$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: QiLqC0FV+rFT1bvbnx6lEgIFCNemmBI263Cbl1L+lLk= Subject key identifier: 68:C8:F0:99:B6:AC:C0:6B:DB:DA:15:55:9B:CA:7B:65:08:1B:5E:85 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 34D0 Signing time: Wed 02 Jul 2025 14:22:00 +0000 Manifest this update: Wed 02 Jul 2025 14:22:00 +0000 Manifest next update: Wed 09 Jul 2025 14:22:00 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: gMvZjfrtF+2qcvhZXd9cfAjvlhjhKHlo+op2fwyhQKc=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: jwyDhO2AKzS24hZPtz7MMlmo1w5QqA8KZe3aiJpN8lw=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: 7hb8peyViLHs7pUvHbdg5I6QacKj8JDlnsxAKAU1Zc0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: N+3adJFbEo0riTp5e2KIvLZDqSsoREj9ZabeHIbeUYU=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: rL42c7NaJK9wVJaWnoYtY42z+plXzLKrOFuOd8KULJk=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: rYt/OYL4s4AzpyxAI0oL4uj5yn2ElNGDXYhVCXgdkvc=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: dfbgOKL2skBJFvI1csPtQ7F5lFQy+N9pqsOyvY+l0KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Jul 2 14:22:00 2025 GMT Not After : Jul 9 14:22:00 2025 GMT Subject: CN=68654088-4e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:16:a3:e0:0c:9e:6a:d4:93:fb:fd:2b:6a: 55:2c:1d:5e:eb:4d:1e:c6:cf:cc:b7:6c:7c:f4:53: 88:d8:84:7f:47:ef:86:07:1a:7f:d3:2c:79:39:17: 18:95:49:1d:be:04:80:d7:6b:3b:1b:ac:16:4f:3d: cb:ff:34:a5:34:88:ad:13:dd:32:b1:b9:9f:07:de: 9a:e0:bc:8b:cc:26:c6:6a:2f:9e:4e:ff:ed:c8:3b: b0:20:75:43:ae:14:35:67:b5:9d:5f:92:f4:7f:7e: 9d:d1:e1:cd:0c:2d:5d:dc:b6:49:5d:69:7b:07:c7: 60:18:6a:e8:40:b5:a3:48:94:9d:8c:8d:36:34:b7: 5f:95:ca:69:d4:b1:de:e9:7d:c2:a3:8a:ab:6e:8b: 25:ee:32:11:6e:ca:4a:ae:30:96:c7:33:41:68:20: 8b:f6:55:ff:5e:1d:5c:56:56:1d:e7:11:15:8f:7c: 8e:21:29:7c:41:eb:ad:3d:21:be:af:aa:45:77:36: 2b:58:dd:d7:25:96:9a:ac:f5:14:b6:5f:25:c2:11: 54:48:c7:be:26:e0:77:40:f8:43:ed:ac:53:75:84: 6d:27:fe:cc:38:0c:82:e5:05:74:d9:2d:64:40:81: fb:89:f7:8b:e8:7b:ba:3f:01:56:f7:8d:0d:ed:28: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C8:F0:99:B6:AC:C0:6B:DB:DA:15:55:9B:CA:7B:65:08:1B:5E:85 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b1:11:22:70:2e:66:bf:fb:ec:04:fc:1b:cf:8c:3f:1b:57: 96:48:0c:3e:c4:04:02:d4:fd:d1:8b:a2:d0:8f:4d:18:98:23: d1:72:bf:2b:aa:e6:73:10:39:e5:7b:1d:a6:51:50:53:e3:7c: 59:84:12:35:bf:53:fd:b7:f1:20:12:3b:62:60:8f:35:8e:c7: 2e:13:38:90:ad:72:62:98:df:68:e9:1c:32:0b:67:41:97:4f: c0:40:3f:9b:9c:d5:58:5d:55:05:77:9c:b2:c2:f8:c5:a6:a0: b7:da:f6:09:82:71:8a:f4:6e:9a:35:4f:67:5c:80:f9:5e:00: bb:f3:49:14:cb:aa:56:80:11:a5:b7:61:8a:9f:79:47:ab:05: b7:51:2c:9a:0b:d7:f2:4d:e5:cc:94:ea:64:00:60:9b:58:f5: be:ff:19:30:b7:c6:30:95:44:3d:6a:5b:68:97:10:a8:ff:19: f1:02:b6:df:ce:94:c2:f2:47:e9:48:0f:9d:b9:ff:6f:be:6a: 35:d8:6f:ac:cc:d4:f6:40:7c:d5:68:36:0f:51:6d:44:5c:b0: 55:c9:81:99:1b:89:cf:89:c1:13:cd:de:91:26:d0:6f:6c:50: a5:11:6e:45:7e:81:5e:d3:2f:bf:57:09:b6:52:07:a4:94:69: 5a:3c:f2:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUwNzAyMTQyMjAwWhcNMjUwNzA5MTQyMjAwWjAYMRYwFAYD VQQDEw02ODY1NDA4OC00ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WMWo+AMnmrUk/v9K2pVLB1e600exs/Mt2x89FOI2IR/R++GBxp/0yx5ORcY lUkdvgSA12s7G6wWTz3L/zSlNIitE90ysbmfB96a4LyLzCbGai+eTv/tyDuwIHVD rhQ1Z7WdX5L0f36d0eHNDC1d3LZJXWl7B8dgGGroQLWjSJSdjI02NLdflcpp1LHe 6X3Co4qrbosl7jIRbspKrjCWxzNBaCCL9lX/Xh1cVlYd5xEVj3yOISl8QeutPSG+ r6pFdzYrWN3XJZaarPUUtl8lwhFUSMe+JuB3QPhD7axTdYRtJ/7MOAyC5QV02S1k QIH7ifeL6Hu6PwFW940N7Sgs5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjI8Jm2 rMBr29oVVZvKe2UIG16FMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUsREicC5mv/vsBPwbz4w/G1eWSAw+xAQC1P3Ri6LQj00YmCPRcr8r quZzEDnlex2mUVBT43xZhBI1v1P9t/EgEjtiYI81jscuEziQrXJimN9o6RwyC2dB l0/AQD+bnNVYXVUFd5yywvjFpqC32vYJgnGK9G6aNU9nXID5XgC780kUy6pWgBGl t2GKn3lHqwW3USyaC9fyTeXMlOpkAGCbWPW+/xkwt8YwlUQ9altolxCo/xnxArbf zpTC8kfpSA+duf9vvmo12G+szNT2QHzVaDYPUW1EXLBVyYGZG4nPicETzd6RJtBv bFClEW5FfoFe0y+/Vwm2UgeklGlaPPLn -----END CERTIFICATE-----Generated at Thu Jul 3 07:12:24 2025 by rpki-client