$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: 99tU5Ae14pd8h9B4SafiDEhHRRuogPvtUPWrFoy9NTM= Subject key identifier: 73:DB:3E:8E:59:D6:5E:8D:52:06:5E:F5:2F:89:11:66:92:7A:C4:B6 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 0106 Signing time: Thu 03 Jul 2025 05:15:57 +0000 Manifest this update: Thu 03 Jul 2025 05:15:57 +0000 Manifest next update: Thu 10 Jul 2025 05:15:57 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 6wrvAmtAvtLNVwaTGlQ+XILpyzajQnffBj7kHIcflow=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Jul 3 05:15:57 2025 GMT Not After : Jul 10 05:15:57 2025 GMT Subject: CN=6866120d-5da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:65:42:82:79:b0:d3:1c:66:cb:0d:75:b7: 58:95:c5:58:10:97:50:cc:ac:5a:c9:21:b8:85:e3: 35:12:78:70:39:af:64:5f:35:22:24:9d:a7:49:a2: 12:ad:61:02:19:f0:d8:88:8e:2f:f5:9f:87:5a:06: de:c4:63:7a:57:50:49:d4:40:db:1e:77:01:d3:b8: 1c:58:d8:f5:b8:de:3e:bb:9e:56:96:20:8e:d8:4e: 59:d7:60:0f:a7:56:0f:2a:7c:6e:ad:a3:b2:bc:8e: dd:ca:a2:08:c7:4b:99:09:46:4e:1e:cc:8c:b1:86: cd:2b:b2:30:2a:b1:1c:84:85:e1:08:60:31:b0:09: 8a:e6:86:8a:f0:29:0c:44:66:e5:7d:99:59:ad:05: a3:5c:be:d0:46:8d:b1:a3:d3:55:fb:7e:68:8d:44: 34:4c:2e:0f:01:4d:47:56:20:7c:5e:aa:bf:b8:f3: 80:0d:3c:99:e3:3f:79:ff:2b:92:90:cf:c4:bc:7b: 40:86:6e:f4:7e:90:14:7a:0c:04:87:17:c1:b8:55: a4:d0:b3:7f:aa:96:e7:a0:44:01:18:89:d7:64:98: 78:87:15:76:34:81:cd:03:3e:e0:10:1d:b6:12:bb: 79:ed:c6:c0:ce:f4:e7:ed:ec:d8:68:f2:60:90:45: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:3E:8E:59:D6:5E:8D:52:06:5E:F5:2F:89:11:66:92:7A:C4:B6 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6a:48:f1:e4:ee:ea:37:01:2c:d4:2b:cc:6f:28:ae:28:fc: 7b:12:fb:5b:4f:40:b2:df:a9:7b:7b:fe:13:fc:0f:ab:65:b6: 7a:a7:4e:ed:57:ef:bf:8c:75:5a:41:b0:b8:63:4b:c2:3f:6f: 49:d7:28:0a:c2:8e:b8:ac:10:70:be:ee:9b:3a:99:1a:14:3d: 14:2a:bc:18:e8:2a:22:8a:a8:61:f0:88:65:ad:ed:a2:09:2d: a1:13:f7:db:47:ad:c2:03:96:7d:44:1f:fe:f7:58:28:2d:5c: 5d:2e:3a:65:1f:c2:b3:75:d4:16:30:18:0f:9d:99:fc:ca:a2: f8:0e:87:c6:6a:12:8f:ab:8a:df:73:1d:95:26:eb:ed:1f:8d: c7:82:8b:e8:b2:e3:cd:85:c0:3e:85:30:5b:c0:62:7b:b8:3f: 9f:4c:cf:8b:bc:f2:43:e6:c9:57:06:cb:e6:0a:49:af:4d:38: bf:0a:f1:64:5c:63:1e:1f:95:66:ef:25:29:a6:a8:6c:a4:43: 12:25:1d:7e:53:55:2d:1d:e7:39:9b:42:af:45:70:1f:49:eb: bb:06:8c:93:c7:93:bc:60:2e:65:18:34:85:3b:5f:f6:a8:b5: 3c:71:ed:a9:6c:9d:91:2b:e9:fc:e1:5d:9f:1f:6c:ee:1e:d2: 48:25:23:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjUwNzAzMDUxNTU3WhcNMjUwNzEwMDUxNTU3WjAYMRYwFAYD VQQDEw02ODY2MTIwZC01ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta9lQoJ5sNMcZssNdbdYlcVYEJdQzKxaySG4heM1EnhwOa9kXzUiJJ2nSaIS rWECGfDYiI4v9Z+HWgbexGN6V1BJ1EDbHncB07gcWNj1uN4+u55WliCO2E5Z12AP p1YPKnxuraOyvI7dyqIIx0uZCUZOHsyMsYbNK7IwKrEchIXhCGAxsAmK5oaK8CkM RGblfZlZrQWjXL7QRo2xo9NV+35ojUQ0TC4PAU1HViB8Xqq/uPOADTyZ4z95/yuS kM/EvHtAhm70fpAUegwEhxfBuFWk0LN/qpbnoEQBGInXZJh4hxV2NIHNAz7gEB22 Ert57cbAzvTn7ezYaPJgkEX/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPbPo5Z 1l6NUgZe9S+JEWaSesS2MB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkakjx5O7qNwEs1CvMbyiuKPx7EvtbT0Cy36l7e/4T/A+rZbZ6p07t V++/jHVaQbC4Y0vCP29J1ygKwo64rBBwvu6bOpkaFD0UKrwY6Coiiqhh8Ihlre2i CS2hE/fbR63CA5Z9RB/+91goLVxdLjplH8KzddQWMBgPnZn8yqL4DofGahKPq4rf cx2VJuvtH43HgovosuPNhcA+hTBbwGJ7uD+fTM+LvPJD5slXBsvmCkmvTTi/CvFk XGMeH5Vm7yUppqhspEMSJR1+U1UtHec5m0KvRXAfSeu7BoyTx5O8YC5lGDSFO1/2 qLU8ce2pbJ2RK+n84V2fH2zuHtJIJSPF -----END CERTIFICATE-----Generated at Thu Jul 3 19:43:50 2025 by rpki-client