$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: HoEIdJZKHc+iUuPfZURYOcqHzFSsSeCI78tcVgLXEJk= Subject key identifier: 81:F7:73:CE:16:AB:DF:6A:AD:12:36:2D:88:3F:9F:E8:2A:79:E5:D8 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A6F Signing time: Wed 02 Jul 2025 19:52:45 +0000 Manifest this update: Wed 02 Jul 2025 19:52:44 +0000 Manifest next update: Wed 09 Jul 2025 19:52:44 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: swHyMsxYSBkzOWXIAUUyieAJM7OTF/x6N/BDeQdAtXs=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Jul 2 19:52:44 2025 GMT Not After : Jul 9 19:52:44 2025 GMT Subject: CN=68658e0c-6df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:92:60:92:a6:b1:0f:e9:55:f9:78:6b:d7: cf:db:dc:1b:21:3c:75:1e:d1:4d:64:0f:4f:61:8f: cd:6c:b0:d2:9a:e3:17:f2:34:31:52:57:9e:fe:71: 8b:1a:f1:ef:69:db:48:64:bd:24:90:e9:88:2b:38: 38:a7:64:4b:3f:4e:1b:47:13:ed:88:2d:17:67:50: 6e:5c:65:e9:92:c4:64:48:55:d9:4a:6b:4f:0b:9c: bc:d5:5c:84:3c:16:ea:37:55:9c:6f:5e:4b:a5:7c: 22:b6:cb:92:6c:74:e9:04:2d:d1:f6:c2:fe:3a:33: a3:71:b5:a6:f7:46:16:81:91:3c:8e:cc:d1:51:77: 33:98:73:2e:40:67:36:ee:a4:ed:1d:47:d7:34:c8: 56:f3:f4:31:ea:e2:23:c2:62:b8:ff:8a:99:1c:ad: 29:44:3c:cf:0b:ec:86:97:87:f6:44:4a:bf:15:e3: c9:d1:92:dd:35:33:d6:e6:19:e6:80:a1:ef:26:3e: b9:91:74:7c:0f:dd:0b:c1:12:2b:ce:fe:5e:62:5c: 12:51:52:a8:2b:1e:17:4d:77:07:96:34:f4:5c:68: d9:dd:97:9f:17:11:01:4e:cc:37:19:10:8a:6d:66: 05:2d:27:50:3d:e7:23:4a:9c:ca:9a:d2:48:82:ed: 92:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F7:73:CE:16:AB:DF:6A:AD:12:36:2D:88:3F:9F:E8:2A:79:E5:D8 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e2:73:da:74:fb:aa:2c:b7:55:fd:17:3c:94:fd:46:bf:ac: ce:7d:a6:d9:ad:e6:58:c8:37:8f:92:de:50:d4:d6:f6:20:16: cb:87:6a:d0:65:a9:f5:03:09:55:f5:4a:1c:7f:01:c9:15:f1: cf:85:fb:1a:18:aa:08:0e:3c:4d:50:fd:38:d5:4b:1a:7a:a3: 15:9e:88:df:2b:bc:cd:33:be:3b:d0:1b:69:c3:73:4b:31:f3: b3:c7:cf:55:fc:80:a6:f2:b5:ba:1d:87:7f:9d:b0:c9:9a:dc: ad:88:26:86:1e:2d:78:30:1c:b7:a9:1e:c5:ef:b9:ca:b0:cd: 47:58:b5:70:eb:74:a6:53:5a:d1:90:2f:39:3a:8f:b8:8d:83: cd:43:00:87:41:af:0d:c0:93:91:2c:c7:3d:90:86:c2:7c:f1: d5:1f:1a:f4:17:dc:17:52:99:2d:87:99:7d:f9:e3:9d:42:7a: 1e:18:a5:e5:50:d1:f8:d0:70:88:fe:0e:f6:b8:63:f4:d5:7a: c0:cf:01:3f:16:2e:b3:65:62:c3:29:f3:15:18:dc:05:20:d7: f6:ef:5e:67:95:0c:7b:d2:51:d9:f7:27:8c:63:7c:c9:ef:d8: a8:b5:99:19:7a:dc:4b:2e:c6:20:32:c7:ab:d1:68:53:35:51: ae:b8:55:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwNzAyMTk1MjQ0WhcNMjUwNzA5MTk1MjQ0WjAYMRYwFAYD VQQDEw02ODY1OGUwYy02ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUaSYJKmsQ/pVfl4a9fP29wbITx1HtFNZA9PYY/NbLDSmuMX8jQxUlee/nGL GvHvadtIZL0kkOmIKzg4p2RLP04bRxPtiC0XZ1BuXGXpksRkSFXZSmtPC5y81VyE PBbqN1Wcb15LpXwitsuSbHTpBC3R9sL+OjOjcbWm90YWgZE8jszRUXczmHMuQGc2 7qTtHUfXNMhW8/Qx6uIjwmK4/4qZHK0pRDzPC+yGl4f2REq/FePJ0ZLdNTPW5hnm gKHvJj65kXR8D90LwRIrzv5eYlwSUVKoKx4XTXcHljT0XGjZ3ZefFxEBTsw3GRCK bWYFLSdQPecjSpzKmtJIgu2SnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH3c84W q99qrRI2LYg/n+gqeeXYMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM4nPadPuqLLdV/Rc8lP1Gv6zOfabZreZYyDePkt5Q1Nb2IBbLh2rQ Zan1AwlV9UocfwHJFfHPhfsaGKoIDjxNUP041UsaeqMVnojfK7zNM7470Btpw3NL MfOzx89V/ICm8rW6HYd/nbDJmtytiCaGHi14MBy3qR7F77nKsM1HWLVw63SmU1rR kC85Oo+4jYPNQwCHQa8NwJORLMc9kIbCfPHVHxr0F9wXUpkth5l9+eOdQnoeGKXl UNH40HCI/g72uGP01XrAzwE/Fi6zZWLDKfMVGNwFINf2715nlQx70lHZ9yeMY3zJ 79iotZkZetxLLsYgMser0WhTNVGuuFU/ -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:26 2025 by rpki-client