$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json) Hash identifier: REDPkfYJ8murZDGuaAhoa7abLaiqXvC06PNg8BxEVY0= Subject key identifier: B7:C0:68:C1:BE:5C:6D:F2:9C:22:BF:23:C1:6E:5E:19:06:E4:AC:22 Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Certificate serial: 321E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft Manifest number: 320C Signing time: Wed 02 Jul 2025 15:31:39 +0000 Manifest this update: Wed 02 Jul 2025 15:31:39 +0000 Manifest next update: Wed 09 Jul 2025 15:31:39 +0000 Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: 9SoRiP4HbmE5yWUvH/NB2oxkAkVDtG9u9OHTcUNZ9/Q=) 2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12830 (0x321e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0 Validity Not Before: Jul 2 15:31:39 2025 GMT Not After : Jul 9 15:31:39 2025 GMT Subject: CN=686550db-0dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:56:68:33:8e:5a:ad:7b:f4:d8:59:39:14: 05:c2:aa:85:48:a3:7f:47:18:97:41:73:df:73:e8: 7e:7a:82:a7:f1:9d:bc:e2:4c:4d:16:4a:f1:5c:c8: 99:1a:c3:0c:6e:ca:04:86:40:60:7c:4d:38:7f:a0: e3:3c:95:b4:a7:8a:52:d1:ae:53:e3:82:66:5a:70: 15:00:28:91:ed:10:7b:81:e9:14:c6:54:a6:a1:ef: c1:b6:45:30:75:a2:c7:6f:e2:a3:2f:a6:6b:30:3f: 6d:65:44:e6:ba:65:f7:ba:4e:d3:fd:6b:5a:7b:42: ed:fd:d6:e0:f4:aa:17:a0:63:44:f6:2c:dc:27:e8: 64:81:ac:9d:59:d9:c2:ae:8c:4f:7d:9f:ff:49:eb: 8c:ea:9f:73:43:4b:66:46:86:32:fc:a4:f0:bf:5d: 8b:ed:9f:e5:80:78:57:45:9e:6e:55:f7:3a:de:c3: 47:20:d4:61:dc:5d:c3:b8:fd:47:90:25:08:d2:04: 58:84:67:ed:47:77:ad:b6:b8:42:2f:0b:b0:56:bd: cf:d4:53:84:38:3c:b2:a1:99:1a:98:d9:48:73:72: f5:fa:9d:5c:74:1c:bf:8c:bb:ac:7f:e8:61:db:bf: aa:f1:ed:87:07:4c:5d:0b:77:18:e7:54:73:e4:4b: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:68:C1:BE:5C:6D:F2:9C:22:BF:23:C1:6E:5E:19:06:E4:AC:22 X509v3 Authority Key Identifier: keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9b:66:52:48:f6:09:54:77:c1:42:54:37:44:03:9d:de:1b: 4b:d0:60:7d:45:ab:3f:5e:cf:9b:66:75:5e:fe:5e:6f:b1:82: 0d:33:17:16:43:79:84:9e:81:6f:c2:aa:d7:f4:c5:87:0f:ff: d3:0f:2d:f6:34:2c:c6:9a:9b:5c:de:9d:5d:94:ed:a3:bb:a8: 24:75:d1:bc:a8:f0:7a:e8:c6:df:a9:cb:1d:ad:1a:2c:18:09: b2:42:70:78:09:e1:04:05:a4:7e:12:16:90:ee:dd:a4:c9:90: 4c:b0:b8:3b:32:53:25:42:a1:27:27:c2:a4:40:96:7c:1d:90: c6:14:d0:03:de:e1:83:5b:f4:67:cf:56:1e:0d:d6:88:78:44: 41:f4:78:18:06:b9:25:a2:94:05:1f:df:93:e6:69:ca:25:3c: b3:c1:74:86:e5:3b:35:d2:b4:9f:9b:86:e3:32:80:3b:b7:1e: 1d:82:2b:c9:fe:af:a6:7b:c9:48:f1:36:33:38:57:20:66:ca: 72:04:3f:9e:b3:28:9a:8f:5a:20:b1:51:55:a1:0c:9c:b2:f8: 44:45:74:43:c3:70:17:bf:80:9e:16:26:9d:00:04:31:0b:04: 5c:b9:23:af:2c:cc:9d:7b:e1:36:06:b7:4e:a1:26:1d:a8:29: 0b:fc:e9:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEMDYxMTAvBgNVBAUTKEQzMTU2RkY1MzhBMEQzRjUzOTczODYxRkFENjQzNkZC MUU1RkU4QzAwHhcNMjUwNzAyMTUzMTM5WhcNMjUwNzA5MTUzMTM5WjAYMRYwFAYD VQQDEw02ODY1NTBkYi0wZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9VWaDOOWq179NhZORQFwqqFSKN/RxiXQXPfc+h+eoKn8Z284kxNFkrxXMiZ GsMMbsoEhkBgfE04f6DjPJW0p4pS0a5T44JmWnAVACiR7RB7gekUxlSmoe/BtkUw daLHb+KjL6ZrMD9tZUTmumX3uk7T/Wtae0Lt/dbg9KoXoGNE9izcJ+hkgaydWdnC roxPfZ//SeuM6p9zQ0tmRoYy/KTwv12L7Z/lgHhXRZ5uVfc63sNHINRh3F3DuP1H kCUI0gRYhGftR3ettrhCLwuwVr3P1FOEODyyoZkamNlIc3L1+p1cdBy/jLusf+hh 27+q8e2HB0xdC3cY51Rz5EtHaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfAaMG+ XG3ynCK/I8FuXhkG5KwiMB8GA1UdIwQYMBaAFNMVb/U4oNP1OXOGH61kNvseX+jA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQwNi8xQ0VDQjE4QUEw MDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBfVTVjNFlmcldRMi14NWY2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4VnY5VGlnMF9VNWM0WWZyV1EyLXg1ZjZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkQwNi8xQ0VDQjE4QUEwMDQxMUUyQTIzODY1RTQyRjVBNzc1NC8weFZ2OVRpZzBf VTVjNFlmcldRMi14NWY2TUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkm2ZSSPYJVHfBQlQ3RAOd3htL0GB9Ras/Xs+bZnVe/l5vsYINMxcW Q3mEnoFvwqrX9MWHD//TDy32NCzGmptc3p1dlO2ju6gkddG8qPB66MbfqcsdrRos GAmyQnB4CeEEBaR+EhaQ7t2kyZBMsLg7MlMlQqEnJ8KkQJZ8HZDGFNAD3uGDW/Rn z1YeDdaIeERB9HgYBrklopQFH9+T5mnKJTyzwXSG5Ts10rSfm4bjMoA7tx4dgivJ /q+me8lI8TYzOFcgZspyBD+esyiaj1ogsVFVoQycsvhERXRDw3AXv4CeFiadAAQx CwRcuSOvLMyde+E2BrdOoSYdqCkL/OkR -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:48 2025 by rpki-client