$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: 07JnQ9ciS2VWeibt1/sCEHX5AWaPAktrWL9jFndkYb0= Subject key identifier: 77:C2:4F:F9:57:01:BE:7A:CC:63:47:40:AA:FA:98:2A:EA:98:17:6A Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0BE2 Signing time: Wed 02 Jul 2025 19:03:20 +0000 Manifest this update: Wed 02 Jul 2025 19:03:20 +0000 Manifest next update: Wed 09 Jul 2025 19:03:20 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: DIK2Kl/8nwuRvBUoF1C4e2ogiOK2dSUeHxi5mvdnTh4=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jul 2 19:03:20 2025 GMT Not After : Jul 9 19:03:20 2025 GMT Subject: CN=68658278-9a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:b8:31:87:ba:63:4e:71:47:2f:ad:8a:f3: 17:36:32:86:71:aa:d5:06:27:42:ae:9b:f7:7e:26: 88:51:cc:05:2f:89:99:ce:d6:16:a2:1a:de:9f:d3: 85:0b:81:e0:79:f1:22:28:56:0a:7b:ec:46:af:a9: d7:1d:5d:88:88:d9:9e:2a:ff:65:b0:b7:ec:fd:e1: d4:38:cc:2c:5b:ef:e1:5e:20:e0:6b:26:9a:fa:0e: a6:e5:1e:f7:12:43:db:59:e3:5b:15:c6:5f:89:27: 31:26:04:dd:22:17:c7:96:1b:bc:a3:bf:7a:88:41: ab:71:4e:32:cb:d8:1b:8d:96:12:5c:03:7e:8d:23: 46:ae:b4:98:67:ab:c8:16:72:53:97:11:10:63:e3: 33:21:85:83:c4:bc:67:c7:76:8d:5b:82:bf:fa:1b: 94:4c:11:eb:c5:6c:fc:fa:fc:39:b8:ba:e6:bc:05: 42:58:95:3a:88:ec:87:e8:74:f5:bf:8e:0d:ff:9d: b6:bc:aa:58:50:d2:fb:35:4f:ff:29:b4:21:b0:72: 68:0a:85:0e:c5:fe:7b:b7:fb:af:0f:20:02:ea:2d: f1:7f:6f:d3:af:f8:c1:93:ca:b1:3e:fa:1c:21:f1: 80:dd:ad:f6:e0:f1:dc:8b:c4:2c:e1:c0:70:30:93: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C2:4F:F9:57:01:BE:7A:CC:63:47:40:AA:FA:98:2A:EA:98:17:6A X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:68:43:8f:c6:73:db:d0:bc:15:b7:bd:fe:dd:f0:0e:71:a1: 5d:75:9d:f5:36:ad:85:0f:96:b2:5f:32:d1:81:b9:88:99:d0: 36:6a:fe:c2:46:a5:5f:ac:77:4c:a1:2b:be:88:db:ad:05:d0: d0:85:29:67:0d:e1:52:71:ca:22:83:1c:d9:89:43:1a:5f:e8: a5:13:ee:8c:5d:9d:c9:f1:65:21:44:c3:1a:b0:e1:4d:e8:f1: 23:52:cc:74:36:d3:dd:ec:d9:bd:e6:b9:f0:60:85:22:3d:e3: 1e:01:27:29:0e:37:a9:23:1b:a4:ae:94:42:7f:da:71:c7:58: 5e:a8:dc:49:8c:28:0d:1c:f3:57:8a:06:46:30:e7:ad:c7:4b: 0f:cc:07:6d:46:1e:8c:3a:9c:2a:0c:87:54:c5:e0:c6:23:3a: 2f:92:7e:39:d3:98:e0:5b:02:b1:72:04:32:33:4c:2d:2f:0d: 0c:12:ed:f9:97:df:49:99:ac:43:92:c7:ba:dd:f2:80:e3:c3: d9:26:0f:f8:89:ed:32:a2:61:d3:55:2b:3f:97:82:90:b6:90: d3:22:f6:64:70:27:40:92:44:13:b5:71:ed:6e:4f:2e:a7:33: 03:bf:6d:42:3e:06:22:53:c5:73:e6:26:81:31:f6:9b:ea:58: c5:c9:52:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNzAyMTkwMzIwWhcNMjUwNzA5MTkwMzIwWjAYMRYwFAYD VQQDEw02ODY1ODI3OC05YTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbe4MYe6Y05xRy+tivMXNjKGcarVBidCrpv3fiaIUcwFL4mZztYWohren9OF C4HgefEiKFYKe+xGr6nXHV2IiNmeKv9lsLfs/eHUOMwsW+/hXiDgayaa+g6m5R73 EkPbWeNbFcZfiScxJgTdIhfHlhu8o796iEGrcU4yy9gbjZYSXAN+jSNGrrSYZ6vI FnJTlxEQY+MzIYWDxLxnx3aNW4K/+huUTBHrxWz8+vw5uLrmvAVCWJU6iOyH6HT1 v44N/522vKpYUNL7NU//KbQhsHJoCoUOxf57t/uvDyAC6i3xf2/Tr/jBk8qxPvoc IfGA3a324PHci8Qs4cBwMJOQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfCT/lX Ab56zGNHQKr6mCrqmBdqMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7aEOPxnPb0LwVt73+3fAOcaFddZ31Nq2FD5ayXzLRgbmImdA2av7C RqVfrHdMoSu+iNutBdDQhSlnDeFSccoigxzZiUMaX+ilE+6MXZ3J8WUhRMMasOFN 6PEjUsx0NtPd7Nm95rnwYIUiPeMeAScpDjepIxukrpRCf9pxx1heqNxJjCgNHPNX igZGMOetx0sPzAdtRh6MOpwqDIdUxeDGIzovkn4505jgWwKxcgQyM0wtLw0MEu35 l99JmaxDkse63fKA48PZJg/4ie0yomHTVSs/l4KQtpDTIvZkcCdAkkQTtXHtbk8u pzMDv21CPgYiU8Vz5iaBMfab6ljFyVK9 -----END CERTIFICATE-----Generated at Fri Jul 4 10:58:58 2025 by rpki-client