$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft File: akunmdqw8ib6Y2bG8ceOIqwMBz0.mft (raw, json) Hash identifier: ZujsMBLPhgE8Y0FXOeaPQ/nB/5Ckq8SHNJKxsp1qQ0M= Subject key identifier: 68:26:75:CF:AC:9A:47:76:BB:F3:F8:DE:52:FA:F9:A1:06:69:16:4C Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D Certificate issuer: /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft Manifest number: 0784 Signing time: Sat 28 Jun 2025 21:04:54 +0000 Manifest this update: Sat 28 Jun 2025 21:04:53 +0000 Manifest next update: Sat 05 Jul 2025 21:04:53 +0000 Files and hashes: 1: akunmdqw8ib6Y2bG8ceOIqwMBz0.crl (hash: 52fWqdXBh3gg0Qt0TiZt7RwZm2RYl2HtoiYyOWGNW/M=) 2: FA77145A14EB11EBA13B881DC4F9AE02.roa (hash: s6zjucspba621IzJupXb2nvzbQOkfylngCtE1Ksgs8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122CB9, serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Validity Not Before: Jun 28 21:04:53 2025 GMT Not After : Jul 5 21:04:53 2025 GMT Subject: CN=686058f6-99d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:2f:51:71:a9:80:a3:a6:34:14:08:f3:6d: fb:34:4d:4f:d6:30:1a:d8:6e:8d:a3:d2:e1:7f:5b: 84:26:bc:6f:97:70:84:51:0b:41:b0:64:c7:23:75: 05:82:ad:e2:d6:f9:38:37:5a:bc:00:7d:38:53:f8: e2:89:d5:39:66:ca:b2:20:16:b5:4d:bc:f7:0c:16: 9a:74:0c:c6:42:6a:0a:cd:10:7f:86:63:a5:59:8f: 17:8f:80:04:c8:20:99:5f:f9:6c:0b:a7:c1:81:e6: e1:7a:12:c1:83:92:0a:73:d8:0d:b2:d1:f3:78:fd: 63:01:97:68:19:3f:31:1a:83:d2:15:9e:e7:e3:1c: 91:16:ef:6a:18:47:ad:37:70:a0:5f:3b:b7:e1:f1: 7b:cd:ce:99:52:63:8a:89:93:7b:79:e0:09:1f:09: 89:b7:22:0a:53:74:e7:c7:15:fa:42:cb:72:5d:61: d5:2a:1b:d3:2c:37:25:7a:d9:28:6e:ee:cb:c4:bb: 34:17:54:5b:ed:0d:ff:3a:1a:28:5c:6f:03:81:6a: 2e:31:60:77:e9:85:8c:08:bf:cb:d0:f2:34:36:99: 2d:f6:9c:3a:62:13:34:a3:54:5d:96:37:5e:bc:6b: 45:28:71:20:56:f1:c5:e8:5a:7b:ce:5e:fb:18:40: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:75:CF:AC:9A:47:76:BB:F3:F8:DE:52:FA:F9:A1:06:69:16:4C X509v3 Authority Key Identifier: keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:a5:00:da:c8:d4:ec:fc:a2:f3:47:53:28:d0:18:13:7d:f5: 15:91:dd:d3:db:7e:f2:70:4f:a2:7f:cf:67:0a:a6:50:26:fd: c3:72:75:34:21:05:4b:a4:d3:b9:6f:56:4d:97:56:82:c3:17: 77:e1:ce:7d:70:4e:b2:a6:47:1a:10:96:c2:8b:f7:21:e4:9c: c4:07:14:ef:fd:32:6d:67:50:3f:34:96:5d:9c:77:1c:41:fe: 00:fe:23:2c:40:46:f0:07:bb:f4:21:57:f0:6a:dc:9e:0f:27: f9:f8:e1:ca:af:cd:e5:80:25:56:5c:44:03:b9:ee:e0:10:9b: bb:32:a1:66:ef:4c:35:95:24:d4:3b:80:b7:75:14:c2:7a:4c: 44:74:57:5d:2d:68:26:bd:bb:52:82:87:b4:9a:69:81:06:b6: a3:b8:7b:ad:f3:99:0b:40:49:8e:5d:4c:21:02:16:a7:24:64: ac:b3:3f:8e:59:bd:b2:6f:3b:00:18:d3:7b:6d:b0:77:55:28: 5e:92:fe:41:63:3d:59:85:34:4d:84:b6:d4:a2:f1:7c:6a:71: 8c:bf:c9:75:7d:8e:33:71:9c:37:0a:07:b5:e1:ce:dd:79:a9: 83:1d:a9:cc:38:48:16:fc:ea:08:73:8d:db:69:28:dd:06:09: e5:f4:cc:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDQjkxMTAvBgNVBAUTKDZBNEJBNzk5REFCMEYyMjZGQTYzNjZDNkYxQzc4RTIy QUMwQzA3M0QwHhcNMjUwNjI4MjEwNDUzWhcNMjUwNzA1MjEwNDUzWjAYMRYwFAYD VQQDEw02ODYwNThmNi05OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kMvUXGpgKOmNBQI8237NE1P1jAa2G6No9Lhf1uEJrxvl3CEUQtBsGTHI3UF gq3i1vk4N1q8AH04U/jiidU5ZsqyIBa1Tbz3DBaadAzGQmoKzRB/hmOlWY8Xj4AE yCCZX/lsC6fBgebhehLBg5IKc9gNstHzeP1jAZdoGT8xGoPSFZ7n4xyRFu9qGEet N3CgXzu34fF7zc6ZUmOKiZN7eeAJHwmJtyIKU3TnxxX6QstyXWHVKhvTLDcletko bu7LxLs0F1Rb7Q3/OhooXG8DgWouMWB36YWMCL/L0PI0Npkt9pw6YhM0o1Rdljde vGtFKHEgVvHF6Fp7zl77GECQOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgmdc+s mkd2u/P43lL6+aEGaRZMMB8GA1UdIwQYMBaAFGpLp5nasPIm+mNmxvHHjiKsDAc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkNCOS81NkFBMzExNDE0 RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhpYjZZMmJHOGNlT0lxd01C ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrdW5tZHF3OGliNlkyYkc4Y2VPSXF3TUJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkNCOS81NkFBMzExNDE0RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhp YjZZMmJHOGNlT0lxd01CejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDApQDayNTs/KLzR1Mo0BgTffUVkd3T237ycE+if89nCqZQJv3DcnU0 IQVLpNO5b1ZNl1aCwxd34c59cE6ypkcaEJbCi/ch5JzEBxTv/TJtZ1A/NJZdnHcc Qf4A/iMsQEbwB7v0IVfwatyeDyf5+OHKr83lgCVWXEQDue7gEJu7MqFm70w1lSTU O4C3dRTCekxEdFddLWgmvbtSgoe0mmmBBrajuHut85kLQEmOXUwhAhanJGSssz+O Wb2ybzsAGNN7bbB3VShekv5BYz1ZhTRNhLbUovF8anGMv8l1fY4zcZw3Cge14c7d eamDHanMOEgW/OoIc43baSjdBgnl9Myv -----END CERTIFICATE-----Generated at Mon Jun 30 02:34:31 2025 by rpki-client