$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: AOS6EPtro3ExPJTt106U5wVvWWIR87pdTX8LXULzp0A= Subject key identifier: BA:C0:A4:10:96:E9:87:D1:06:E4:7F:2C:1A:5F:70:6F:F4:9C:BD:48 Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: 27 Signing time: Tue 01 Jul 2025 08:33:30 +0000 Manifest this update: Tue 01 Jul 2025 08:33:30 +0000 Manifest next update: Tue 08 Jul 2025 08:33:30 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: x5jM00e+0x1tj3qsLlZKsGLIw72guH1/pHM+/xkN3Vo=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: +A23Vf7UDZZ1gLqCLzyRAUce3j4brOUg3a6CYPzeOps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Jul 1 08:33:30 2025 GMT Not After : Jul 8 08:33:30 2025 GMT Subject: CN=68639d5a-0bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:77:1a:59:ec:cd:5c:95:09:3a:4f:f5:fd: 32:1b:9c:5b:34:64:aa:5e:df:e5:a2:59:63:10:ad: 77:ff:f3:ef:be:cd:46:14:5d:02:35:9a:cb:19:18: c3:d6:25:e0:1a:6b:54:7f:08:38:8a:3e:46:96:74: ed:b7:1b:b6:17:3c:43:fa:83:25:d7:2b:12:90:44: 4a:2b:52:cf:9f:96:d5:b6:8e:15:37:51:ce:67:b3: 09:51:e1:6f:c6:6d:72:44:1a:65:60:2a:bc:f0:20: 11:a7:1b:04:e0:ae:c5:5a:ed:6f:eb:c3:7b:1f:a2: 07:d5:57:f1:82:78:f5:46:d3:e0:7a:a8:4b:59:ff: 41:3b:8e:1f:1b:a4:3b:79:25:fb:74:8a:c1:9b:84: 3f:8c:72:2b:c9:4f:56:2c:85:b0:da:db:da:2f:7e: 56:2b:b1:b2:99:9b:6e:6d:3d:4d:42:27:8b:e3:33: e0:99:8a:9f:53:2d:f1:c2:89:49:b0:09:8b:c3:0a: 7f:46:51:7f:a4:ff:d2:79:0a:ba:d8:15:b7:86:d1: d2:59:4c:cb:66:4d:2a:0f:f9:cd:b7:65:60:82:39: 66:c7:0a:7b:a5:71:32:78:be:99:c0:de:c8:1e:34: 25:34:cf:50:69:eb:a2:80:50:58:a9:45:37:24:47: 37:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:A4:10:96:E9:87:D1:06:E4:7F:2C:1A:5F:70:6F:F4:9C:BD:48 X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:70:c1:25:e9:53:60:52:85:8e:c7:50:03:ce:35:9a:91:bb: e3:5c:7d:40:64:ff:48:c0:3b:53:55:82:68:92:f9:31:e7:54: b1:80:2c:6a:e2:0c:79:62:04:79:83:0f:ad:19:c8:be:d7:d6: 09:e1:03:a4:6b:a1:73:06:54:12:d8:12:e2:b5:f5:18:fc:f3: 2b:94:26:00:ee:75:7a:4a:e8:02:82:47:96:9e:22:05:9e:54: a0:41:34:d4:87:0b:32:31:ec:cf:2a:a9:d3:64:2c:89:39:e9: d4:d6:7e:41:b5:87:28:0d:5c:40:52:ae:a1:ab:a1:57:0d:96: dc:a7:7d:99:f2:3d:71:e0:f1:0a:42:c0:0c:79:9d:ab:cb:d2: 88:ba:1f:ad:cf:2e:fa:31:f6:9b:52:d9:cd:ac:59:71:8c:11: 8d:4f:7c:24:d0:ad:ff:b8:c8:96:3d:3e:ad:0b:ce:11:24:92: 0a:53:7a:9d:98:a0:39:22:4a:e8:7f:fa:55:db:2e:3a:48:d1: 1f:96:7b:33:f9:5c:96:cd:29:e5:77:a4:a9:e9:bd:bc:34:b5: 31:a6:e9:ae:9c:7f:90:8d:24:fe:6f:4d:93:e9:57:d9:a2:69: 96:c4:0b:bb:1d:ed:dd:e3:a9:58:5b:81:09:46:98:59:bc:ac: 53:64:08:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENEMzExMC8GA1UEBRMoNjlGRTk3M0I3RUVCRUIwRkY4OUIyOUI5Q0I1QkVCQUJE MEUzMUQ2QjAeFw0yNTA3MDEwODMzMzBaFw0yNTA3MDgwODMzMzBaMBgxFjAUBgNV BAMTDTY4NjM5ZDVhLTBiYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAdHcaWezNXJUJOk/1/TIbnFs0ZKpe3+WiWWMQrXf/8+++zUYUXQI1mssZGMPW JeAaa1R/CDiKPkaWdO23G7YXPEP6gyXXKxKQREorUs+fltW2jhU3Uc5nswlR4W/G bXJEGmVgKrzwIBGnGwTgrsVa7W/rw3sfogfVV/GCePVG0+B6qEtZ/0E7jh8bpDt5 Jft0isGbhD+McivJT1YshbDa29ovflYrsbKZm25tPU1CJ4vjM+CZip9TLfHCiUmw CYvDCn9GUX+k/9J5CrrYFbeG0dJZTMtmTSoP+c23ZWCCOWbHCnulcTJ4vpnA3sge NCU0z1Bp66KAUFipRTckRzcJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUusCkEJbp h9EG5H8sGl9wb/ScvUgwHwYDVR0jBBgwFoAUaf6XO37r6w/4mym5y1vrq9DjHWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0QzL0YwQTY1QzNFMUI2 NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWY2WE8zN3I2d180bXltNXkxdnJxOURqSFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 Q0QzL0YwQTY1QzNFMUI2NjExRjBBMDVDQjUyOUM0RjlBRTAyL2FmNlhPMzdyNndf NG15bTV5MXZycTlEakhXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADhwwSXpU2BShY7HUAPONZqRu+NcfUBk/0jAO1NVgmiS+THnVLGALGri DHliBHmDD60ZyL7X1gnhA6RroXMGVBLYEuK19Rj88yuUJgDudXpK6AKCR5aeIgWe VKBBNNSHCzIx7M8qqdNkLIk56dTWfkG1hygNXEBSrqGroVcNltynfZnyPXHg8QpC wAx5navL0oi6H63PLvox9ptS2c2sWXGMEY1PfCTQrf+4yJY9Pq0LzhEkkgpTep2Y oDkiSuh/+lXbLjpI0R+WezP5XJbNKeV3pKnpvbw0tTGm6a6cf5CNJP5vTZPpV9mi aZbEC7sd7d3jqVhbgQlGmFm8rFNkCDA= -----END CERTIFICATE-----Generated at Wed Jul 2 15:43:46 2025 by rpki-client