$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json) Hash identifier: dz7HwrFxhVoBJeX0zn7omPCs8yq/zRn5uJsdXCZoYVc= Subject key identifier: F9:56:83:7B:D3:3E:D1:88:4A:08:6E:7E:65:C4:4B:BD:3E:CB:F2:1F Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft Manifest number: 03C5 Signing time: Tue 01 Jul 2025 01:13:45 +0000 Manifest this update: Tue 01 Jul 2025 01:13:44 +0000 Manifest next update: Tue 08 Jul 2025 01:13:44 +0000 Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: +kggxwhkpCho5sQU4uQQ7D2+94xFhCT2VM0v2g3NmUY=) 2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8Epzk8V6Z85r/XJDHr0k0X83+N9uAww9RtIo3M+lRdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Validity Not Before: Jul 1 01:13:44 2025 GMT Not After : Jul 8 01:13:44 2025 GMT Subject: CN=68633649-c9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:1a:14:18:96:0c:a5:22:c6:8f:f9:8d:56: 30:0f:ba:41:e6:28:81:98:72:ee:6f:dd:65:ff:dc: f9:65:19:c3:c0:9c:a1:00:89:8a:eb:0e:33:a7:4b: cf:3c:12:af:25:fd:1e:49:7f:e6:ad:76:b1:0b:dc: 49:b0:4c:03:45:47:e6:6e:6b:55:65:fd:53:f0:0d: bc:88:75:5e:c2:d1:d5:81:16:79:79:75:90:a4:3a: 17:d4:fe:a8:fe:c6:db:15:aa:f1:97:d9:40:cf:68: 82:1c:d9:b0:b9:39:b4:31:6d:34:af:72:62:d3:77: 05:3b:2f:84:75:f6:34:d4:56:be:4f:b5:53:6c:ab: 36:e7:62:bb:8b:7b:b1:4a:66:17:cc:d4:e4:bf:59: 10:48:2b:d4:5b:bc:d2:17:fc:10:b5:dd:77:99:d6: fd:59:c0:10:b7:eb:59:aa:3b:99:74:10:34:0a:55: d6:92:21:6b:32:ad:69:72:cb:9e:cc:88:9d:d9:c8: ea:a5:82:55:eb:e8:b8:d6:7b:2f:12:0c:75:7b:f9: b9:3b:f4:e0:f6:e5:ee:f2:3a:8f:c4:60:0b:6d:14: 28:03:df:11:d0:c6:78:24:77:89:c0:52:46:82:2f: 9f:f0:8e:e1:ec:be:ea:83:e6:3f:63:67:11:cb:c2: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:83:7B:D3:3E:D1:88:4A:08:6E:7E:65:C4:4B:BD:3E:CB:F2:1F X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:84:59:2b:6e:10:e7:63:5f:09:09:b3:82:9d:67:cc:92:23: 8f:e4:a1:15:d2:8f:98:16:78:96:a8:7c:a1:50:d8:f5:68:fe: e0:d6:9c:b9:d8:7a:bb:67:2e:2d:bf:33:50:b8:2e:9f:78:a4: e5:58:80:00:3a:16:f7:78:ed:6e:2b:29:d1:5d:ea:f2:59:33: 8c:d0:a4:11:bf:30:ca:a2:f1:cb:d7:3c:2c:28:e4:b9:a4:38: b7:54:0c:b1:a8:83:7b:f6:71:12:a2:c7:85:4a:ac:4d:1a:89: 58:0e:aa:06:30:a3:e5:42:06:be:8b:b2:b1:0d:b4:cd:93:33: 37:94:30:14:0c:b2:ef:9a:56:0f:dd:f0:74:3e:95:68:6b:2e: 78:e7:c5:f3:ac:fb:38:61:de:9c:1b:8f:8e:28:e3:a7:f6:26: f3:5f:97:83:e3:c2:2b:28:73:8c:70:2c:d7:04:c4:34:f5:a7: 42:4c:f6:8a:bb:25:04:b4:b0:6c:77:02:da:ac:fc:31:28:bb: e0:90:90:9f:82:db:f5:57:8d:c9:da:fe:59:50:55:be:34:b4: 38:4f:2c:44:a4:64:18:40:90:38:7e:a4:1b:76:ca:bb:03:21: 5f:8c:ab:e1:6f:21:ed:88:c3:d2:6e:ff:01:35:8d:ab:02:ca: 69:ca:ad:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjUwNzAxMDExMzQ0WhcNMjUwNzA4MDExMzQ0WjAYMRYwFAYD VQQDEw02ODYzMzY0OS1jOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFIaFBiWDKUixo/5jVYwD7pB5iiBmHLub91l/9z5ZRnDwJyhAImK6w4zp0vP PBKvJf0eSX/mrXaxC9xJsEwDRUfmbmtVZf1T8A28iHVewtHVgRZ5eXWQpDoX1P6o /sbbFarxl9lAz2iCHNmwuTm0MW00r3Ji03cFOy+EdfY01Fa+T7VTbKs252K7i3ux SmYXzNTkv1kQSCvUW7zSF/wQtd13mdb9WcAQt+tZqjuZdBA0ClXWkiFrMq1pcsue zIid2cjqpYJV6+i41nsvEgx1e/m5O/Tg9uXu8jqPxGALbRQoA98R0MZ4JHeJwFJG gi+f8I7h7L7qg+Y/Y2cRy8JI0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlWg3vT PtGISghufmXES70+y/IfMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5 UElYVEdBdHljeTZxdDYtNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9hFkrbhDnY18JCbOCnWfMkiOP5KEV0o+YFniWqHyhUNj1aP7g1py5 2Hq7Zy4tvzNQuC6feKTlWIAAOhb3eO1uKynRXeryWTOM0KQRvzDKovHL1zwsKOS5 pDi3VAyxqIN79nESoseFSqxNGolYDqoGMKPlQga+i7KxDbTNkzM3lDAUDLLvmlYP 3fB0PpVoay5458XzrPs4Yd6cG4+OKOOn9ibzX5eD48IrKHOMcCzXBMQ09adCTPaK uyUEtLBsdwLarPwxKLvgkJCfgtv1V43J2v5ZUFW+NLQ4TyxEpGQYQJA4fqQbdsq7 AyFfjKvhbyHtiMPSbv8BNY2rAsppyq0g -----END CERTIFICATE-----Generated at Wed Jul 2 19:35:46 2025 by rpki-client