$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: xGJv4f6d0ltnw06qeeQVn4MtizHpUmY74xFaYm6U/6Q= Subject key identifier: 40:04:52:D6:13:BE:94:BC:C5:AD:95:8E:3A:FE:BA:B5:47:A4:6C:EB Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 0227 Signing time: Tue 01 Jul 2025 02:39:49 +0000 Manifest this update: Tue 01 Jul 2025 02:39:49 +0000 Manifest next update: Tue 08 Jul 2025 02:39:49 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: ohIw4TH1lYgF4G5mHgDC0lE1kKrRFjXuFbv8ZYiQCpQ=) 2: 3366A64616EE11F092BB8D27C4F9AE02.roa (hash: BqVy/ukdl/6/b56EtxQ8tAIR6Cjii/d5BEoVe0J+mjI=) 3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 1g2p3b2YKG05onOBUGFQwxLWWfgUtvMtLCVSZMC3Z1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: Jul 1 02:39:49 2025 GMT Not After : Jul 8 02:39:49 2025 GMT Subject: CN=68634a75-7ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:f7:5f:a1:a3:ce:5d:ed:64:cf:72:7b:59: 34:0d:ab:a8:13:61:9f:f7:6f:5d:fe:3c:88:61:36: 76:fe:ec:04:a8:21:3d:91:db:bc:5c:59:69:3c:e5: c6:77:3d:12:3e:02:18:0c:80:e7:34:83:98:c6:7c: eb:9d:5d:f0:85:4d:a1:69:f8:48:b4:de:e8:cf:7a: 7d:ea:14:56:3c:de:86:75:36:43:b5:fc:e2:f6:75: 5c:b8:13:4d:9f:e7:16:d3:5e:64:08:d0:94:48:23: 1e:1b:a5:76:64:ad:b3:7c:fd:fc:86:83:a6:21:8b: e4:ca:2e:4f:f5:7e:8b:27:d1:3c:0e:3c:97:45:54: 4e:9c:fa:0f:b7:b0:3a:27:39:94:8d:78:cb:fb:34: 7b:11:18:72:83:9d:5f:d3:d2:e1:b9:c0:11:ae:3f: 58:3a:b8:78:a2:9e:93:b8:05:ac:98:32:1b:4f:4e: 79:d8:f1:81:0e:d8:fe:63:c0:9f:df:7e:2c:34:33: 2f:fa:91:a3:a4:b5:46:2b:f3:9b:27:47:39:23:a6: 30:25:2a:fb:b6:58:08:ed:8e:47:58:8e:05:be:9f: 16:f9:fe:85:95:5a:d6:cc:fa:19:16:b8:4a:43:5e: bd:b3:30:92:42:ba:c6:d4:80:37:18:16:74:09:f0: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:04:52:D6:13:BE:94:BC:C5:AD:95:8E:3A:FE:BA:B5:47:A4:6C:EB X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c5:f8:18:06:ff:de:5b:a7:b1:ad:6c:d5:86:df:ce:3f:b5: b4:4b:a0:47:bd:79:ce:1d:35:ec:2d:35:b2:ef:49:b0:d4:21: 2c:4d:6c:e9:dc:b1:ec:ad:9f:d6:78:dc:06:28:09:eb:dd:6d: 06:78:98:63:98:7a:33:18:b8:09:e2:77:8f:34:ac:00:19:4c: 6a:37:79:aa:24:9a:26:26:7d:8c:93:7f:09:f6:48:55:9a:2c: 4a:f0:72:ca:19:88:69:c9:d0:63:3d:3e:98:3a:c5:80:8b:76: 56:22:a8:f2:8a:89:cd:15:94:52:19:bc:d0:21:d4:4c:1e:49: 54:62:28:e7:ab:86:be:39:c1:ca:70:62:6f:b5:ba:69:cd:6b: 9c:37:e3:c8:4a:bb:59:79:3d:f7:42:a8:8a:07:79:7f:af:b6: d3:73:2a:f4:3c:9f:5d:3e:a7:47:21:ab:4a:bc:6c:dc:27:af: 9a:28:e0:a5:f2:a9:50:b5:70:52:89:e1:7d:fe:22:8f:0e:31: a6:48:d2:89:55:3e:f0:45:26:87:50:b9:2e:57:fd:c8:4b:ac: 07:42:68:a8:9e:b6:a0:0a:ae:76:d6:a3:06:a9:88:14:fa:cb: 42:1c:04:9d:7f:fd:1a:fb:bf:70:dd:1c:71:fd:fa:7d:f2:ea: ad:5d:b2:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjUwNzAxMDIzOTQ5WhcNMjUwNzA4MDIzOTQ5WjAYMRYwFAYD VQQDEw02ODYzNGE3NS03ZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4X3X6Gjzl3tZM9ye1k0DauoE2Gf929d/jyIYTZ2/uwEqCE9kdu8XFlpPOXG dz0SPgIYDIDnNIOYxnzrnV3whU2hafhItN7oz3p96hRWPN6GdTZDtfzi9nVcuBNN n+cW015kCNCUSCMeG6V2ZK2zfP38hoOmIYvkyi5P9X6LJ9E8DjyXRVROnPoPt7A6 JzmUjXjL+zR7ERhyg51f09LhucARrj9YOrh4op6TuAWsmDIbT0552PGBDtj+Y8Cf 334sNDMv+pGjpLVGK/ObJ0c5I6YwJSr7tlgI7Y5HWI4Fvp8W+f6FlVrWzPoZFrhK Q169szCSQrrG1IA3GBZ0CfA6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAEUtYT vpS8xa2Vjjr+urVHpGzrMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPxfgYBv/eW6exrWzVht/OP7W0S6BHvXnOHTXsLTWy70mw1CEsTWzp 3LHsrZ/WeNwGKAnr3W0GeJhjmHozGLgJ4nePNKwAGUxqN3mqJJomJn2Mk38J9khV mixK8HLKGYhpydBjPT6YOsWAi3ZWIqjyionNFZRSGbzQIdRMHklUYijnq4a+OcHK cGJvtbppzWucN+PISrtZeT33QqiKB3l/r7bTcyr0PJ9dPqdHIatKvGzcJ6+aKOCl 8qlQtXBSieF9/iKPDjGmSNKJVT7wRSaHULkuV/3IS6wHQmionragCq521qMGqYgU +stCHASdf/0a+79w3Rxx/fp98uqtXbIP -----END CERTIFICATE-----Generated at Tue Jul 1 15:26:34 2025 by rpki-client