$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft File: erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json) Hash identifier: ckP0r4iiTjWtCkJtJk9rruqs7y68TYc7PGD1YZ2yNXs= Subject key identifier: 02:E8:31:01:9C:63:B8:E0:A0:D0:B1:CB:A8:C3:A9:2C:46:C2:E6:B4 Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC Certificate issuer: /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft Manifest number: 3A Signing time: Tue 01 Jul 2025 08:22:08 +0000 Manifest this update: Tue 01 Jul 2025 08:22:08 +0000 Manifest next update: Tue 08 Jul 2025 08:22:08 +0000 Files and hashes: 1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: Lj9plS4SmuIhjSQzYhJgeVJoHORDFHc5tmRyZ7kKngM=) 2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC Validity Not Before: Jul 1 08:22:08 2025 GMT Not After : Jul 8 08:22:08 2025 GMT Subject: CN=68639ab0-faac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:46:9e:f6:9d:ab:35:29:06:71:04:92:81: 61:a1:1d:87:6d:b7:ed:b6:6f:b1:e2:fa:54:46:3a: da:43:b3:b8:5f:e9:1c:c6:6f:58:0c:d3:f9:63:a4: 2f:4b:31:30:c9:87:7f:ad:f1:18:89:b0:7c:28:74: 85:28:59:e7:ff:0c:c3:a3:b5:84:3a:fe:2d:49:d5: 87:01:79:97:d4:6e:1a:cc:46:87:68:a6:c8:e9:a7: 19:9e:e1:cc:01:47:6d:4f:fd:97:69:14:7d:c1:e1: 47:a1:49:48:01:79:6a:d7:32:74:92:17:a5:f2:82: 59:f0:d3:6f:7a:4d:ed:16:b7:38:49:e1:bd:0b:c2: 1e:5c:18:aa:99:e8:22:1b:4f:e2:f6:fa:64:f1:c9: 0d:67:82:64:65:c0:c1:69:87:47:e8:d6:df:77:43: 93:ee:75:4f:f3:19:c7:c7:75:cd:59:ea:f0:13:24: bf:fd:15:da:34:9e:9d:48:76:95:51:75:76:c9:9f: e9:d0:f6:4d:28:fc:f2:b0:78:70:df:be:e5:86:d6: 3f:c0:5d:1a:a1:20:7b:52:f4:de:fa:6a:10:d0:ef: ea:56:c4:e5:2a:22:cb:61:ec:e7:a2:2e:0b:5b:da: cd:6a:77:f2:97:04:77:ca:d4:35:e7:18:c1:ed:52: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:31:01:9C:63:B8:E0:A0:D0:B1:CB:A8:C3:A9:2C:46:C2:E6:B4 X509v3 Authority Key Identifier: keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:af:98:60:46:89:3c:8b:33:e5:1b:19:3f:3d:87:a0:6f:20: 7c:05:a0:eb:92:63:43:da:fd:fe:a0:41:5c:10:48:f4:4c:01: 10:c6:56:72:12:c7:b6:b7:e1:04:0a:af:79:52:2e:5c:dc:54: 36:1e:47:94:63:4f:cc:ce:87:02:32:4d:5d:c5:91:3f:03:09: 61:64:67:b7:af:00:d9:f7:7c:c5:46:a9:c5:ab:9e:c6:01:84: ed:be:b7:fc:a1:09:e8:36:15:a1:78:c9:e3:6c:3a:28:38:fb: 8f:6d:cc:46:04:33:cf:db:87:63:10:d2:03:48:78:5d:fc:c2: cb:14:b8:57:f2:7b:75:6f:42:b3:d5:4a:bb:c7:96:2f:45:d8: bf:13:35:85:d6:0c:13:95:65:bd:32:e2:51:bd:07:90:a5:41: 53:41:df:06:3b:44:4f:b3:ac:35:40:32:64:dd:d2:b0:86:ab: b4:86:1d:22:88:08:82:87:a4:1a:f6:7e:14:d7:16:94:72:6a: 23:d7:8a:12:bf:ea:68:63:17:da:fc:f3:87:8c:3e:32:bd:bc: 33:b0:0b:0d:0b:5c:bb:e1:12:61:4d:04:4d:9a:2e:3c:9e:23: a2:1a:d5:15:06:1b:7f:f4:15:ea:7c:02:0d:64:ac:be:7f:0a: b3:59:8c:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzI0NDExMC8GA1UEBRMoN0FCQkEwQUQ5RUM4RUQ2NTVFRkM3OTk1N0QwMzE1RUFG Nzg1RkFFQzAeFw0yNTA3MDEwODIyMDhaFw0yNTA3MDgwODIyMDhaMBgxFjAUBgNV BAMTDTY4NjM5YWIwLWZhYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFekae9p2rNSkGcQSSgWGhHYdtt+22b7Hi+lRGOtpDs7hf6RzGb1gM0/ljpC9L MTDJh3+t8RiJsHwodIUoWef/DMOjtYQ6/i1J1YcBeZfUbhrMRodopsjppxme4cwB R21P/ZdpFH3B4UehSUgBeWrXMnSSF6Xyglnw0296Te0WtzhJ4b0Lwh5cGKqZ6CIb T+L2+mTxyQ1ngmRlwMFph0fo1t93Q5PudU/zGcfHdc1Z6vATJL/9Fdo0np1IdpVR dXbJn+nQ9k0o/PKweHDfvuWG1j/AXRqhIHtS9N76ahDQ7+pWxOUqIsth7OeiLgtb 2s1qd/KXBHfK1DXnGMHtUlMtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAugxAZxj uOCg0LHLqMOpLEbC5rQwHwYDVR0jBBgwFoAUerugrZ7I7WVe/HmVfQMV6veF+uww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MjQ0L0YyRjEyM0Y4MDND MzExRjA4OEY0NkQxRUM0RjlBRTAyL2VydWdyWjdJN1dWZV9IbVZmUU1WNnZlRi11 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXJ1Z3JaN0k3V1ZlX0htVmZRTVY2dmVGLXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MjQ0L0YyRjEyM0Y4MDNDMzExRjA4OEY0NkQxRUM0RjlBRTAyL2VydWdyWjdJN1dW ZV9IbVZmUU1WNnZlRi11dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWvmGBGiTyLM+UbGT89h6BvIHwFoOuSY0Pa/f6gQVwQSPRMARDGVnIS x7a34QQKr3lSLlzcVDYeR5RjT8zOhwIyTV3FkT8DCWFkZ7evANn3fMVGqcWrnsYB hO2+t/yhCeg2FaF4yeNsOig4+49tzEYEM8/bh2MQ0gNIeF38wssUuFfye3VvQrPV SrvHli9F2L8TNYXWDBOVZb0y4lG9B5ClQVNB3wY7RE+zrDVAMmTd0rCGq7SGHSKI CIKHpBr2fhTXFpRyaiPXihK/6mhjF9r884eMPjK9vDOwCw0LXLvhEmFNBE2aLjye I6Ia1RUGG3/0Fep8Ag1krL5/CrNZjJY= -----END CERTIFICATE-----Generated at Tue Jul 1 21:48:04 2025 by rpki-client