$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: C8ARreonRnFtf/Oe9P4u5SFAKT59SjTla8bALM+7SuM= Subject key identifier: 49:1C:92:F9:D3:99:F3:EE:E2:08:1A:6E:B7:CA:7E:4A:FF:42:CD:52 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 66 Signing time: Thu 03 Jul 2025 07:15:08 +0000 Manifest this update: Thu 03 Jul 2025 07:15:08 +0000 Manifest next update: Thu 10 Jul 2025 07:15:08 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: E87In1LxzwKIf+AhN/qiDPCC70sS7lI8ZhXB8UDYt+Y=) 2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Jul 3 07:15:08 2025 GMT Not After : Jul 10 07:15:08 2025 GMT Subject: CN=68662dfc-15f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:f4:a9:1a:8f:43:c3:85:74:43:f1:d1:6d: 86:21:09:77:29:e2:23:a0:c8:4d:1e:9f:f2:40:a2: 0b:b0:ff:bf:22:54:ce:8c:c6:cc:dd:03:58:3d:e1: 1c:54:c8:c0:72:ae:d6:be:ad:04:bb:91:f8:1d:d5: ce:fd:f5:c4:a5:98:0d:9b:8c:a2:98:c9:2b:c6:6b: 98:6c:ef:f2:21:c0:87:70:0a:37:cd:b7:f4:d5:01: 0b:f2:60:51:86:00:6c:c5:b9:17:6f:04:88:f7:df: b8:b0:cc:1f:13:09:2a:bc:d4:64:0d:bc:f6:21:fb: ff:35:0a:ed:e1:ba:b3:50:4b:8d:91:69:ad:8f:88: 7d:17:18:6d:52:78:e8:81:b0:c3:af:a8:52:8f:3c: a6:50:23:94:d8:e7:d4:74:5d:a0:86:63:76:00:38: c5:bf:d8:63:45:40:e3:9a:7f:ee:6e:c0:1b:4f:dd: 3e:af:97:79:af:9c:3d:32:bd:20:1e:6d:59:ae:e1: f1:0d:f8:69:06:c6:cd:26:5e:9f:5a:40:fb:ed:ec: 21:9f:83:30:99:3b:92:56:1c:d1:99:71:6d:36:b6: 70:14:f4:d7:9c:a3:33:01:38:a5:78:87:c5:27:03: 46:ce:2f:13:6f:85:61:ee:e0:19:d7:d3:ee:6b:fc: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1C:92:F9:D3:99:F3:EE:E2:08:1A:6E:B7:CA:7E:4A:FF:42:CD:52 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0d:f3:b8:eb:6d:72:42:e2:c6:46:46:32:50:02:45:fb:cb: 19:5e:8a:72:cd:59:f0:e0:77:b8:5b:f8:0e:ae:72:93:e8:1c: 04:6b:60:f1:40:bd:b8:2e:af:3d:8c:40:c7:8e:3f:91:9a:8a: 8c:7f:88:34:f8:c1:94:fb:83:e4:51:4c:23:3b:3f:95:ba:1d: 0c:fa:ee:57:c3:5a:5b:0a:95:35:5c:91:c6:29:90:33:55:2e: 26:0f:48:1d:1b:98:bd:02:20:db:8e:d3:dd:f6:6a:01:aa:5a: 2d:ff:78:fd:68:c7:a4:84:44:79:fa:f7:3d:ac:12:7a:92:b6: 86:eb:e2:9c:ad:e9:23:7c:80:30:ee:eb:99:28:63:ed:e0:c7: 3c:5b:2a:1d:8b:5d:05:47:87:fc:9f:d6:d0:0b:9c:fa:40:7b: f7:63:60:38:dd:0f:75:3e:cd:ff:c5:f1:fd:64:a8:26:e3:88: 10:5f:e2:94:e8:4f:2c:70:01:f2:5f:73:28:55:b3:41:af:cd: cc:30:49:0d:9e:28:27:5c:68:54:59:62:85:24:6d:f8:5d:5f: ec:e7:b9:3a:e7:7e:8b:c8:f6:7e:0f:26:50:5f:51:b2:0a:8e: ea:0e:c5:f8:c5:ae:44:4d:2b:31:51:34:ef:ea:f9:de:a7:6c: 5a:19:b7:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEYzNDExMC8GA1UEBRMoNEIzMTA4QkM1NzU4ODQzRDYzREZGNkZDNjQwOTdGMkIx NjQ0Q0I4QTAeFw0yNTA3MDMwNzE1MDhaFw0yNTA3MTAwNzE1MDhaMBgxFjAUBgNV BAMTDTY4NjYyZGZjLTE1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMkPSpGo9Dw4V0Q/HRbYYhCXcp4iOgyE0en/JAoguw/78iVM6MxszdA1g94RxU yMByrta+rQS7kfgd1c799cSlmA2bjKKYySvGa5hs7/IhwIdwCjfNt/TVAQvyYFGG AGzFuRdvBIj337iwzB8TCSq81GQNvPYh+/81Cu3hurNQS42Raa2PiH0XGG1SeOiB sMOvqFKPPKZQI5TY59R0XaCGY3YAOMW/2GNFQOOaf+5uwBtP3T6vl3mvnD0yvSAe bVmu4fEN+GkGxs0mXp9aQPvt7CGfgzCZO5JWHNGZcW02tnAU9NecozMBOKV4h8Un A0bOLxNvhWHu4BnX0+5r/OHZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSRyS+dOZ 8+7iCBput8p+Sv9CzVIwHwYDVR0jBBgwFoAUSzEIvFdYhD1j3/b8ZAl/KxZEy4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RjM0LzREMjJFRUUwQkRF OTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3pFSXZGZFloRDFqM19iOFpBbF9LeFpFeTRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RjM0LzREMjJFRUUwQkRFOTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQx ajNfYjhaQWxfS3haRXk0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4N87jrbXJC4sZGRjJQAkX7yxleinLNWfDgd7hb+A6ucpPoHARrYPFA vbgurz2MQMeOP5Gaiox/iDT4wZT7g+RRTCM7P5W6HQz67lfDWlsKlTVckcYpkDNV LiYPSB0bmL0CINuO0932agGqWi3/eP1ox6SERHn69z2sEnqStobr4pyt6SN8gDDu 65koY+3gxzxbKh2LXQVHh/yf1tALnPpAe/djYDjdD3U+zf/F8f1kqCbjiBBf4pTo TyxwAfJfcyhVs0GvzcwwSQ2eKCdcaFRZYoUkbfhdX+znuTrnfovI9n4PJlBfUbIK juoOxfjFrkRNKzFRNO/q+d6nbFoZt1I= -----END CERTIFICATE-----Generated at Fri Jul 4 15:07:46 2025 by rpki-client