$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: TzTSI8o19MUvmBSpso0V6T/VtRBxi3zQmL3SYUUUk6U= Subject key identifier: 4B:5D:54:F7:34:E0:B7:73:32:17:CD:E7:E9:E1:A4:11:17:8F:DF:8A Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 0108 Signing time: Thu 03 Jul 2025 05:12:51 +0000 Manifest this update: Thu 03 Jul 2025 05:12:50 +0000 Manifest next update: Thu 10 Jul 2025 05:12:50 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: 5C9hoPmpbWMiqQWwhHk9TmSFQnuG8HBJHl81ZF+XWWY=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Jul 3 05:12:50 2025 GMT Not After : Jul 10 05:12:50 2025 GMT Subject: CN=68661153-3608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:16:b4:8a:dd:48:bc:b9:31:f3:b7:7c:f2: 34:24:d2:e4:7f:7a:0d:68:d3:61:47:d1:b4:f0:44: 7f:77:b2:83:42:81:20:d9:57:28:81:a9:39:27:f6: 9e:0c:48:b8:e5:d0:e9:87:09:52:39:7f:fe:77:a8: 51:12:4d:5b:4d:70:53:a4:19:5d:71:10:27:1c:d3: ae:08:7b:b8:6f:d7:5f:1e:d0:1a:b8:2a:47:7c:5d: 57:8c:dd:7b:f9:4e:3f:3d:9f:98:02:4c:1d:f0:61: 16:8c:31:c9:e4:a6:ad:1f:89:de:b1:5a:af:a8:ba: 4b:3b:52:4a:a9:04:ca:72:92:94:a4:f6:b6:5b:4d: 17:cc:a4:92:5a:77:d4:8e:1c:03:b1:aa:b5:b6:73: e8:99:01:98:fb:c3:dc:e5:db:72:94:c2:19:5a:e8: 9f:e1:8c:06:73:26:42:b6:42:a4:db:e1:b1:bb:7a: 21:d4:c1:fb:18:8f:da:b6:ed:85:ea:2b:f7:4d:7d: b4:0d:41:62:00:65:4d:0e:b0:de:d3:0c:66:8c:af: c0:aa:1e:d9:d4:24:c8:58:3a:09:e1:18:aa:63:83: 58:ad:60:84:3c:75:bd:0f:c5:33:9b:46:2d:ab:95: 47:1b:03:a9:0c:00:c8:f1:70:d2:f0:66:4c:c8:79: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:54:F7:34:E0:B7:73:32:17:CD:E7:E9:E1:A4:11:17:8F:DF:8A X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:17:d4:7a:d7:56:ff:f1:c3:6a:a9:ad:68:45:46:43:19: c7:a0:66:3e:03:ae:31:19:24:81:90:e7:b7:49:8f:74:8f:ff: 73:f7:90:84:0f:3b:79:e4:13:5b:ef:c2:a9:92:0a:0a:8d:5a: 9b:81:7d:d2:44:1c:2f:3c:98:fa:9a:f6:dc:12:75:df:9d:ea: 87:69:af:29:ac:e9:41:bf:41:be:41:c0:5f:52:28:ac:37:66: 84:f5:c6:fc:9b:43:2e:c6:4c:d6:1c:18:2a:93:85:05:84:b4: de:7f:4a:bf:bf:76:eb:18:d2:6a:49:d8:59:34:c3:d5:2d:db: 42:08:79:ff:3c:4d:c5:00:c0:a5:eb:e5:71:f6:c2:40:96:82: e0:c1:16:c1:4d:f2:75:2f:c5:95:e5:d0:aa:16:6d:5d:69:3b: f2:74:b0:ed:94:dd:5c:a6:0a:d0:80:41:04:5e:a6:b2:c4:13: fb:ee:80:c5:1d:19:be:d1:f8:21:3f:69:53:19:b2:2c:5a:49: ea:b9:99:d1:6e:0d:dd:90:bf:78:5a:06:7a:7c:07:1a:b4:7a: 60:41:3c:c9:7f:86:ea:0e:29:9a:f5:54:7e:6b:7d:74:fe:4b: f0:f0:93:ca:97:d7:ba:14:42:3b:72:ed:96:f8:dd:ae:8d:bd: 22:42:a9:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNzAzMDUxMjUwWhcNMjUwNzEwMDUxMjUwWjAYMRYwFAYD VQQDEw02ODY2MTE1My0zNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+EWtIrdSLy5MfO3fPI0JNLkf3oNaNNhR9G08ER/d7KDQoEg2Vcogak5J/ae DEi45dDphwlSOX/+d6hREk1bTXBTpBldcRAnHNOuCHu4b9dfHtAauCpHfF1XjN17 +U4/PZ+YAkwd8GEWjDHJ5KatH4nesVqvqLpLO1JKqQTKcpKUpPa2W00XzKSSWnfU jhwDsaq1tnPomQGY+8Pc5dtylMIZWuif4YwGcyZCtkKk2+Gxu3oh1MH7GI/atu2F 6iv3TX20DUFiAGVNDrDe0wxmjK/Aqh7Z1CTIWDoJ4RiqY4NYrWCEPHW9D8Uzm0Yt q5VHGwOpDADI8XDS8GZMyHmqAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtdVPc0 4LdzMhfN5+nhpBEXj9+KMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO3hfUetdW//HDaqmtaEVGQxnHoGY+A64xGSSBkOe3SY90j/9z95CE Dzt55BNb78KpkgoKjVqbgX3SRBwvPJj6mvbcEnXfneqHaa8prOlBv0G+QcBfUiis N2aE9cb8m0MuxkzWHBgqk4UFhLTef0q/v3brGNJqSdhZNMPVLdtCCHn/PE3FAMCl 6+Vx9sJAloLgwRbBTfJ1L8WV5dCqFm1daTvydLDtlN1cpgrQgEEEXqayxBP77oDF HRm+0fghP2lTGbIsWknquZnRbg3dkL94WgZ6fAcatHpgQTzJf4bqDima9VR+a310 /kvw8JPKl9e6FEI7cu2W+N2ujb0iQqkF -----END CERTIFICATE-----Generated at Thu Jul 3 10:33:35 2025 by rpki-client