$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: ztJRCECYxxgOTrhY+CWDQ2y4M21OPaec8wNBRldmHN0= Subject key identifier: F7:44:3C:BD:0D:42:D2:0C:EF:93:96:0F:BF:D8:7E:8A:8F:C5:37:8E Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: C7 Signing time: Thu 03 Jul 2025 05:57:01 +0000 Manifest this update: Thu 03 Jul 2025 05:57:01 +0000 Manifest next update: Thu 10 Jul 2025 05:57:01 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: INS41Sq+ZC6yWEnIQjOWLQLXcL6fMPOXez0a+bwRO6g=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Jul 3 05:57:01 2025 GMT Not After : Jul 10 05:57:01 2025 GMT Subject: CN=68661bad-98ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:ed:c7:74:7b:78:6e:6d:a6:b6:06:cc:5c: 38:ac:ee:a5:ee:e0:d4:e5:d7:a2:5f:da:56:eb:45: ad:36:09:e3:e3:40:17:a2:ae:d3:d3:f4:91:c8:6a: c6:a5:cc:68:d6:ed:33:57:02:3d:68:d5:f8:98:8b: a3:88:cb:f3:29:dc:71:ab:e4:24:f0:ed:d1:89:68: b4:98:0c:71:53:c7:ca:96:47:cb:71:f0:59:5d:1b: 1b:a6:35:82:33:88:17:3c:76:ba:7d:ee:e1:11:b4: 41:10:80:4d:18:cd:3e:3f:4a:0f:be:98:72:14:6a: 31:6a:a5:1b:92:9b:ac:07:34:6e:ec:0a:81:26:84: 59:81:71:d9:18:0b:38:71:98:43:91:ab:93:80:6f: 2c:3e:01:2c:7d:a1:17:b1:c7:72:be:16:20:e1:16: 90:9f:29:c3:1b:dc:50:27:0e:df:e7:32:5c:16:f9: 23:84:ce:6a:77:1e:5d:66:52:6e:12:e7:17:fa:f1: da:43:42:9c:b0:b7:ac:19:31:80:e6:c7:cb:19:eb: 64:2d:99:8f:bc:55:07:73:c4:e4:af:81:0f:a2:d2: 6b:a3:6a:4a:b1:50:be:ff:e6:ca:f0:db:74:90:bb: 55:5d:c8:04:8d:60:f3:2b:dd:b7:e8:9e:9c:95:af: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:44:3C:BD:0D:42:D2:0C:EF:93:96:0F:BF:D8:7E:8A:8F:C5:37:8E X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3f:01:78:82:b9:88:20:45:21:0b:23:e1:e3:2e:6f:1c:d6: 6d:57:e7:eb:2f:5e:7b:37:63:ab:f3:95:0e:c4:f2:74:a3:bc: 39:7d:c4:24:7a:23:2d:39:c4:cc:7b:1a:18:f1:bb:71:e5:86: 33:31:c5:d6:19:31:21:b9:4b:63:27:04:45:a8:1c:cd:96:b4: 88:d6:49:37:cb:79:f7:a2:28:da:51:61:6b:22:9b:31:c7:bb: ec:06:0d:0a:32:f8:bf:7d:ac:f0:56:4a:e4:aa:70:71:bf:df: 68:fe:81:58:8e:6d:5e:a7:a4:0d:77:de:05:66:a4:59:c9:48: 8d:50:82:df:91:10:5a:77:b8:9e:98:d9:8d:4e:23:b5:cd:e4: d4:44:23:e3:33:42:8a:a8:79:e8:5e:e9:06:b5:78:63:ca:14: f5:99:bb:0a:b5:84:83:e0:2f:4b:03:01:84:39:9c:93:cc:e9: 20:07:79:02:a1:aa:f1:17:92:d6:73:a2:7e:63:27:f6:8f:ab: ab:73:e4:74:5e:9f:cb:17:0b:ab:22:02:c5:8f:f8:7e:33:c3: e6:1d:65:f2:71:cb:31:54:fe:86:d7:38:9a:d2:49:b2:53:c3: ba:2c:95:86:d6:87:af:63:9e:39:a3:63:c6:bd:32:ca:e9:e1: 64:7f:5f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUwNzAzMDU1NzAxWhcNMjUwNzEwMDU1NzAxWjAYMRYwFAYD VQQDEw02ODY2MWJhZC05OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzePtx3R7eG5tprYGzFw4rO6l7uDU5deiX9pW60WtNgnj40AXoq7T0/SRyGrG pcxo1u0zVwI9aNX4mIujiMvzKdxxq+Qk8O3RiWi0mAxxU8fKlkfLcfBZXRsbpjWC M4gXPHa6fe7hEbRBEIBNGM0+P0oPvphyFGoxaqUbkpusBzRu7AqBJoRZgXHZGAs4 cZhDkauTgG8sPgEsfaEXscdyvhYg4RaQnynDG9xQJw7f5zJcFvkjhM5qdx5dZlJu EucX+vHaQ0KcsLesGTGA5sfLGetkLZmPvFUHc8Tkr4EPotJro2pKsVC+/+bK8Nt0 kLtVXcgEjWDzK9236J6cla/h0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdEPL0N QtIM75OWD7/YfoqPxTeOMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsPwF4grmIIEUhCyPh4y5vHNZtV+frL157N2Or85UOxPJ0o7w5fcQk eiMtOcTMexoY8btx5YYzMcXWGTEhuUtjJwRFqBzNlrSI1kk3y3n3oijaUWFrIpsx x7vsBg0KMvi/fazwVkrkqnBxv99o/oFYjm1ep6QNd94FZqRZyUiNUILfkRBad7ie mNmNTiO1zeTURCPjM0KKqHnoXukGtXhjyhT1mbsKtYSD4C9LAwGEOZyTzOkgB3kC oarxF5LWc6J+Yyf2j6urc+R0Xp/LFwurIgLFj/h+M8PmHWXyccsxVP6G1zia0kmy U8O6LJWG1oevY545o2PGvTLK6eFkf1+E -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:21 2025 by rpki-client