$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: J8BP82cuWqmbkUdT3WbqiyayuIhGo7XIIpcNqSnsSD4= Subject key identifier: CB:FF:74:38:E5:3F:34:90:3D:DC:52:AF:7F:7D:C5:80:86:F4:31:28 Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 82 Signing time: Thu 03 Jul 2025 06:52:07 +0000 Manifest this update: Thu 03 Jul 2025 06:52:06 +0000 Manifest next update: Thu 10 Jul 2025 06:52:06 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: 3eWna+Flxa+1VHOfIVGgYRpJqXtuD3EdxG3V18VoapM=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: 0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Jul 3 06:52:06 2025 GMT Not After : Jul 10 06:52:06 2025 GMT Subject: CN=68662897-3946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:95:d6:05:a1:67:1b:90:c3:76:2f:3a:cb: f9:c5:2a:5e:f3:43:aa:1e:ba:20:91:67:20:3d:e3: 44:ae:d4:c9:5f:6f:52:8c:51:54:b6:de:62:e7:e3: e3:a2:5d:6f:19:ed:27:40:78:7c:7d:e3:54:52:6f: 59:61:0a:4f:46:13:3a:17:2a:08:77:ec:94:b2:8b: 67:28:b3:82:79:a3:1c:0a:7d:68:12:bc:31:9a:43: 44:72:f3:e5:c3:43:85:f5:2c:be:ab:b7:7b:2a:f3: a3:93:8f:c8:b0:80:3b:d5:72:d2:cf:19:82:99:19: 88:d8:c4:34:97:a1:0b:73:5a:9e:96:6c:4c:14:26: 22:7c:a1:a7:20:de:eb:73:bd:c2:53:55:03:39:7d: 13:39:76:62:20:ff:ed:92:9c:cf:46:0c:24:25:4e: e7:f6:07:76:b4:d7:2d:96:10:ef:73:58:45:41:16: 85:e7:2c:38:9a:fc:11:3f:72:4f:7f:39:36:92:fb: b0:9e:06:a8:98:23:57:b9:fe:c5:96:e5:2c:67:63: 88:58:d4:d5:ae:88:88:7a:58:0c:a1:2c:0c:f1:64: 37:95:d3:c1:d4:85:69:fb:5d:b1:5a:3d:51:9c:cc: b2:c3:c8:4b:20:7e:92:e4:14:9b:cd:00:48:39:1e: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:74:38:E5:3F:34:90:3D:DC:52:AF:7F:7D:C5:80:86:F4:31:28 X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ff:2c:8e:80:72:07:88:77:76:ac:20:eb:f1:ea:c9:bf:8b: c5:f8:ce:26:63:aa:b8:ad:bf:d5:bb:6c:62:83:ee:c5:cc:1e: 21:0a:4d:0a:c7:af:3a:bb:ef:05:df:d2:4f:d3:8f:66:7d:05: e7:d4:71:74:2d:1e:cf:22:82:16:89:75:0a:08:5f:b7:8d:57: 34:aa:22:76:ef:25:99:8a:92:ac:1e:86:34:02:72:1c:16:04: 3d:36:49:73:36:5a:ad:53:64:ea:ac:45:05:c9:19:c0:fc:8a: 2b:89:60:9f:05:4c:a4:91:f9:fd:21:24:05:5e:23:c6:9b:0c: cf:21:44:1e:87:21:d7:a4:20:8f:bc:bd:3f:60:f8:77:41:d5: 71:dd:23:7b:07:00:da:87:93:e0:95:dc:6c:a8:4d:97:6f:e9: 62:37:db:38:b9:99:a3:f5:4b:c0:9f:59:4f:be:0c:65:65:a7: 5d:20:30:e6:c7:00:73:68:03:db:13:02:19:dc:c6:c4:aa:ae: 60:ae:bc:a4:4f:17:ce:65:6d:ed:dd:a0:24:a9:58:d8:e6:aa: af:2c:fd:ed:22:ee:5c:68:4d:6c:b0:e1:1b:f2:35:48:6e:ef: 46:6c:5a:a2:4d:33:ec:43:8f:38:db:50:ed:b8:be:87:f9:1d: 83:99:0d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjUwNzAzMDY1MjA2WhcNMjUwNzEwMDY1MjA2WjAYMRYwFAYD VQQDEw02ODY2Mjg5Ny0zOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HGV1gWhZxuQw3YvOsv5xSpe80OqHrogkWcgPeNErtTJX29SjFFUtt5i5+Pj ol1vGe0nQHh8feNUUm9ZYQpPRhM6FyoId+yUsotnKLOCeaMcCn1oErwxmkNEcvPl w0OF9Sy+q7d7KvOjk4/IsIA71XLSzxmCmRmI2MQ0l6ELc1qelmxMFCYifKGnIN7r c73CU1UDOX0TOXZiIP/tkpzPRgwkJU7n9gd2tNctlhDvc1hFQRaF5yw4mvwRP3JP fzk2kvuwngaomCNXuf7FluUsZ2OIWNTVroiIelgMoSwM8WQ3ldPB1IVp+12xWj1R nMyyw8hLIH6S5BSbzQBIOR5iTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv/dDjl PzSQPdxSr399xYCG9DEoMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8/yyOgHIHiHd2rCDr8erJv4vF+M4mY6q4rb/Vu2xig+7FzB4hCk0K x686u+8F39JP049mfQXn1HF0LR7PIoIWiXUKCF+3jVc0qiJ27yWZipKsHoY0AnIc FgQ9NklzNlqtU2TqrEUFyRnA/IoriWCfBUykkfn9ISQFXiPGmwzPIUQehyHXpCCP vL0/YPh3QdVx3SN7BwDah5PgldxsqE2Xb+liN9s4uZmj9UvAn1lPvgxlZaddIDDm xwBzaAPbEwIZ3MbEqq5grrykTxfOZW3t3aAkqVjY5qqvLP3tIu5caE1ssOEb8jVI bu9GbFqiTTPsQ48421DtuL6H+R2DmQ2n -----END CERTIFICATE-----Generated at Thu Jul 3 23:28:49 2025 by rpki-client