$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: CVirT3jfGSwOsTsbwPIwJ/MJ3L6xGQSIu+kMAkTZ+L0= Subject key identifier: 64:F3:C5:DF:6B:6C:7C:11:CE:67:6D:58:3C:A4:C7:DB:4E:92:0F:C7 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 01F2 Signing time: Thu 03 Jul 2025 02:35:05 +0000 Manifest this update: Thu 03 Jul 2025 02:35:05 +0000 Manifest next update: Thu 10 Jul 2025 02:35:05 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: ymImvKhcFUwUVlA0rDwSdXQL7NCbog3ybQf3JqDJXQY=) 2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: BISS5CmxNxvmt9rFH6DiKF6LgvgQpzJ1qyGwOCZsmrY=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: gXomgC3UWF4hRBWpPOIJ1KbjovqaJl+GP7rjTy7IiYk=) 4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: /sVqx8q3knVsrGKYvA1MUovYNq+EQPYvWXQlJdzVZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Jul 3 02:35:05 2025 GMT Not After : Jul 10 02:35:05 2025 GMT Subject: CN=6865ec59-160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1a:ab:47:66:4c:fb:01:30:de:2c:28:ef:2d: f1:e6:2e:41:71:58:58:76:96:9c:30:c8:39:1b:b5: 23:ca:3a:92:a0:b0:9e:01:34:17:af:b2:f6:3b:2e: c5:df:ad:64:be:32:aa:53:61:19:32:50:ed:0c:10: b1:0e:3f:82:10:f8:f2:a0:be:71:39:8b:48:1f:3e: 31:6a:1c:e2:19:2d:33:31:56:4c:ae:bd:0a:9e:28: 33:32:e6:07:68:f9:c5:9d:28:0a:d9:81:1a:44:d9: b1:e7:bc:cf:54:19:83:10:86:c7:69:cf:b0:39:fd: 9e:23:22:66:6a:48:ad:13:4d:49:5e:91:84:5d:7c: 75:53:44:32:91:fc:f9:33:65:2c:de:ff:a8:3b:de: 06:e9:57:ed:d0:95:4d:e6:83:91:18:f0:8d:5c:0a: bc:7b:99:34:62:bf:23:d8:fd:15:17:69:d6:75:4b: 5b:91:b8:c4:28:dd:db:9a:d2:c1:96:3e:4f:1b:84: 8f:ee:3a:75:38:e2:83:c9:e4:66:5c:24:ae:3d:af: b5:5d:db:6b:ec:a1:de:26:9e:1b:f2:80:a4:e6:08: c9:19:6f:34:2e:f4:3c:ea:a2:f2:f7:35:fa:5b:cf: 73:93:5b:d0:e6:37:f7:1b:db:ea:3b:bf:11:15:2e: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F3:C5:DF:6B:6C:7C:11:CE:67:6D:58:3C:A4:C7:DB:4E:92:0F:C7 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d7:3f:b7:e9:7d:03:e4:0f:43:44:7e:ff:e1:89:92:e2:87: 56:52:85:20:f1:28:1b:07:cf:4f:03:b5:48:a7:7d:47:88:e9: 41:95:91:8a:78:5b:7a:10:c2:0b:5c:ec:db:c4:af:70:81:8d: d9:07:a0:60:68:b9:71:b1:83:d7:cd:4b:b4:e5:58:91:9d:e8: c6:4a:f0:ab:a4:5e:67:cd:e4:c7:16:50:7a:cf:51:f5:99:f4: 5f:f9:36:df:b1:23:5c:b2:f5:ba:e5:bd:b3:a5:25:d1:01:03: 37:16:5d:54:82:14:0b:7f:c5:17:4b:68:3f:4e:21:65:73:76: 9a:62:b6:61:36:10:0b:7a:06:d0:3d:dd:8f:3f:5b:2a:2a:51: 18:db:45:f4:5f:8c:83:d8:ad:9f:a4:00:8b:82:66:c7:60:d8: 30:fa:b3:1e:cd:29:c2:b6:13:5b:4e:d7:b3:55:8d:18:15:79: 15:b0:b6:5f:47:26:e5:b2:0a:93:f1:7c:d5:7f:b4:a8:8d:6b: f0:74:b5:f8:07:c1:aa:9a:57:22:06:d1:f7:22:1b:fd:59:89: 17:be:82:45:a1:5f:22:94:4e:e1:e8:1e:29:c5:3e:d7:4d:6f: 9f:27:fd:3c:eb:6d:c1:0c:4f:1e:dd:4a:10:98:fb:92:59:b1: a1:5a:ca:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjUwNzAzMDIzNTA1WhcNMjUwNzEwMDIzNTA1WjAYMRYwFAYD VQQDEw02ODY1ZWM1OS0xNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BqrR2ZM+wEw3iwo7y3x5i5BcVhYdpacMMg5G7UjyjqSoLCeATQXr7L2Oy7F 361kvjKqU2EZMlDtDBCxDj+CEPjyoL5xOYtIHz4xahziGS0zMVZMrr0KnigzMuYH aPnFnSgK2YEaRNmx57zPVBmDEIbHac+wOf2eIyJmakitE01JXpGEXXx1U0Qykfz5 M2Us3v+oO94G6Vft0JVN5oORGPCNXAq8e5k0Yr8j2P0VF2nWdUtbkbjEKN3bmtLB lj5PG4SP7jp1OOKDyeRmXCSuPa+1Xdtr7KHeJp4b8oCk5gjJGW80LvQ86qLy9zX6 W89zk1vQ5jf3G9vqO78RFS53+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTzxd9r bHwRzmdtWDykx9tOkg/HMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt1z+36X0D5A9DRH7/4YmS4odWUoUg8SgbB89PA7VIp31HiOlBlZGK eFt6EMILXOzbxK9wgY3ZB6BgaLlxsYPXzUu05ViRnejGSvCrpF5nzeTHFlB6z1H1 mfRf+TbfsSNcsvW65b2zpSXRAQM3Fl1UghQLf8UXS2g/TiFlc3aaYrZhNhALegbQ Pd2PP1sqKlEY20X0X4yD2K2fpACLgmbHYNgw+rMezSnCthNbTtezVY0YFXkVsLZf RyblsgqT8XzVf7SojWvwdLX4B8GqmlciBtH3Ihv9WYkXvoJFoV8ilE7h6B4pxT7X TW+fJ/08623BDE8e3UoQmPuSWbGhWsqC -----END CERTIFICATE-----Generated at Thu Jul 3 17:40:54 2025 by rpki-client