$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: ea5txlg1zHSUkhssv+lnzUPAoEGXTdIyYaMYuNetYkQ= Subject key identifier: 69:5D:0B:E8:96:69:8C:8B:C6:2C:53:39:D9:F6:DE:0C:70:89:AF:D2 Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 071D Signing time: Wed 02 Jul 2025 22:07:30 +0000 Manifest this update: Wed 02 Jul 2025 22:07:29 +0000 Manifest next update: Wed 09 Jul 2025 22:07:29 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: xGl0ePWnjdref/+4pl5C/cGWLwSzx/wi8LXU3iz95k4=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: H0kHP8pBoH+bwHmlcJ0nDAtlDVRXDuWl/zy2MYQJc/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933, serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: Jul 2 22:07:29 2025 GMT Not After : Jul 9 22:07:29 2025 GMT Subject: CN=6865ada1-e590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:88:e5:a1:6d:11:9f:0a:47:6c:e6:0a:c0: 87:79:b2:0f:3b:9f:11:33:6e:5b:8f:28:89:ca:fb: 5e:82:95:84:5c:e6:7c:fd:ee:bb:81:77:44:a3:8b: 86:9b:62:a6:bd:ac:32:b8:d6:a5:92:57:7c:7e:cb: e3:0f:bb:1a:77:e7:31:22:da:df:f8:a4:06:56:95: 3d:c3:34:b7:a0:d0:de:f6:2e:55:e1:0a:4f:1b:7f: be:e1:90:9f:8a:34:13:ec:f6:c2:a7:66:f4:d9:ef: 74:d0:d1:30:17:36:f6:85:ef:12:a6:a3:6b:cd:d0: 2d:37:55:26:bf:bf:c5:6f:5d:3c:f6:67:81:0a:cb: 0a:2c:2e:c9:80:b5:1d:9b:4d:ac:a5:34:30:bb:8c: 7d:b5:bf:ef:5d:c4:d1:c4:28:22:d2:82:46:3c:8a: 6d:e0:05:ca:02:d8:c2:fa:2e:b4:fe:11:5b:7b:79: 89:ce:bd:b9:58:d4:98:6c:5f:60:47:5b:63:fc:1d: bb:4f:45:e4:fa:2c:9c:6e:26:3c:94:9f:18:59:03: fc:ec:d0:40:4c:86:f4:41:bf:55:f6:72:85:f5:56: 68:43:2e:88:7f:43:38:e1:93:d4:87:d4:0a:b4:f2: 72:9d:44:40:4d:b4:e4:79:ff:be:73:4e:02:96:52: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:0B:E8:96:69:8C:8B:C6:2C:53:39:D9:F6:DE:0C:70:89:AF:D2 X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:14:8c:bb:f0:c5:6f:d2:86:9f:56:86:97:cf:4b:72:10:58: 4b:2e:29:0a:4c:cf:9d:a5:8a:e6:6f:e7:42:3c:d0:45:a1:55: a6:5e:25:0b:17:8b:4d:5b:02:ad:e2:34:3b:0a:8e:af:28:87: df:11:e1:9e:70:f9:d1:e1:2d:84:3a:cf:f6:93:df:9b:8c:30: 44:9f:14:b7:97:5e:4b:02:3f:ce:87:8a:de:66:4c:7e:81:bf: 9c:c8:d3:0a:c9:aa:3f:f0:bc:0b:a3:03:bb:fb:92:72:7a:7a: 00:1e:ca:30:73:54:1d:76:35:49:0a:41:1d:c4:8e:56:d6:46: 71:eb:57:53:15:b6:06:a2:25:81:2f:76:ba:cc:d0:47:44:df: 5a:62:f8:d2:13:99:11:27:5d:c9:63:02:21:55:02:78:19:2e: ad:f5:7e:52:2f:54:a5:05:31:70:79:59:a8:f8:3d:66:1c:1a: e4:5d:6d:fc:17:fb:b7:eb:e2:73:ef:93:1b:db:e8:12:8c:97: a0:4e:1e:bd:72:38:5c:d7:08:d2:44:0a:72:b7:e3:77:c7:0c: 6c:64:3b:99:63:07:09:76:20:93:f9:2c:b8:f5:13:e3:33:89: d4:ad:fb:d6:6b:5f:51:96:99:71:88:65:bf:48:03:81:1c:8f: 1f:fb:49:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjUwNzAyMjIwNzI5WhcNMjUwNzA5MjIwNzI5WjAYMRYwFAYD VQQDEw02ODY1YWRhMS1lNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsiI5aFtEZ8KR2zmCsCHebIPO58RM25bjyiJyvtegpWEXOZ8/e67gXdEo4uG m2KmvawyuNalkld8fsvjD7sad+cxItrf+KQGVpU9wzS3oNDe9i5V4QpPG3++4ZCf ijQT7PbCp2b02e900NEwFzb2he8SpqNrzdAtN1Umv7/Fb1089meBCssKLC7JgLUd m02spTQwu4x9tb/vXcTRxCgi0oJGPIpt4AXKAtjC+i60/hFbe3mJzr25WNSYbF9g R1tj/B27T0Xk+iycbiY8lJ8YWQP87NBATIb0Qb9V9nKF9VZoQy6If0M44ZPUh9QK tPJynURATbTkef++c04CllIFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGldC+iW aYyLxixTOdn23gxwia/SMB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9FIy78MVv0oafVoaXz0tyEFhLLikKTM+dpYrmb+dCPNBFoVWmXiUL F4tNWwKt4jQ7Co6vKIffEeGecPnR4S2EOs/2k9+bjDBEnxS3l15LAj/Oh4reZkx+ gb+cyNMKyao/8LwLowO7+5JyenoAHsowc1QddjVJCkEdxI5W1kZx61dTFbYGoiWB L3a6zNBHRN9aYvjSE5kRJ13JYwIhVQJ4GS6t9X5SL1SlBTFweVmo+D1mHBrkXW38 F/u36+Jz75Mb2+gSjJegTh69cjhc1wjSRApyt+N3xwxsZDuZYwcJdiCT+Sy49RPj M4nUrfvWa19RlplxiGW/SAOBHI8f+0ma -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:36 2025 by rpki-client