$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft File: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json) Hash identifier: eVFZsGP1nreIrvnqkDBDGrXtBHdfgrTWVpuEh/XyUyI= Subject key identifier: 07:00:F7:C8:C6:0F:8A:BC:6B:38:05:E4:F2:EB:CC:D2:5A:A0:52:B7 Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft Manifest number: 0643 Signing time: Wed 02 Jul 2025 22:58:38 +0000 Manifest this update: Wed 02 Jul 2025 22:58:38 +0000 Manifest next update: Wed 09 Jul 2025 22:58:38 +0000 Files and hashes: 1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: OhZEhmqEdxoMBBmLvr+61Sjf1mb7p52JF4+pNBHoJWc=) 2: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: y+RhkfZMGTxRVubK4QV96TYGnjkmbmFAXQyjgVFX8go=) 3: 948A2714980211EB82357D6CC4F9AE02.roa (hash: nUrfHwU2ledrvSpXzdKHdIfP/lVdp7uA8FU8ZIbWtPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Validity Not Before: Jul 2 22:58:38 2025 GMT Not After : Jul 9 22:58:38 2025 GMT Subject: CN=6865b99e-8203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:be:07:35:2b:1c:1f:57:fe:ee:66:6d:a9: 28:fb:d2:36:31:f1:88:40:1a:a3:b3:a4:39:0d:49: a7:85:43:c0:e8:09:1c:12:c7:34:43:45:e4:d4:a8: 04:fd:88:14:4c:dd:9e:98:06:5c:13:4a:77:e7:c5: 1e:9b:2b:07:5d:7a:32:b5:cf:9c:cb:92:9f:5f:b4: 90:d7:28:f9:60:53:f7:5f:64:2f:ef:65:c5:6f:8f: 72:c8:93:3d:e2:49:31:c4:92:8f:b4:0d:9c:47:1b: 32:5e:4b:f7:2d:cc:a4:6e:cb:fa:6c:37:02:78:9b: 9b:2e:08:0c:1a:bc:8f:3a:f6:f3:2d:fd:74:66:49: 12:71:0b:e9:4b:82:f8:03:5e:f6:0c:ab:d1:8f:ce: a9:f3:9d:96:40:65:c8:2c:a7:c4:2d:c1:15:7d:3a: 23:1f:40:e6:73:1b:c7:18:38:de:9a:f9:43:73:1f: 8d:d4:5c:14:0e:92:3e:da:4b:cf:1f:36:40:49:c5: e7:49:f9:cb:0b:23:66:a2:90:61:2c:c3:c1:26:c8: b7:a2:2d:d6:39:73:f5:89:57:1b:2f:77:14:1b:e6: e6:b0:a1:a8:a4:2b:1c:6e:26:35:4f:b9:5f:5e:78: 6e:42:be:e8:22:f7:b4:20:43:ff:42:0a:30:7c:ba: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:F7:C8:C6:0F:8A:BC:6B:38:05:E4:F2:EB:CC:D2:5A:A0:52:B7 X509v3 Authority Key Identifier: keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ff:fd:46:30:3c:e8:1e:0b:b1:a2:b6:fe:a7:86:35:8a:4f: 17:f7:6c:54:43:24:78:8d:54:1b:c4:79:2d:52:be:b9:01:5e: 3f:57:42:24:fb:81:83:a7:9c:81:26:d0:62:6e:91:48:ac:64: 23:41:cd:70:52:38:b5:01:f1:b4:3d:66:38:f3:80:a7:32:b1: 2e:7b:d2:1b:1e:84:8f:5f:e9:41:21:d6:6a:0e:cf:80:c9:ee: 92:f1:55:6f:fd:d4:5a:2d:06:d4:45:ca:64:c7:00:cb:87:54: 0d:0f:81:92:46:0b:1a:15:6f:25:68:9e:12:d3:32:1c:d9:da: 0e:49:83:20:f3:3e:47:82:d8:23:7d:83:96:0b:2b:b0:86:7c: b3:0e:a6:1d:60:1c:f0:ca:a4:de:00:f1:ea:1a:f9:91:3e:0c: 7f:73:95:ed:ac:a1:ff:5b:e9:b3:82:d8:c5:21:ff:75:4f:58: f2:a6:2a:88:b4:13:85:69:00:1e:d2:e9:42:8b:2b:3d:e2:4e: ff:b9:02:0f:b8:79:4e:ce:e3:10:f9:86:27:f2:b3:76:e8:d0: 5c:71:d2:8e:62:23:c8:ee:c6:0e:1d:c8:13:fb:da:27:ab:97: e3:c3:92:45:cc:24:16:f2:f3:66:a5:c0:09:2d:3d:6a:49:e8: 25:0d:ac:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG NzhDNjhGRDEwHhcNMjUwNzAyMjI1ODM4WhcNMjUwNzA5MjI1ODM4WjAYMRYwFAYD VQQDEw02ODY1Yjk5ZS04MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Me+BzUrHB9X/u5mbako+9I2MfGIQBqjs6Q5DUmnhUPA6AkcEsc0Q0Xk1KgE /YgUTN2emAZcE0p358UemysHXXoytc+cy5KfX7SQ1yj5YFP3X2Qv72XFb49yyJM9 4kkxxJKPtA2cRxsyXkv3Lcykbsv6bDcCeJubLggMGryPOvbzLf10ZkkScQvpS4L4 A172DKvRj86p852WQGXILKfELcEVfTojH0DmcxvHGDjemvlDcx+N1FwUDpI+2kvP HzZAScXnSfnLCyNmopBhLMPBJsi3oi3WOXP1iVcbL3cUG+bmsKGopCscbiY1T7lf XnhuQr7oIve0IEP/QgowfLpVyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcA98jG D4q8azgF5PLrzNJaoFK3MB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4 MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUJGQi9ERTJERTY0Njk4MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5 OXBPVzVlRVVMTWYzakdqOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI//1GMDzoHguxorb+p4Y1ik8X92xUQyR4jVQbxHktUr65AV4/V0Ik +4GDp5yBJtBibpFIrGQjQc1wUji1AfG0PWY484CnMrEue9IbHoSPX+lBIdZqDs+A ye6S8VVv/dRaLQbURcpkxwDLh1QND4GSRgsaFW8laJ4S0zIc2doOSYMg8z5Hgtgj fYOWCyuwhnyzDqYdYBzwyqTeAPHqGvmRPgx/c5XtrKH/W+mzgtjFIf91T1jypiqI tBOFaQAe0ulCiys94k7/uQIPuHlOzuMQ+YYn8rN26NBccdKOYiPI7sYOHcgT+9on q5fjw5JFzCQW8vNmpcAJLT1qSeglDawK -----END CERTIFICATE-----Generated at Thu Jul 3 08:42:39 2025 by rpki-client