$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: MnjNPLGYVxtYM/57V4MJEC24S3s/areozr0WvnPsyac= Subject key identifier: 7B:58:1E:71:35:5E:E5:3E:14:C0:0E:91:00:63:B5:74:69:52:AC:AE Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 01E8 Signing time: Thu 03 Jul 2025 02:42:37 +0000 Manifest this update: Thu 03 Jul 2025 02:42:37 +0000 Manifest next update: Thu 10 Jul 2025 02:42:37 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: WsDNz2IMx36DGM6KS+GZR3lFGy1lTiaEwP3rSYMVFm8=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jul 3 02:42:37 2025 GMT Not After : Jul 10 02:42:37 2025 GMT Subject: CN=6865ee1d-47da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:16:ca:0c:a6:be:37:89:0b:b4:d0:c5:f6: 50:d8:10:9f:c5:46:86:ba:17:ec:71:19:5a:9b:3f: 88:c3:b3:f7:af:a8:94:e7:5e:2d:1a:75:aa:be:43: 3e:8d:35:c2:a4:c8:3c:c7:45:00:bf:9b:48:8e:b8: 7d:fa:65:32:6b:1b:ac:a2:c8:81:c7:85:cf:75:ca: 37:33:3f:30:6d:23:e7:d3:1b:8a:5c:e2:3a:a3:6e: c1:d7:c9:38:78:71:b1:86:18:9d:59:cf:e0:99:5e: 4d:4a:39:30:f4:9c:51:92:01:58:96:da:08:23:fb: f2:6b:90:60:1d:8e:ab:e6:15:60:76:0d:87:48:d9: 4d:63:20:97:87:bc:ef:0c:45:dc:e0:c0:9f:91:b5: d7:91:0a:be:a7:1d:3b:c0:bc:89:9f:f1:75:d8:e0: 3f:d2:13:67:d1:ab:7c:0a:c5:4c:99:10:4c:2b:2b: e1:3b:7e:ed:09:a3:59:79:b8:34:0f:1b:d3:cd:05: 80:2f:2c:2f:3d:d0:68:89:32:e0:e9:fa:d9:d5:09: 69:b0:f7:78:25:fb:ce:1a:28:6a:02:78:97:9f:c6: dd:13:8b:e0:65:6a:c1:ed:03:16:37:e0:80:dd:07: 2b:53:fd:40:b6:e1:a6:23:02:c0:01:dc:9f:87:03: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:58:1E:71:35:5E:E5:3E:14:C0:0E:91:00:63:B5:74:69:52:AC:AE X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f9:ef:18:23:88:9d:89:c6:83:cb:ce:52:eb:24:77:23:0a: 3f:c1:bd:de:c3:31:18:d8:95:33:16:b8:d5:5c:a9:81:b9:27: 6f:ad:48:bc:2b:ce:06:33:8a:98:37:2a:4f:bc:6c:78:fb:b2: 4e:a8:e1:3e:51:64:9c:8e:7d:b5:01:3d:8d:75:c5:21:0d:44: 7a:6d:ee:15:eb:c4:81:4b:38:21:c3:66:82:c0:d7:28:4b:70: d9:8d:08:eb:b0:62:e4:1a:1e:bd:50:b6:3a:ac:a1:12:eb:a0: 5f:c7:97:17:a9:36:81:f4:2c:07:f3:4e:55:1d:d8:cf:7f:4d: 1c:ed:09:41:7b:14:71:b1:01:42:ba:eb:d6:36:b6:32:f0:6e: 66:7f:82:9a:ce:74:4c:7d:a3:be:d2:17:5b:9b:e2:26:fe:ed: e4:16:a4:cc:b7:f7:e6:04:eb:c5:26:1a:85:a4:39:e3:b7:34: da:f4:47:8e:40:7a:d4:07:95:b5:d8:9a:c7:85:a9:d3:9d:27: a9:1b:06:fe:55:22:fa:bd:cd:0d:66:4d:c8:23:b8:e7:be:96: ac:c2:61:03:3c:5a:da:cd:7b:b1:9f:88:44:12:f3:59:17:aa: 17:24:70:f2:90:a8:aa:5b:35:08:03:34:3f:13:4a:bd:4d:cc: 76:6e:8d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNzAzMDI0MjM3WhcNMjUwNzEwMDI0MjM3WjAYMRYwFAYD VQQDEw02ODY1ZWUxZC00N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqgWygymvjeJC7TQxfZQ2BCfxUaGuhfscRlamz+Iw7P3r6iU514tGnWqvkM+ jTXCpMg8x0UAv5tIjrh9+mUyaxusosiBx4XPdco3Mz8wbSPn0xuKXOI6o27B18k4 eHGxhhidWc/gmV5NSjkw9JxRkgFYltoII/vya5BgHY6r5hVgdg2HSNlNYyCXh7zv DEXc4MCfkbXXkQq+px07wLyJn/F12OA/0hNn0at8CsVMmRBMKyvhO37tCaNZebg0 DxvTzQWALywvPdBoiTLg6frZ1QlpsPd4JfvOGihqAniXn8bdE4vgZWrB7QMWN+CA 3QcrU/1AtuGmIwLAAdyfhwMxfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtYHnE1 XuU+FMAOkQBjtXRpUqyuMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ+e8YI4idicaDy85S6yR3Iwo/wb3ewzEY2JUzFrjVXKmBuSdvrUi8 K84GM4qYNypPvGx4+7JOqOE+UWScjn21AT2NdcUhDUR6be4V68SBSzghw2aCwNco S3DZjQjrsGLkGh69ULY6rKES66Bfx5cXqTaB9CwH805VHdjPf00c7QlBexRxsQFC uuvWNrYy8G5mf4KaznRMfaO+0hdbm+Im/u3kFqTMt/fmBOvFJhqFpDnjtzTa9EeO QHrUB5W12JrHhanTnSepGwb+VSL6vc0NZk3II7jnvpaswmEDPFrazXuxn4hEEvNZ F6oXJHDykKiqWzUIAzQ/E0q9Tcx2bo0C -----END CERTIFICATE-----Generated at Thu Jul 3 10:29:46 2025 by rpki-client