$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: 3DFoaIVPjGFvNg+VViFOugqT3eg6JEFwgPqzL3p4G20= Subject key identifier: BA:54:75:47:98:78:83:F4:BD:C8:07:02:54:D2:BC:C5:64:8C:7C:9D Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 22CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2289 Signing time: Wed 02 Jul 2025 15:58:38 +0000 Manifest this update: Wed 02 Jul 2025 15:58:38 +0000 Manifest next update: Wed 09 Jul 2025 15:58:38 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: 6GbqDIAGzIYdspD4bh/nglkNbHrR2FwZD42zazy5FO8=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8908 (0x22cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Jul 2 15:58:38 2025 GMT Not After : Jul 9 15:58:38 2025 GMT Subject: CN=6865572e-013f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:25:2f:57:bf:5e:c0:0b:21:a8:1f:2a:8a:56: 37:a4:53:44:8b:0a:b2:82:b5:45:28:98:14:1d:2d: 70:f3:c2:9e:8c:c2:95:5b:bd:0b:fc:52:f6:26:4d: 8e:c9:50:a6:80:92:53:e8:f4:7c:4f:f9:6f:ee:5a: 72:a2:7a:78:a6:e1:7f:bf:aa:0b:2f:d7:f1:8d:a9: 71:d5:51:12:92:df:ac:43:59:4e:7c:2e:9e:55:1f: de:af:3b:54:35:8a:08:7b:5a:a0:16:44:a8:75:01: 12:59:75:b1:bc:14:55:08:be:fc:33:74:ae:6c:23: af:f5:74:0d:c6:d0:60:75:da:62:39:35:7b:52:1f: 71:bb:d7:89:83:e7:e9:56:0d:8b:40:5f:b0:1e:c4: db:09:fb:23:42:e0:46:70:b9:b8:68:5e:66:1a:ee: 80:2e:1c:77:71:9e:40:72:e5:dc:63:87:73:9d:1c: 1a:92:be:f8:ee:b4:50:ab:88:ec:1c:e3:87:83:ac: ed:87:79:df:47:4c:ad:c0:84:36:16:6f:fb:8f:a4: 1b:c9:08:1e:68:a3:a5:5a:9e:97:04:8d:e2:84:7a: d7:5f:51:3d:16:3c:31:9b:b6:f4:be:41:70:f5:c4: ff:01:11:af:7b:31:7e:88:f5:3d:f9:d3:ce:72:5e: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:75:47:98:78:83:F4:BD:C8:07:02:54:D2:BC:C5:64:8C:7C:9D X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:6d:86:85:b5:48:cb:eb:c4:29:8b:e7:2d:36:85:ba:a5:4b: b0:d9:b2:44:48:91:0b:f1:2b:1d:16:8d:7c:e3:21:e7:37:7a: 78:70:33:f8:e3:64:61:9c:d7:f2:df:55:4f:49:89:e1:cf:97: a5:e0:1d:81:52:ba:93:87:ed:12:21:5c:b2:09:ac:37:6d:9b: fe:82:66:aa:95:f5:7d:1c:b8:e5:65:66:e3:21:c0:54:35:36: 99:4b:cf:c1:fa:46:d1:47:3c:19:8f:78:87:a1:07:57:ff:0a: 19:c3:3d:6b:f5:5c:5d:d2:27:2e:5b:bc:3b:51:e1:c3:76:ad: 8d:1f:70:41:21:9d:12:a8:96:d0:c7:fe:9b:6e:8c:1d:a6:a7: b4:15:ff:f2:f2:87:00:10:bb:73:32:af:1d:1b:61:0d:9b:9f: 02:aa:1a:1c:1a:4b:de:41:4f:09:6e:1d:c5:c3:83:b8:93:e5: dc:39:88:fb:09:17:04:80:63:4c:32:54:b3:25:cb:e9:7d:df: 92:c2:8d:8e:25:98:f4:f5:28:22:fa:b8:a4:7c:65:99:65:27: a9:34:40:6d:e9:d6:b9:d4:d6:5f:8b:30:bb:fd:c8:b4:db:3f: 1b:25:a9:ab:db:1b:ad:8b:7d:b7:f1:47:24:c8:36:50:f6:9f: ae:34:72:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUwNzAyMTU1ODM4WhcNMjUwNzA5MTU1ODM4WjAYMRYwFAYD VQQDEw02ODY1NTcyZS0wMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9yUvV79ewAshqB8qilY3pFNEiwqygrVFKJgUHS1w88KejMKVW70L/FL2Jk2O yVCmgJJT6PR8T/lv7lpyonp4puF/v6oLL9fxjalx1VESkt+sQ1lOfC6eVR/erztU NYoIe1qgFkSodQESWXWxvBRVCL78M3SubCOv9XQNxtBgddpiOTV7Uh9xu9eJg+fp Vg2LQF+wHsTbCfsjQuBGcLm4aF5mGu6ALhx3cZ5AcuXcY4dznRwakr747rRQq4js HOOHg6zth3nfR0ytwIQ2Fm/7j6QbyQgeaKOlWp6XBI3ihHrXX1E9Fjwxm7b0vkFw 9cT/ARGvezF+iPU9+dPOcl5nWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpUdUeY eIP0vcgHAlTSvMVkjHydMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEbYaFtUjL68Qpi+ctNoW6pUuw2bJESJEL8SsdFo184yHnN3p4cDP4 42RhnNfy31VPSYnhz5el4B2BUrqTh+0SIVyyCaw3bZv+gmaqlfV9HLjlZWbjIcBU NTaZS8/B+kbRRzwZj3iHoQdX/woZwz1r9Vxd0icuW7w7UeHDdq2NH3BBIZ0SqJbQ x/6bbowdpqe0Ff/y8ocAELtzMq8dG2ENm58CqhocGkveQU8Jbh3Fw4O4k+XcOYj7 CRcEgGNMMlSzJcvpfd+Swo2OJZj09Sgi+rikfGWZZSepNEBt6da51NZfizC7/ci0 2z8bJamr2xuti3238UckyDZQ9p+uNHKs -----END CERTIFICATE-----Generated at Thu Jul 3 19:47:04 2025 by rpki-client