$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json) Hash identifier: k9RWHwSmEw////hf4hIeanpfb/I7dXaljoPEiGNJC6c= Subject key identifier: A3:90:B0:9E:ED:19:2B:88:BF:E6:29:67:43:25:C3:13:B1:EB:5A:FA Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft Manifest number: 04F7 Signing time: Thu 03 Jul 2025 00:07:08 +0000 Manifest this update: Thu 03 Jul 2025 00:07:07 +0000 Manifest next update: Thu 10 Jul 2025 00:07:07 +0000 Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: vd6lqQxZYooQFtgMiYvOr+BOjxRsfVG4Pf1CwNPkbnc=) 2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=) 3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Jul 3 00:07:07 2025 GMT Not After : Jul 10 00:07:07 2025 GMT Subject: CN=6865c9ab-b3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:aa:d6:e0:b9:01:a2:cc:1b:cb:4f:46:83: 0d:5c:8a:84:a9:06:e6:1a:2c:69:47:ca:6c:2b:fd: da:6f:6d:cf:98:1a:2d:1e:85:88:af:8f:0a:24:ed: 1c:6d:01:32:00:95:15:5c:11:c7:2d:2b:dd:47:8c: 88:34:32:7a:b7:56:b4:a4:3d:c4:43:b6:78:e9:2b: c8:2d:d6:20:6a:f0:05:fa:53:86:84:92:77:b4:87: 9c:5a:8e:9f:4f:1d:0c:c5:a1:17:72:73:f4:4e:de: cb:3a:63:66:00:dc:a1:38:7f:7f:4f:85:7e:25:08: a2:54:cf:ec:2b:b1:4f:ab:7a:da:82:7e:7e:11:62: 03:aa:96:b9:03:db:3f:4e:2e:80:92:e3:59:4e:50: 93:c1:e4:1d:72:d8:a6:0b:c9:a0:8e:92:61:9d:29: b0:98:70:73:1c:de:c6:8d:fd:ee:77:e8:4d:62:d0: 0c:9b:92:77:53:4e:6e:5f:3f:2f:8c:0d:e5:36:63: bf:0f:ad:29:6a:03:9b:69:4e:77:12:f0:e6:50:24: 1e:27:73:6c:e6:07:dd:a4:40:69:4f:e0:22:a3:c1: 35:eb:76:40:4f:6f:c8:cc:91:b9:ac:4c:54:f1:2e: ec:4b:d6:c0:3b:3b:1c:b4:6f:95:ae:67:18:02:a7: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:90:B0:9E:ED:19:2B:88:BF:E6:29:67:43:25:C3:13:B1:EB:5A:FA X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ee:77:d3:fe:65:fa:8b:29:45:94:c0:5d:fc:3c:9b:95:b2: cb:4b:c3:56:63:09:a4:f4:63:ad:10:09:9e:14:7c:d2:63:3e: 4d:f3:05:36:fa:66:2d:76:84:b7:47:33:94:ae:56:a1:4e:d5: 8d:cd:ad:0e:15:16:39:22:39:08:95:35:85:8d:e5:a2:c2:93: 47:19:a2:32:f1:61:d3:ac:1b:de:be:7d:87:4a:d7:9e:23:26: de:07:53:26:6e:cb:6e:7a:ca:67:86:84:d4:8a:78:1f:23:9f: fd:21:ad:6a:b3:b5:ca:c4:ea:7a:f0:5e:0b:a8:b7:63:88:f2: e0:38:82:fe:3a:27:5a:2a:89:13:19:41:98:c2:66:6d:33:dc: 17:6f:a3:d5:2d:32:eb:24:df:18:99:ad:7c:38:9e:8b:64:e3: 63:7c:e9:e2:0a:32:de:36:d3:40:10:d4:50:98:08:6d:65:6c: 86:bb:a0:7a:41:4b:ed:01:95:58:36:b3:05:9a:52:48:87:9d: 57:77:a3:97:86:0b:96:02:86:0f:66:c2:a8:e1:0d:51:de:e3: 16:f1:fa:8c:0f:46:57:b4:2f:1f:7e:61:1d:c6:c9:bd:4d:12: c7:7c:51:12:60:6a:d3:ac:ee:dc:31:39:bf:4d:7d:07:a2:4c: 9c:0e:9e:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUwNzAzMDAwNzA3WhcNMjUwNzEwMDAwNzA3WjAYMRYwFAYD VQQDEw02ODY1YzlhYi1iM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIiq1uC5AaLMG8tPRoMNXIqEqQbmGixpR8psK/3ab23PmBotHoWIr48KJO0c bQEyAJUVXBHHLSvdR4yINDJ6t1a0pD3EQ7Z46SvILdYgavAF+lOGhJJ3tIecWo6f Tx0MxaEXcnP0Tt7LOmNmANyhOH9/T4V+JQiiVM/sK7FPq3ragn5+EWIDqpa5A9s/ Ti6AkuNZTlCTweQdctimC8mgjpJhnSmwmHBzHN7Gjf3ud+hNYtAMm5J3U05uXz8v jA3lNmO/D60pagObaU53EvDmUCQeJ3Ns5gfdpEBpT+Aio8E163ZAT2/IzJG5rExU 8S7sS9bAOzsctG+VrmcYAqeGSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOQsJ7t GSuIv+YpZ0MlwxOx61r6MB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+7nfT/mX6iylFlMBd/DyblbLLS8NWYwmk9GOtEAmeFHzSYz5N8wU2 +mYtdoS3RzOUrlahTtWNza0OFRY5IjkIlTWFjeWiwpNHGaIy8WHTrBvevn2HStee IybeB1MmbstuespnhoTUingfI5/9Ia1qs7XKxOp68F4LqLdjiPLgOIL+OidaKokT GUGYwmZtM9wXb6PVLTLrJN8Yma18OJ6LZONjfOniCjLeNtNAENRQmAhtZWyGu6B6 QUvtAZVYNrMFmlJIh51Xd6OXhguWAoYPZsKo4Q1R3uMW8fqMD0ZXtC8ffmEdxsm9 TRLHfFESYGrTrO7cMTm/TX0HokycDp7O -----END CERTIFICATE-----Generated at Fri Jul 4 03:00:08 2025 by rpki-client