$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: J7Z6A7mLLrrRhbebyrMgza8QJvwuhY4FhRQp4m9XGFA= Subject key identifier: 52:E3:9C:06:51:8D:45:E1:CF:8A:3E:88:0F:98:6C:82:54:76:D3:08 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 014C Signing time: Thu 03 Jul 2025 04:20:24 +0000 Manifest this update: Thu 03 Jul 2025 04:20:23 +0000 Manifest next update: Thu 10 Jul 2025 04:20:23 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: 6p3rNSXSHhe7fMvDfNziwWk8fVH9//0qwlek+00J0wA=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: Jul 3 04:20:23 2025 GMT Not After : Jul 10 04:20:23 2025 GMT Subject: CN=68660508-5b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:d2:f4:1d:32:b4:36:b9:ab:a5:0e:31:64: 39:9a:4f:c9:74:3f:af:9e:e5:68:68:87:94:cd:42: 4d:7c:c6:52:a5:ab:8e:ee:30:0d:95:be:be:7c:ec: cb:e5:ab:59:74:f2:4e:f1:97:65:41:0a:99:04:f9: c4:4e:1d:75:79:cc:f8:75:d2:52:6a:ce:43:f7:34: 23:00:22:c6:92:0c:57:f7:24:ee:20:60:40:12:a3: 5e:77:28:a6:8b:b6:88:b8:4f:76:64:03:78:db:ab: d9:00:36:f9:f9:24:a3:47:11:f8:44:a4:dc:f4:d7: 83:f8:45:32:59:ed:a5:fe:58:97:28:91:8b:de:0c: f8:70:28:7a:3e:a9:1f:c6:97:46:c0:d6:2f:cc:ab: 4f:33:8c:f1:81:5d:92:f6:53:96:be:73:e3:e3:02: a7:c6:62:94:c0:c8:50:86:6c:47:88:8f:4a:f4:a0: 17:49:ff:30:cf:36:e2:11:3e:9c:08:82:84:50:fc: 9d:f9:23:ed:89:79:b1:9e:18:67:73:45:2c:7f:74: ad:e3:e0:9c:4a:04:58:a8:a9:ae:df:94:17:84:8b: d0:78:d7:19:bf:77:1b:98:3b:fc:fc:8c:2a:d2:10: 2f:a0:23:6d:51:21:cd:6d:f2:06:09:99:10:bc:0c: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:9C:06:51:8D:45:E1:CF:8A:3E:88:0F:98:6C:82:54:76:D3:08 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ec:f1:ae:f6:dd:4c:e2:a5:b7:89:fb:ce:5e:fc:08:9a:b1: 82:5d:5d:c6:a7:12:d2:38:32:f6:d4:5b:5a:e5:9a:30:cf:f6: a6:70:d0:1b:ab:8c:46:d3:a9:8d:2c:bf:02:fe:d0:a3:e0:c2: ee:ab:4f:be:2c:8a:2a:68:9c:55:e1:f4:7f:46:03:70:0a:a0: e0:9a:4b:66:0d:bb:11:1d:26:e1:3c:bc:a9:dc:ad:86:bf:6c: 14:f7:f8:b9:06:47:26:a9:c8:12:ac:31:d4:19:f3:3e:eb:2a: 15:4b:9c:dc:f7:35:ab:c8:f5:1b:a9:57:23:7f:0f:7c:fb:a1: 93:c5:1a:92:a8:9b:d6:b0:0d:81:97:cb:9b:7c:7b:15:c9:c4: 8a:60:26:2e:55:68:77:28:6e:ad:b1:ac:b6:e2:32:6e:a4:2b: 9b:fe:21:78:ad:c1:78:7a:cc:88:9f:88:63:57:21:e8:c4:36: 88:26:33:75:b3:e5:4c:64:bc:e9:e2:58:81:7b:4c:3c:7a:db: a3:f8:b1:a2:dc:3d:70:d7:59:d5:89:5d:7c:c3:ae:36:eb:3e: 4d:51:8e:2b:2f:8a:15:a9:35:ae:94:01:30:4c:44:ea:4d:3e: 1f:60:1b:f8:36:3e:af:4a:9a:f4:d1:3b:14:60:81:8f:fd:fe: 49:e4:cd:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwNzAzMDQyMDIzWhcNMjUwNzEwMDQyMDIzWjAYMRYwFAYD VQQDEw02ODY2MDUwOC01YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuTS9B0ytDa5q6UOMWQ5mk/JdD+vnuVoaIeUzUJNfMZSpauO7jANlb6+fOzL 5atZdPJO8ZdlQQqZBPnETh11ecz4ddJSas5D9zQjACLGkgxX9yTuIGBAEqNedyim i7aIuE92ZAN426vZADb5+SSjRxH4RKTc9NeD+EUyWe2l/liXKJGL3gz4cCh6Pqkf xpdGwNYvzKtPM4zxgV2S9lOWvnPj4wKnxmKUwMhQhmxHiI9K9KAXSf8wzzbiET6c CIKEUPyd+SPtiXmxnhhnc0Usf3St4+CcSgRYqKmu35QXhIvQeNcZv3cbmDv8/Iwq 0hAvoCNtUSHNbfIGCZkQvAzeCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLjnAZR jUXhz4o+iA+YbIJUdtMIMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf7PGu9t1M4qW3ifvOXvwImrGCXV3GpxLSODL21Fta5Zowz/amcNAb q4xG06mNLL8C/tCj4MLuq0++LIoqaJxV4fR/RgNwCqDgmktmDbsRHSbhPLyp3K2G v2wU9/i5BkcmqcgSrDHUGfM+6yoVS5zc9zWryPUbqVcjfw98+6GTxRqSqJvWsA2B l8ubfHsVycSKYCYuVWh3KG6tsay24jJupCub/iF4rcF4esyIn4hjVyHoxDaIJjN1 s+VMZLzp4liBe0w8etuj+LGi3D1w11nViV18w6426z5NUY4rL4oVqTWulAEwTETq TT4fYBv4Nj6vSpr00TsUYIGP/f5J5M3I -----END CERTIFICATE-----Generated at Thu Jul 3 12:28:02 2025 by rpki-client