$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json) Hash identifier: bnooDvormcH+EJzk45SW6uGbyqQHgwrw/diXyu1IQds= Subject key identifier: A3:1E:BD:0D:4C:AE:76:43:38:6F:D6:2D:1D:B1:EC:E9:D3:4D:B1:BE Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Certificate serial: 10D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft Manifest number: 10CD Signing time: Fri 04 Jul 2025 17:35:45 +0000 Manifest this update: Fri 04 Jul 2025 17:35:44 +0000 Manifest next update: Fri 11 Jul 2025 17:35:44 +0000 Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: rkfCX80d5t6Qy1QzhhV5Vp2TrBQOIi7/DRqHXVeRJgQ=) 2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4310 (0x10d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Validity Not Before: Jul 4 17:35:44 2025 GMT Not After : Jul 11 17:35:44 2025 GMT Subject: CN=686810f1-f5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:28:ca:5c:2e:57:75:85:81:91:f7:1b:c3: c6:c0:d4:50:e9:eb:65:7e:a9:6e:43:72:93:21:94: 13:e9:40:08:68:6b:4d:f9:e3:ed:2d:df:6c:36:76: 2d:03:d6:8e:10:89:e5:28:61:49:fb:1a:4e:7d:71: 68:7c:0c:af:cf:ad:ab:d8:c9:7c:6e:74:99:ec:ed: 3c:df:4f:ec:38:c9:30:a6:9d:9b:92:11:52:db:dc: 8d:31:9d:79:8d:5f:6b:f4:54:32:7b:25:21:00:f3: c6:9e:a6:ca:90:27:e9:b7:05:92:45:6b:a9:6d:18: cb:c9:5e:ce:6c:3a:d2:ac:fd:36:3d:dc:52:e2:67: be:19:58:65:9b:12:b5:b8:0c:b8:cd:d4:42:9a:f2: d1:6e:5f:b9:6a:17:fe:3b:1f:66:38:d0:21:b8:a7: 2c:19:78:6c:b3:07:e0:6a:e9:d8:56:dc:c6:7e:99: 11:0e:c0:49:a3:fc:1e:c0:ce:93:41:fd:3b:b0:56: 06:33:65:2f:dd:b3:44:bb:d7:70:15:77:89:f9:b4: 3f:0a:9b:e9:7c:45:3c:5c:74:1c:94:28:02:5e:f9: f9:05:05:95:61:b0:ff:8b:ca:34:ce:01:52:e4:fd: a7:cb:69:03:f7:7f:bc:f2:11:46:84:7c:99:32:8e: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1E:BD:0D:4C:AE:76:43:38:6F:D6:2D:1D:B1:EC:E9:D3:4D:B1:BE X509v3 Authority Key Identifier: keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:44:55:b4:89:e8:ed:db:f2:8a:ce:57:72:59:1d:3e:dd:5e: 7a:01:d5:5a:44:aa:94:56:ec:b1:89:ca:50:4d:e9:50:a5:7d: e5:1e:23:54:85:d8:fd:c4:a3:2a:2d:16:12:06:bc:d7:9a:38: f8:2d:96:a8:16:9c:85:af:06:42:45:e8:47:d1:c3:ef:b1:8c: 8c:11:2a:1b:09:1f:e1:a2:df:9a:e5:d4:3a:42:69:84:79:16: 97:b6:ce:22:51:cc:22:87:70:3c:06:16:bb:95:3f:fd:f2:b3: 8c:d1:1f:79:91:7e:9a:bb:49:a3:5e:c5:92:c1:9b:0c:ba:6e: 9c:9c:46:7e:43:c4:35:30:0b:ab:84:e2:d0:ff:14:65:9d:bc: 31:32:d4:a0:fd:45:0a:e4:27:9c:f4:0c:2b:87:e4:ac:81:6a: 74:84:42:dd:51:88:3b:bc:d7:8f:6c:30:49:a7:41:af:25:19: 89:56:31:01:12:84:5c:a8:7f:b4:e5:b3:2d:fb:c4:a6:34:65: 13:05:96:49:7a:24:91:2f:f9:63:da:01:9c:fc:86:1e:40:c1: ab:35:e4:aa:fa:6b:82:17:04:6c:37:b6:96:33:18:cb:fe:14: fe:5a:73:53:a1:bd:76:9f:b3:26:c2:e8:3a:75:01:ef:f6:90: 0d:dd:64:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB MkFBOTA3QjgwHhcNMjUwNzA0MTczNTQ0WhcNMjUwNzExMTczNTQ0WjAYMRYwFAYD VQQDEw02ODY4MTBmMS1mNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx48oylwuV3WFgZH3G8PGwNRQ6etlfqluQ3KTIZQT6UAIaGtN+ePtLd9sNnYt A9aOEInlKGFJ+xpOfXFofAyvz62r2Ml8bnSZ7O0830/sOMkwpp2bkhFS29yNMZ15 jV9r9FQyeyUhAPPGnqbKkCfptwWSRWupbRjLyV7ObDrSrP02PdxS4me+GVhlmxK1 uAy4zdRCmvLRbl+5ahf+Ox9mONAhuKcsGXhsswfgaunYVtzGfpkRDsBJo/wewM6T Qf07sFYGM2Uv3bNEu9dwFXeJ+bQ/CpvpfEU8XHQclCgCXvn5BQWVYbD/i8o0zgFS 5P2ny2kD93+88hFGhHyZMo7rlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMevQ1M rnZDOG/WLR2x7OnTTbG+MB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0 MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgRFW0iejt2/KKzldyWR0+3V56AdVaRKqUVuyxicpQTelQpX3lHiNU hdj9xKMqLRYSBrzXmjj4LZaoFpyFrwZCRehH0cPvsYyMESobCR/hot+a5dQ6QmmE eRaXts4iUcwih3A8Bha7lT/98rOM0R95kX6au0mjXsWSwZsMum6cnEZ+Q8Q1MAur hOLQ/xRlnbwxMtSg/UUK5Cec9Awrh+SsgWp0hELdUYg7vNePbDBJp0GvJRmJVjEB EoRcqH+05bMt+8SmNGUTBZZJeiSRL/lj2gGc/IYeQMGrNeSq+muCFwRsN7aWMxjL /hT+WnNTob12n7Mmwug6dQHv9pAN3WST -----END CERTIFICATE-----Generated at Sun Jul 6 00:29:47 2025 by rpki-client