$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: bj50GNvP9y6WU3eLIgXKB6BD/JmoNRDmHrRLoUmCjbs= Subject key identifier: BD:B1:93:5F:EF:BE:7C:96:83:C4:C6:8C:97:9D:84:00:09:1F:13:C2 Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 01C8 Signing time: Sun 29 Jun 2025 02:10:10 +0000 Manifest this update: Sun 29 Jun 2025 02:10:09 +0000 Manifest next update: Sun 06 Jul 2025 02:10:09 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: /fboCcbQJ9HGl9s6qJZ0j4gl6sENaR4shMXKVMemkdc=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Jun 29 02:10:09 2025 GMT Not After : Jul 6 02:10:09 2025 GMT Subject: CN=6860a081-6b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:62:2d:cc:6c:d2:d3:82:98:fd:84:21:f8: 36:39:f1:4f:60:d6:9a:08:b7:d3:bf:15:59:df:82: a5:14:e7:22:4e:02:33:fb:ed:b8:20:f6:d4:51:e1: 8e:e0:bc:86:00:0a:4f:79:cb:a5:f0:eb:66:c0:fc: 72:ab:8a:24:b2:49:8b:ce:4b:9d:dc:c0:11:0f:82: 8b:35:00:69:bc:41:40:50:dc:f1:f3:85:ef:37:dd: a2:26:d4:ff:98:ab:6c:7f:97:f0:5e:e0:9f:7d:6b: 02:d7:d4:5b:bb:e4:df:85:67:87:ac:3b:68:ad:f6: 0a:09:8e:99:a9:db:8e:05:77:b2:cb:e9:c4:12:bd: 8e:0e:82:47:d7:d3:8a:f0:b8:54:09:2d:2e:57:cb: f2:96:c9:99:2c:54:03:37:aa:ce:b1:4b:89:69:65: 61:2b:2c:60:24:97:b2:00:f1:9f:81:24:d4:7a:96: 74:99:f9:59:01:35:88:eb:74:b9:37:5f:b5:eb:0a: 02:53:82:05:45:3f:f9:72:18:2f:90:57:9e:9b:d4: b5:ad:d0:d1:c9:b3:fd:86:6a:59:0e:c7:ed:74:ca: 2d:e6:27:c1:59:76:9d:f2:10:b9:5d:7d:52:83:5e: 42:b6:db:51:30:f0:f7:31:41:99:e6:98:c6:8d:3a: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:93:5F:EF:BE:7C:96:83:C4:C6:8C:97:9D:84:00:09:1F:13:C2 X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:8d:ef:31:14:e7:58:87:88:01:01:0a:dd:3d:1f:31:c1: 7a:eb:9f:74:d1:97:e7:56:dd:c8:2c:cb:5d:00:7d:fc:cf:91: 2f:85:aa:aa:82:83:f5:58:ed:87:5e:ab:af:be:91:3b:ab:ce: 85:dc:f6:0c:98:07:83:06:24:3a:e7:94:c5:41:52:a5:ab:24: 35:7b:2d:fd:d0:7c:46:23:6d:b2:8d:b7:5b:08:0e:13:93:70: d9:75:12:1d:0e:ac:4d:45:38:89:d5:2f:cb:93:76:7d:c4:b0: ac:c5:5f:2a:13:c1:71:f7:e3:5c:47:58:f7:62:53:8e:9b:68: c5:20:0e:e5:ce:26:2b:b5:52:b0:d8:4a:8c:74:53:25:52:81: 81:7f:18:3d:ea:d3:b2:f6:8e:8d:5b:6e:cc:03:77:82:58:42: 1b:a4:40:a7:49:df:98:a0:8e:80:ca:eb:87:2f:5c:0c:23:05: 8e:1a:b5:8f:53:52:12:57:49:8d:70:ca:e9:73:c0:b4:10:70: 7b:90:76:26:29:ed:f1:82:cc:6b:f5:cc:6a:f1:0c:d5:cb:0c: 1c:a1:c8:94:6c:b5:2b:d1:96:58:15:72:91:d3:e4:fe:7c:ed: a4:b5:77:a1:58:db:27:f3:a9:35:1b:30:e6:30:1a:2d:ff:46: 8b:4f:ad:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUwNjI5MDIxMDA5WhcNMjUwNzA2MDIxMDA5WjAYMRYwFAYD VQQDEw02ODYwYTA4MS02YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP5iLcxs0tOCmP2EIfg2OfFPYNaaCLfTvxVZ34KlFOciTgIz++24IPbUUeGO 4LyGAApPecul8OtmwPxyq4okskmLzkud3MARD4KLNQBpvEFAUNzx84XvN92iJtT/ mKtsf5fwXuCffWsC19Rbu+TfhWeHrDtorfYKCY6ZqduOBXeyy+nEEr2ODoJH19OK 8LhUCS0uV8vylsmZLFQDN6rOsUuJaWVhKyxgJJeyAPGfgSTUepZ0mflZATWI63S5 N1+16woCU4IFRT/5chgvkFeem9S1rdDRybP9hmpZDsftdMot5ifBWXad8hC5XX1S g15CtttRMPD3MUGZ5pjGjTpLOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2xk1/v vnyWg8TGjJedhAAJHxPCMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVmo3vMRTnWIeIAQEK3T0fMcF665900ZfnVt3ILMtdAH38z5Evhaqq goP1WO2HXquvvpE7q86F3PYMmAeDBiQ655TFQVKlqyQ1ey390HxGI22yjbdbCA4T k3DZdRIdDqxNRTiJ1S/Lk3Z9xLCsxV8qE8Fx9+NcR1j3YlOOm2jFIA7lziYrtVKw 2EqMdFMlUoGBfxg96tOy9o6NW27MA3eCWEIbpECnSd+YoI6AyuuHL1wMIwWOGrWP U1ISV0mNcMrpc8C0EHB7kHYmKe3xgsxr9cxq8QzVywwcociUbLUr0ZZYFXKR0+T+ fO2ktXehWNsn86k1GzDmMBot/0aLT62N -----END CERTIFICATE-----Generated at Sun Jun 29 13:36:25 2025 by rpki-client