$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: z4Aojj+9Txlw44wGHObGo6ZzlwvlYYs/uoCAkDyMs9s= Subject key identifier: E8:D4:E1:34:6F:3E:CE:80:64:62:AD:05:04:99:39:E2:CC:9E:E6:62 Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 045D Signing time: Thu 03 Jul 2025 00:31:26 +0000 Manifest this update: Thu 03 Jul 2025 00:31:26 +0000 Manifest next update: Thu 10 Jul 2025 00:31:25 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: +KW8lkuvJKpF41duARFM+rXBL03SFao9p8qCP8FIeXw=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: qCU/OsBRO4+PMlzfkCWYCpZe9YTKzCH9brvEdyELMJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: Jul 3 00:31:26 2025 GMT Not After : Jul 10 00:31:25 2025 GMT Subject: CN=6865cf5e-aeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:08:05:ed:61:de:e2:2a:bd:31:df:e1:2e: 6a:a1:57:ce:84:8c:4f:7f:4f:9f:69:67:82:d4:83: 7c:c7:1b:c0:43:b2:f3:51:8d:2c:d8:eb:d7:91:d7: a0:a1:ef:03:20:43:be:bb:e3:a6:b0:ba:3f:f2:67: e0:a6:d3:af:1f:31:d6:a1:36:ca:18:bf:99:0e:a6: e2:a9:5d:06:d0:6d:1d:b3:db:05:07:01:2b:bc:fe: 92:0d:83:3f:58:b1:3a:af:64:22:75:f5:1a:d9:c7: dc:92:25:18:cb:92:d7:b5:1b:b6:fc:a7:1e:53:04: db:71:50:7e:c8:0f:37:69:0f:cf:f6:8e:41:f1:e6: 3f:7c:41:f4:e9:d9:77:46:ae:31:3f:bc:04:f9:81: 96:e7:3d:5b:f0:8e:d0:71:7e:c8:73:a4:ab:78:bf: 43:03:b6:5b:c3:5b:64:23:1a:b6:b6:c7:58:d1:49: ba:a2:e9:6c:a7:12:e6:12:f6:39:67:84:66:9e:b9: 21:14:e1:4b:21:3f:31:cb:98:05:40:7f:3b:e5:65: eb:15:97:c5:e1:4a:93:f2:19:7e:09:f8:5f:9e:69: e1:20:40:42:a5:34:26:17:23:01:e7:a6:41:d5:d3: 92:bb:25:18:19:8b:f1:31:75:27:c2:83:87:77:b5: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D4:E1:34:6F:3E:CE:80:64:62:AD:05:04:99:39:E2:CC:9E:E6:62 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f9:f0:81:be:05:77:fa:aa:98:c0:5e:a3:be:a5:b6:41:3a: 9c:b0:8e:79:bd:cd:52:e8:1d:45:c3:93:56:a0:56:52:21:7b: ec:fa:53:d1:1b:9c:ab:f9:06:d6:c4:ee:48:a7:f2:95:99:24: f8:5d:d6:75:33:50:04:b8:e9:fd:bc:ec:f5:2c:7d:c8:02:47: 8d:cd:34:d0:06:1f:f4:c1:f9:87:40:ca:9d:1b:67:79:e9:e3: 08:ca:e2:a2:a9:b7:38:96:ab:2b:7c:e3:05:7b:5c:eb:c0:ec: 35:03:dd:db:06:dc:39:3e:1b:bb:71:2d:3f:73:1e:98:f2:3d: 3b:09:2d:eb:b1:07:d5:25:fd:8d:79:61:78:24:29:3f:70:f7: 0f:f8:62:bd:3e:4c:d1:1c:0e:e5:61:4c:81:f1:43:9e:f9:b6: 8b:3f:da:ee:17:78:22:b4:71:5d:9c:3a:c5:04:48:13:50:b1: 2f:2a:a7:8f:29:89:d5:da:44:96:80:95:0f:00:c3:3f:8e:6a: 39:e8:2f:2f:80:2d:df:61:69:c0:4b:0b:16:03:62:d1:66:21: 83:29:97:3f:07:db:3f:37:8c:04:6c:70:f7:50:2b:10:b5:86: 1c:cd:6a:db:53:8e:90:8c:08:9d:de:24:cc:33:ca:8a:41:70: 4c:30:14:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjUwNzAzMDAzMTI2WhcNMjUwNzEwMDAzMTI1WjAYMRYwFAYD VQQDEw02ODY1Y2Y1ZS1hZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+MIBe1h3uIqvTHf4S5qoVfOhIxPf0+faWeC1IN8xxvAQ7LzUY0s2OvXkdeg oe8DIEO+u+OmsLo/8mfgptOvHzHWoTbKGL+ZDqbiqV0G0G0ds9sFBwErvP6SDYM/ WLE6r2QidfUa2cfckiUYy5LXtRu2/KceUwTbcVB+yA83aQ/P9o5B8eY/fEH06dl3 Rq4xP7wE+YGW5z1b8I7QcX7Ic6SreL9DA7Zbw1tkIxq2tsdY0Um6oulspxLmEvY5 Z4RmnrkhFOFLIT8xy5gFQH875WXrFZfF4UqT8hl+CfhfnmnhIEBCpTQmFyMB56ZB 1dOSuyUYGYvxMXUnwoOHd7US9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjU4TRv Ps6AZGKtBQSZOeLMnuZiMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw+fCBvgV3+qqYwF6jvqW2QTqcsI55vc1S6B1Fw5NWoFZSIXvs+lPR G5yr+QbWxO5Ip/KVmST4XdZ1M1AEuOn9vOz1LH3IAkeNzTTQBh/0wfmHQMqdG2d5 6eMIyuKiqbc4lqsrfOMFe1zrwOw1A93bBtw5Phu7cS0/cx6Y8j07CS3rsQfVJf2N eWF4JCk/cPcP+GK9PkzRHA7lYUyB8UOe+baLP9ruF3gitHFdnDrFBEgTULEvKqeP KYnV2kSWgJUPAMM/jmo56C8vgC3fYWnASwsWA2LRZiGDKZc/B9s/N4wEbHD3UCsQ tYYczWrbU46QjAid3iTMM8qKQXBMMBQ5 -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:49 2025 by rpki-client