$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: M+QfqekNePKSjida76dLy9EV/52NN9s8fS7n8JpAR2Y= Subject key identifier: C6:58:2A:2D:16:E1:62:50:B6:D8:26:00:D9:5C:6C:13:38:C6:E2:EF Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 07A1 Signing time: Mon 30 Jun 2025 21:30:11 +0000 Manifest this update: Mon 30 Jun 2025 21:30:10 +0000 Manifest next update: Mon 07 Jul 2025 21:30:10 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: TXFwI/XjGI83WyYCYvX3rgkHt3MlsJDGCz3X4oykDFU=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: TvcOHSsYCyXpnMLRDhy2fSmnr1T+wVns1s4NPPpAH1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Jun 30 21:30:10 2025 GMT Not After : Jul 7 21:30:10 2025 GMT Subject: CN=686301e2-efa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c3:b9:d7:af:2d:62:d8:51:c6:94:ee:dc:c1: b5:d0:08:18:8c:8f:ca:d4:2f:41:89:f4:2e:14:75: 9e:df:4d:b5:c5:f2:9c:3b:30:f7:7c:e2:ea:14:76: 91:82:02:8e:18:ce:fc:24:11:1f:40:59:36:73:49: 77:b4:4f:b4:e1:2b:e8:fe:41:50:bb:cc:89:7b:d0: db:9b:28:39:72:6b:dc:33:0a:60:5f:2f:5f:1f:fc: b4:07:11:b0:9e:36:f3:5a:02:25:eb:6d:20:c9:8c: 6b:68:ba:07:1b:1c:4a:86:9d:20:22:06:a3:19:a7: db:3b:96:ce:b2:41:8c:a7:63:51:e1:4a:3a:e9:95: 15:fb:cc:69:b1:25:08:00:07:c6:86:b4:a6:46:53: b7:52:fa:ba:fe:d1:f8:d4:71:74:c9:70:77:52:ec: 08:43:83:08:ca:64:95:db:19:d7:8e:8a:c4:76:28: ee:c8:97:ce:4b:3e:cd:f4:e7:40:44:a1:20:11:fb: d6:77:1a:9c:ce:24:9d:68:09:fe:83:b7:e5:9a:3b: 80:65:8f:e4:d0:0f:5c:00:c6:1d:58:eb:29:18:04: f1:27:63:26:e1:fb:72:88:c3:76:ad:85:3a:b3:93: 78:bb:78:5d:a4:16:ea:3c:5c:2b:61:31:4d:d8:0f: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:58:2A:2D:16:E1:62:50:B6:D8:26:00:D9:5C:6C:13:38:C6:E2:EF X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c3:be:97:a6:e6:87:7c:b6:2c:9e:cd:54:ad:4a:f2:a5:40: 55:81:eb:89:77:ba:85:98:49:46:17:d0:8e:06:be:60:1d:1f: 34:14:cb:08:33:27:93:6b:c9:48:2d:b3:84:c6:12:36:6b:d0: 53:34:08:72:8b:09:78:19:ed:59:39:07:0b:59:b4:aa:11:a6: cd:8b:7c:23:12:fa:9c:62:dd:a9:ad:28:ab:4d:c9:f3:d9:eb: 0a:4d:6c:59:b1:04:9b:b9:4d:f3:87:0a:80:2b:7e:d5:e5:52: d6:c3:c3:a7:2f:99:6d:2c:da:21:76:62:34:b9:ab:c4:3d:f9: 5d:a4:43:5f:ce:f8:3b:20:55:0f:38:d7:2f:ae:58:4b:a2:07: 4f:02:db:4b:42:43:4a:ab:97:34:58:f2:e3:6e:ef:ee:dc:87: 92:5b:a2:45:2b:ee:12:b0:9d:d3:24:66:4a:9e:70:a4:f3:6a: 63:9d:7c:0d:81:77:35:48:f2:6d:11:45:35:93:4d:59:fe:4b: eb:7e:0d:ad:a3:09:6a:24:65:3c:35:7b:20:b6:08:a1:4b:c0: 52:cc:36:a8:fb:d1:b8:ed:4a:94:61:14:66:01:ce:ce:e9:ef: 32:99:86:a5:35:03:aa:d7:6f:25:98:2d:a3:45:ee:e1:a7:34: e2:97:1b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwNjMwMjEzMDEwWhcNMjUwNzA3MjEzMDEwWjAYMRYwFAYD VQQDEw02ODYzMDFlMi1lZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cO5168tYthRxpTu3MG10AgYjI/K1C9BifQuFHWe3021xfKcOzD3fOLqFHaR ggKOGM78JBEfQFk2c0l3tE+04Svo/kFQu8yJe9Dbmyg5cmvcMwpgXy9fH/y0BxGw njbzWgIl620gyYxraLoHGxxKhp0gIgajGafbO5bOskGMp2NR4Uo66ZUV+8xpsSUI AAfGhrSmRlO3Uvq6/tH41HF0yXB3UuwIQ4MIymSV2xnXjorEdijuyJfOSz7N9OdA RKEgEfvWdxqcziSdaAn+g7flmjuAZY/k0A9cAMYdWOspGATxJ2Mm4ftyiMN2rYU6 s5N4u3hdpBbqPFwrYTFN2A+OAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZYKi0W 4WJQttgmANlcbBM4xuLvMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdw76XpuaHfLYsns1UrUrypUBVgeuJd7qFmElGF9COBr5gHR80FMsI MyeTa8lILbOExhI2a9BTNAhyiwl4Ge1ZOQcLWbSqEabNi3wjEvqcYt2prSirTcnz 2esKTWxZsQSbuU3zhwqAK37V5VLWw8OnL5ltLNohdmI0uavEPfldpENfzvg7IFUP ONcvrlhLogdPAttLQkNKq5c0WPLjbu/u3IeSW6JFK+4SsJ3TJGZKnnCk82pjnXwN gXc1SPJtEUU1k01Z/kvrfg2towlqJGU8NXsgtgihS8BSzDao+9G47UqUYRRmAc7O 6e8ymYalNQOq128lmC2jRe7hpzTilxtO -----END CERTIFICATE-----Generated at Wed Jul 2 19:18:00 2025 by rpki-client