dyYMO/5OGRkDo8rq4wikolP0dugPI2ehm+1fpDe8kdov+L0xZ HIPzfjcO7h9ZOgCq8FdNhY7U+7KykksV+z9/LKmdfAHPxVDh0Od/KtqiERH2Hbik GNLL/sJqMdWA4h1rgMMNmiOGscpoC9qWjDt7n7HFCcqqz/zMNz6e50WHzHlHcWiZ 14fyR2WY5cpQNaj+8T1hvz84RnH3MlyR9C+Jl1qLU96FdkaG2EzYl8rOZKJ1fUuM tXhGwUtb8Qd8xgA5K0oOCKth2SBqD6wn -----END CERTIFICATE-----Generated at Tue Jul 1 11:29:17 2025 by rpki-client