$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: 3xLzbQR782Up2ddZwBUyz4m7pmBTVmpo/t5Bv6NY21E= Subject key identifier: B7:96:6A:AE:42:22:2A:79:20:B6:CD:DA:59:B2:1C:2D:BA:CC:13:1F Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 09E3 Signing time: Wed 02 Jul 2025 20:27:49 +0000 Manifest this update: Wed 02 Jul 2025 20:27:48 +0000 Manifest next update: Wed 09 Jul 2025 20:27:48 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: 9A1Dcj+Z9BmLHLaC+kyBFHoTFp6s1SH2BmaWcWaWOWE=) 2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=) 3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=) 4: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eklJ7FzTn9mZj0/tgQ82yry1nIlD8nEbavqJJ/O2CPk=) 5: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=) 6: 83055A0E474911F0B811BF25C4F9AE02.roa (hash: EgTKA48l6DJiUoxXTbkGxqr3tInWHU28hOBokEssk+8=) 7: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=) 8: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: 42wtHPLx0JrkQKTrCFLyZY4pDRcmXa+t+VZA3lR/+FQ=) 9: 8533D57A4D7611F0A8533A0BC4F9AE02.roa (hash: yX8riS/3PGxEo4B+e2WGjOqGhdh/NjGMzCuQRa5oFVg=) 10: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=) 11: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2702 (0xa8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Jul 2 20:27:48 2025 GMT Not After : Jul 9 20:27:48 2025 GMT Subject: CN=68659644-24c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:59:87:dc:d0:28:53:f9:49:1f:c6:e4:f7: c4:99:38:7b:d8:88:17:3e:df:16:d4:00:96:39:65: 96:36:ac:7a:e2:cc:1c:c3:43:d2:f3:47:36:37:e6: b5:dd:bc:58:1e:be:3a:04:d7:c7:38:97:2a:01:cc: 2b:8e:03:31:0f:fb:e1:f7:03:bf:70:b7:77:4d:ec: c7:7d:00:c6:be:95:37:4d:9f:aa:d7:a8:b7:23:e1: 89:64:0e:41:94:fd:48:a4:98:fc:73:8d:32:47:d8: 39:cb:f5:dc:60:3a:a4:cb:18:fe:5c:7f:4a:84:22: ed:da:fc:29:54:7b:30:4f:ff:61:0c:26:53:08:9b: 31:84:39:04:b2:09:e4:81:ae:08:22:eb:3b:f9:f1: 35:91:57:94:7c:72:bd:e2:bb:9c:5f:66:1e:f4:ad: 23:b3:b3:43:f6:99:53:91:8b:03:92:7b:94:fb:e0: 46:92:38:ad:ac:f8:55:a1:50:97:8a:d9:a2:70:1a: 03:62:28:35:40:17:67:31:ab:d5:e8:74:2d:6c:4f: d9:4f:11:60:95:5c:5c:ac:9a:67:c2:b3:04:9a:69: e0:0d:da:df:8a:fa:be:10:67:01:8b:e4:c6:8c:5a: 53:3e:1f:0e:9d:0f:84:5c:f1:ee:30:bc:73:fa:e3: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:96:6A:AE:42:22:2A:79:20:B6:CD:DA:59:B2:1C:2D:BA:CC:13:1F X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3a:a0:06:42:a2:4f:eb:30:85:6f:c6:f0:bf:f6:f9:c6:0e: 5c:12:08:7c:7c:65:31:09:d5:b8:89:e0:47:1a:7a:a7:4a:9b: df:df:6c:97:d9:85:17:57:0b:98:00:2e:48:3d:70:52:af:6a: 48:fd:64:8b:74:75:55:82:95:2e:53:71:17:fb:83:de:62:26: d8:4b:1f:76:6e:0c:8d:e5:37:45:8b:52:02:ab:2f:a1:74:39: b1:fc:a9:ab:ff:d7:7e:d3:de:09:36:94:fe:f3:1d:2b:a3:f6: 95:d4:4c:ac:15:38:48:19:76:58:66:e2:ef:8a:21:2c:fa:e7: d1:a7:77:ab:8b:2a:ed:a8:37:8b:1f:47:ce:8d:04:3a:1a:e6: f3:47:66:ba:c6:53:3a:6a:e2:04:8a:a5:96:bc:1b:b4:46:6a: d0:ef:30:c5:4d:6d:85:92:83:56:c1:dd:fd:65:d2:bc:f8:79: 3f:c3:c3:2e:fa:6a:90:56:10:7a:8f:a4:3b:92:82:b8:a2:f2: e8:8a:55:52:c5:aa:11:7a:3b:20:54:e8:bf:18:d3:57:54:0e: d1:3e:82:b8:d6:86:bd:b3:f6:f5:bd:d4:a4:80:4b:35:9c:49: 70:1c:19:11:3c:b9:39:75:b8:cd:ed:3d:45:ca:d1:7f:68:af: e0:a5:a2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNzAyMjAyNzQ4WhcNMjUwNzA5MjAyNzQ4WjAYMRYwFAYD VQQDEw02ODY1OTY0NC0yNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/JZh9zQKFP5SR/G5PfEmTh72IgXPt8W1ACWOWWWNqx64swcw0PS80c2N+a1 3bxYHr46BNfHOJcqAcwrjgMxD/vh9wO/cLd3TezHfQDGvpU3TZ+q16i3I+GJZA5B lP1IpJj8c40yR9g5y/XcYDqkyxj+XH9KhCLt2vwpVHswT/9hDCZTCJsxhDkEsgnk ga4IIus7+fE1kVeUfHK94rucX2Ye9K0js7ND9plTkYsDknuU++BGkjitrPhVoVCX itmicBoDYig1QBdnMavV6HQtbE/ZTxFglVxcrJpnwrMEmmngDdrfivq+EGcBi+TG jFpTPh8OnQ+EXPHuMLxz+uMFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeWaq5C Iip5ILbN2lmyHC26zBMfMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaOqAGQqJP6zCFb8bwv/b5xg5cEgh8fGUxCdW4ieBHGnqnSpvf32yX 2YUXVwuYAC5IPXBSr2pI/WSLdHVVgpUuU3EX+4PeYibYSx92bgyN5TdFi1ICqy+h dDmx/Kmr/9d+094JNpT+8x0ro/aV1EysFThIGXZYZuLviiEs+ufRp3eriyrtqDeL H0fOjQQ6GubzR2a6xlM6auIEiqWWvBu0RmrQ7zDFTW2FkoNWwd39ZdK8+Hk/w8Mu +mqQVhB6j6Q7koK4ovLoilVSxaoRejsgVOi/GNNXVA7RPoK41oa9s/b1vdSkgEs1 nElwHBkRPLk5dbjN7T1FytF/aK/gpaIR -----END CERTIFICATE-----Generated at Fri Jul 4 14:21:16 2025 by rpki-client