$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: mQ0wqfffZUcykltPZq2YmNhHM4QN9Sb65BOSWuf6xp4= Subject key identifier: 6F:65:DC:77:B6:C8:F5:6A:48:C1:03:40:82:0F:3F:EC:7E:0E:37:41 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0C58 Signing time: Fri 04 Jul 2025 18:44:44 +0000 Manifest this update: Fri 04 Jul 2025 18:44:43 +0000 Manifest next update: Fri 11 Jul 2025 18:44:43 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: 0RrsyHX+LP0lhqVzQJvu0Y0SznOEL1HHF4xCHcPIw6U=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Jul 4 18:44:43 2025 GMT Not After : Jul 11 18:44:43 2025 GMT Subject: CN=6868211b-60cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:3f:c2:e8:fe:36:89:8a:bb:74:17:8c:78: 7a:75:2a:57:b7:68:25:c9:80:24:9f:14:1c:ee:31: cc:ee:b3:75:97:39:a0:c4:53:bd:5a:63:7c:8b:fb: b9:98:96:d2:fd:4d:e5:1a:e3:6e:73:16:17:93:8c: 48:e0:d4:25:5c:e1:b4:ff:af:ae:05:66:80:1d:cf: f9:0c:54:1f:68:07:9c:b2:8d:c9:d6:60:85:a6:2d: 39:c8:69:93:a9:63:50:8b:a9:ef:b3:6b:3d:1a:4b: cb:d5:1b:dd:f9:a7:f2:5a:f7:70:0c:74:7a:98:f4: e0:12:ae:ea:6b:ee:d0:f9:55:a5:bd:a5:bb:35:70: 20:f7:43:41:82:47:e3:9f:ec:f5:02:4d:1f:b4:a3: 4d:cb:f6:d3:4b:03:bb:bf:75:b7:62:64:be:36:26: 96:17:d0:4d:fa:db:6e:ca:43:4a:1c:e3:e9:9d:ef: 66:5f:a3:c0:49:13:5f:d0:d5:70:ee:37:2a:8a:9b: 87:45:10:ce:4f:1a:f0:65:31:8b:5a:66:f3:09:e1: a6:ab:71:7e:a4:76:47:5e:87:19:4d:ef:0f:f8:79: 2b:40:a5:d7:79:76:8f:66:e8:1c:9d:b7:36:3c:c5: d7:ba:92:85:4b:00:76:1d:8a:60:be:d3:8e:55:54: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:65:DC:77:B6:C8:F5:6A:48:C1:03:40:82:0F:3F:EC:7E:0E:37:41 X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:08:98:9d:ab:37:62:ec:b5:a0:6c:4b:38:1d:9e:99:5a:5b: 13:6a:5a:67:a0:78:57:63:58:a8:32:8b:6a:a5:00:5f:6d:f0: 85:6b:38:ef:12:a4:3c:5b:57:7f:0a:0f:d5:3f:92:e2:20:29: d6:a2:76:a9:29:e7:55:ab:e0:10:ca:a0:2c:31:bf:39:58:a2: 36:a6:00:5e:4e:dd:35:e9:2b:e4:f9:5c:12:bb:48:fa:03:7a: ca:5d:db:dd:b6:f9:ea:1c:1d:ce:d5:1b:f0:23:ca:97:69:8e: af:bf:4b:78:22:87:06:58:8d:6c:9d:cd:5a:5f:9e:81:31:a9: c4:c9:32:7c:da:e1:57:09:88:8f:f1:6e:0c:53:08:3c:db:c4: 60:02:d9:3b:ef:5f:8c:81:3d:a8:96:7a:a1:9a:f2:14:e1:43: 45:cf:b6:b0:b8:80:d3:32:84:63:c9:14:fd:eb:60:34:d9:81: d9:bd:a6:7b:48:1a:51:f5:f6:41:48:6a:c1:d6:6a:28:9b:64: 1a:10:75:be:a8:d2:9d:2c:6a:36:4d:e6:e3:f1:f1:79:68:43: 13:87:7a:1c:87:0a:d7:05:a4:8e:f0:32:7a:c6:64:81:60:33: 69:fb:fe:cb:37:d4:ae:88:72:bf:90:c9:d5:f1:ee:35:91:22: fd:dc:ec:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUwNzA0MTg0NDQzWhcNMjUwNzExMTg0NDQzWjAYMRYwFAYD VQQDEw02ODY4MjExYi02MGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Og/wuj+NomKu3QXjHh6dSpXt2glyYAknxQc7jHM7rN1lzmgxFO9WmN8i/u5 mJbS/U3lGuNucxYXk4xI4NQlXOG0/6+uBWaAHc/5DFQfaAecso3J1mCFpi05yGmT qWNQi6nvs2s9GkvL1Rvd+afyWvdwDHR6mPTgEq7qa+7Q+VWlvaW7NXAg90NBgkfj n+z1Ak0ftKNNy/bTSwO7v3W3YmS+NiaWF9BN+ttuykNKHOPpne9mX6PASRNf0NVw 7jcqipuHRRDOTxrwZTGLWmbzCeGmq3F+pHZHXocZTe8P+HkrQKXXeXaPZugcnbc2 PMXXupKFSwB2HYpgvtOOVVTcgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9l3He2 yPVqSMEDQIIPP+x+DjdBMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqCJidqzdi7LWgbEs4HZ6ZWlsTalpnoHhXY1ioMotqpQBfbfCFazjv EqQ8W1d/Cg/VP5LiICnWonapKedVq+AQyqAsMb85WKI2pgBeTt016Svk+VwSu0j6 A3rKXdvdtvnqHB3O1RvwI8qXaY6vv0t4IocGWI1snc1aX56BManEyTJ82uFXCYiP 8W4MUwg828RgAtk771+MgT2olnqhmvIU4UNFz7awuIDTMoRjyRT962A02YHZvaZ7 SBpR9fZBSGrB1moom2QaEHW+qNKdLGo2Tebj8fF5aEMTh3ochwrXBaSO8DJ6xmSB YDNp+/7LN9SuiHK/kMnV8e41kSL93Ox3 -----END CERTIFICATE-----Generated at Sat Jul 5 05:45:12 2025 by rpki-client