$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft (raw, json) Hash identifier: FNAdxxqHvkeQKRR1WBODoL4YRCNEEGDpKXkeEm/p/Gw= Subject key identifier: 10:63:EA:3C:CA:2C:37:E2:3E:C4:FB:FD:C6:44:DA:69:41:43:0A:76 Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft Manifest number: 3F Signing time: Thu 03 Jul 2025 07:45:30 +0000 Manifest this update: Thu 03 Jul 2025 07:45:29 +0000 Manifest next update: Thu 10 Jul 2025 07:45:29 +0000 Files and hashes: 1: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl (hash: oGiFqc9LgK5iag7cKO4bCioFA4HBgiAUIxgNsZSpHsM=) 2: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (hash: 0DLCAtjJobno4Q2kUlLojdgSL4CQH+92FiMu9ZCx0jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CB8, serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Validity Not Before: Jul 3 07:45:29 2025 GMT Not After : Jul 10 07:45:29 2025 GMT Subject: CN=6866351a-211c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:cc:2c:3a:d8:ad:59:cf:02:d3:21:8d:a6: ce:17:db:0e:26:b4:ea:14:1b:5b:38:0f:97:23:96: 00:28:6b:c8:cf:c0:ae:79:a7:fd:c7:1d:f0:0b:0a: 60:5a:c6:14:12:55:cf:33:e1:0b:83:0f:37:03:0c: 6f:c1:76:2d:7c:44:35:dc:1b:7e:a1:25:4d:b5:ad: 3a:93:4b:78:ef:05:65:16:a3:79:2a:25:4b:c3:98: fc:4a:36:15:f3:6d:26:d0:d8:15:f0:5b:6e:bd:df: 9c:31:ae:9e:d1:cf:05:49:db:72:5f:5c:95:17:51: ab:fa:96:ed:3a:98:2b:ed:11:4a:c1:80:12:c7:44: 9a:8f:db:7b:3f:50:2a:6e:bd:e5:c2:6f:e2:e1:b8: 68:db:3b:a4:2c:71:35:98:dc:40:04:01:d5:ab:83: ae:c2:8e:1f:6a:0e:8a:b0:88:b6:2b:8c:05:ed:8b: 0e:ce:25:6c:08:16:db:42:d5:18:0b:c7:c9:22:05: 10:a2:01:af:97:9a:0d:2b:09:62:7a:e5:69:4b:d4: 6c:e9:36:ec:6c:59:2e:a8:76:ca:ce:00:15:74:4f: 2f:b5:d8:8c:4f:e4:9f:1b:74:74:6d:af:48:77:d4: 2a:0a:9d:78:a0:0c:c4:ad:bf:54:c8:25:d2:07:f8: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:63:EA:3C:CA:2C:37:E2:3E:C4:FB:FD:C6:44:DA:69:41:43:0A:76 X509v3 Authority Key Identifier: keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b2:eb:dd:d2:99:f0:8c:6f:86:62:d3:15:0d:94:58:5a:80: 3d:6a:d7:31:ba:16:26:c9:da:4d:f2:cf:49:25:63:b9:0c:22: d5:d9:0d:95:db:f1:e6:b0:1d:26:0a:47:92:8f:c9:39:df:2b: c0:c0:16:b0:b5:36:bd:33:8e:2f:ac:5b:8c:67:66:29:7e:ce: e3:e5:6a:b9:5d:76:02:af:9e:35:05:02:3b:3a:43:e0:2f:13: 2d:4c:32:98:d7:05:6c:c8:ce:8e:82:0e:70:40:f4:9f:23:0f: 1d:b4:f6:29:fc:26:76:d3:c4:e1:51:d8:43:0f:02:c9:0f:be: 11:3c:37:71:00:82:a5:70:5e:b9:c4:2b:ae:d3:4c:8c:6b:fb: b8:10:6b:8e:54:54:24:68:12:27:a5:83:d8:de:95:3d:ca:28: 5b:67:52:2e:02:5d:18:94:6b:28:1f:83:5c:56:ae:56:64:17: 58:41:8d:1f:b5:49:d9:91:67:c4:37:b6:65:51:90:99:98:a4: 0d:f1:fa:5f:e1:5e:aa:d7:93:db:d4:e8:53:77:37:84:8f:1e: 7a:2a:27:47:fb:11:7a:5b:d3:ab:4a:3d:29:9b:d8:bf:7c:af: 3a:03:81:4e:cb:5a:69:8d:98:b5:6e:2e:af:a6:29:b7:bf:02: 4d:78:04:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NCODExMC8GA1UEBRMoQkMxRTIzMjE5MEQxQzYzMTY5RDdGNEZEMTc2MTU1OTc1 NjQ5QjhERjAeFw0yNTA3MDMwNzQ1MjlaFw0yNTA3MTAwNzQ1MjlaMBgxFjAUBgNV BAMTDTY4NjYzNTFhLTIxMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB/8wsOtitWc8C0yGNps4X2w4mtOoUG1s4D5cjlgAoa8jPwK55p/3HHfALCmBa xhQSVc8z4QuDDzcDDG/Bdi18RDXcG36hJU21rTqTS3jvBWUWo3kqJUvDmPxKNhXz bSbQ2BXwW26935wxrp7RzwVJ23JfXJUXUav6lu06mCvtEUrBgBLHRJqP23s/UCpu veXCb+LhuGjbO6QscTWY3EAEAdWrg67Cjh9qDoqwiLYrjAXtiw7OJWwIFttC1RgL x8kiBRCiAa+Xmg0rCWJ65WlL1GzpNuxsWS6odsrOABV0Ty+12IxP5J8bdHRtr0h3 1CoKnXigDMStv1TIJdIH+NkPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEGPqPMos N+I+xPv9xkTaaUFDCnYwHwYDVR0jBBgwFoAUvB4jIZDRxjFp1/T9F2FVl1ZJuN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0I4LzRDNzY5RkYwRkI1 QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpGcDFfVDlGMkZWbDFaSnVO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkI0aklaRFJ4akZwMV9UOUYyRlZsMVpKdU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz Q0I4LzRDNzY5RkYwRkI1QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpG cDFfVDlGMkZWbDFaSnVOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyy693SmfCMb4Zi0xUNlFhagD1q1zG6FibJ2k3yz0klY7kMItXZDZXb 8eawHSYKR5KPyTnfK8DAFrC1Nr0zji+sW4xnZil+zuPlarlddgKvnjUFAjs6Q+Av Ey1MMpjXBWzIzo6CDnBA9J8jDx209in8JnbTxOFR2EMPAskPvhE8N3EAgqVwXrnE K67TTIxr+7gQa45UVCRoEielg9jelT3KKFtnUi4CXRiUaygfg1xWrlZkF1hBjR+1 SdmRZ8Q3tmVRkJmYpA3x+l/hXqrXk9vU6FN3N4SPHnoqJ0f7EXpb06tKPSmb2L98 rzoDgU7LWmmNmLVuLq+mKbe/Ak14BPs= -----END CERTIFICATE-----Generated at Fri Jul 4 00:30:57 2025 by rpki-client