$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json) Hash identifier: ybQva/YD8fxaqpaRsD7ja/0t60pmQtHPS3YEiEBXLa4= Subject key identifier: F4:D4:D7:8F:A6:2C:E9:BC:61:44:A9:04:A5:01:C9:29:CA:D6:E2:CC Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft Manifest number: 17 Signing time: Tue 01 Jul 2025 08:45:54 +0000 Manifest this update: Tue 01 Jul 2025 08:45:54 +0000 Manifest next update: Tue 08 Jul 2025 08:45:54 +0000 Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: +SIDD6wFeD/VjTstBmCQ1S6uQRKeIr2o87TFIA/tzhY=) 2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6 Validity Not Before: Jul 1 08:45:54 2025 GMT Not After : Jul 8 08:45:54 2025 GMT Subject: CN=6863a042-85a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:23:6b:77:3a:3d:7b:f4:09:89:aa:11:00: dd:9b:a9:96:57:1c:ad:ee:da:cf:62:42:5b:86:78: 6e:b2:de:1c:08:a0:1f:33:46:28:87:6f:4c:7c:4b: 23:d1:c7:7a:d4:a2:a9:e8:7b:b4:8e:d3:c1:0f:1a: af:ef:68:66:c2:38:1c:ae:49:55:35:d2:c0:40:e8: 69:1c:41:4b:75:e4:3e:3a:e9:ce:92:6b:52:8a:b0: 9b:ab:ec:20:49:9b:ea:e2:d5:bb:f7:d4:26:29:d4: 7d:36:36:13:3e:e7:a1:b5:03:66:a7:1e:7d:08:32: fc:c7:ac:c3:03:dc:88:3c:63:20:93:b0:d0:cd:18: dd:51:33:7c:0f:9f:f2:fa:f7:20:75:85:bd:10:60: fe:d4:af:fc:19:0e:71:c2:33:57:c3:21:38:cf:00: 79:0b:5b:0c:10:d3:ff:24:3a:ea:a5:98:0e:03:a5: 31:19:d4:3c:dd:3b:3d:c2:ba:db:17:70:17:86:a9: e8:fd:74:55:6c:96:bf:e4:1d:43:56:f2:ec:2e:70: 13:e3:5a:b9:86:6a:a7:37:55:a0:db:c4:dd:5d:b5: 0c:67:41:f1:d3:f7:5d:ab:c9:99:6a:bf:00:80:01: b8:d0:e8:20:6d:ce:f5:9e:4a:a8:0c:f0:81:a2:56: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:D7:8F:A6:2C:E9:BC:61:44:A9:04:A5:01:C9:29:CA:D6:E2:CC X509v3 Authority Key Identifier: keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5e:eb:97:f0:c9:fb:cc:00:91:92:13:f3:b0:95:d6:8b:98: 5e:eb:9e:3b:fa:c4:45:08:6c:c7:f8:61:5c:7d:7c:cd:87:65: d2:0f:88:83:46:1d:38:e0:c8:59:ee:60:18:0b:be:9d:6b:4f: 43:c4:89:88:7f:7a:3c:b4:86:08:e6:72:18:01:1c:1e:3c:00: 29:aa:b8:8f:69:ca:cb:d4:ed:7e:9f:39:d7:9d:cf:c5:a1:f3: bb:d1:ab:92:ad:19:4f:70:e2:00:37:d1:ba:74:d4:6f:d0:93: 5d:e1:37:24:f0:0e:17:bf:9c:ac:a1:36:f6:69:35:6f:a2:61: 05:72:53:11:bd:c4:e8:77:d7:cc:94:55:55:5f:06:79:73:08: 46:6e:c4:1c:9c:dd:dc:13:8c:98:c2:e5:31:80:6e:1b:80:68: c6:f9:83:bf:d8:59:75:be:0a:35:e0:4a:bd:2f:b0:e4:1b:31: 60:61:95:0e:ef:dd:28:93:98:26:99:f1:f0:af:77:91:b9:fb: aa:bc:ab:a4:8d:b2:9c:41:41:b1:e9:a3:c7:a2:c6:f7:cb:7e: 2d:0c:33:d0:48:1f:f8:32:d3:33:0f:88:88:8c:fc:be:31:04: d1:40:03:a6:18:bb:05:3c:68:ee:09:8a:da:0c:8d:06:cb:c1: 10:02:b1:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUZGRDExMC8GA1UEBRMoRjZGMzg1REYxRkVBMjg1N0I2ODQzRjY2MzU2NTQzRkI3 NkJGMDhBNjAeFw0yNTA3MDEwODQ1NTRaFw0yNTA3MDgwODQ1NTRaMBgxFjAUBgNV BAMTDTY4NjNhMDQyLTg1YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+CSNrdzo9e/QJiaoRAN2bqZZXHK3u2s9iQluGeG6y3hwIoB8zRiiHb0x8SyPR x3rUoqnoe7SO08EPGq/vaGbCOByuSVU10sBA6GkcQUt15D466c6Sa1KKsJur7CBJ m+ri1bv31CYp1H02NhM+56G1A2anHn0IMvzHrMMD3Ig8YyCTsNDNGN1RM3wPn/L6 9yB1hb0QYP7Ur/wZDnHCM1fDITjPAHkLWwwQ0/8kOuqlmA4DpTEZ1DzdOz3CutsX cBeGqej9dFVslr/kHUNW8uwucBPjWrmGaqc3VaDbxN1dtQxnQfHT912ryZlqvwCA AbjQ6CBtzvWeSqgM8IGiVjb7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9NTXj6Ys 6bxhRKkEpQHJKcrW4swwHwYDVR0jBBgwFoAU9vOF3x/qKFe2hD9mNWVD+3a/CKYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFRkZEL0VBMTI5OTBFMzMy MjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0ZlMmhEOW1OV1ZELTNhX0NL WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXZPRjN4X3FLRmUyaEQ5bU5XVkQtM2FfQ0tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF RkZEL0VBMTI5OTBFMzMyMjExRjBCQUUwQ0E4MEM0RjlBRTAyLzl2T0YzeF9xS0Zl MmhEOW1OV1ZELTNhX0NLWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpe65fwyfvMAJGSE/OwldaLmF7rnjv6xEUIbMf4YVx9fM2HZdIPiING HTjgyFnuYBgLvp1rT0PEiYh/ejy0hgjmchgBHB48ACmquI9pysvU7X6fOdedz8Wh 87vRq5KtGU9w4gA30bp01G/Qk13hNyTwDhe/nKyhNvZpNW+iYQVyUxG9xOh318yU VVVfBnlzCEZuxByc3dwTjJjC5TGAbhuAaMb5g7/YWXW+CjXgSr0vsOQbMWBhlQ7v 3SiTmCaZ8fCvd5G5+6q8q6SNspxBQbHpo8eixvfLfi0MM9BIH/gy0zMPiIiM/L4x BNFAA6YYuwU8aO4JitoMjQbLwRACscM= -----END CERTIFICATE-----Generated at Thu Jul 3 02:28:20 2025 by rpki-client