$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: oqXCuP4xGMmfobwEB1VehrFY0e1yhpB7tpKp+QRaAuk= Subject key identifier: F2:FD:8D:85:AE:53:70:90:88:20:78:7D:F3:2E:89:AE:72:8F:D4:0E Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 05E2 Signing time: Mon 30 Jun 2025 23:31:33 +0000 Manifest this update: Mon 30 Jun 2025 23:31:33 +0000 Manifest next update: Mon 07 Jul 2025 23:31:33 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: Ta4eKHg875GHnx+hJM8zWqOgwftrABgjT6CC/f+TzBk=) 2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: V45gxxPbP3gB5dgB3aRdYWLo9/HOqXLXWjCDGDuIpeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: Jun 30 23:31:33 2025 GMT Not After : Jul 7 23:31:33 2025 GMT Subject: CN=68631e55-ed77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:66:cd:b8:d6:b6:d6:57:99:93:e3:47:82: ac:fc:d7:15:51:64:cf:96:36:cb:bf:81:ae:05:55: dd:d9:c2:06:65:6d:87:59:cd:ee:77:90:22:a8:6c: 05:be:3b:b2:87:91:20:ff:0a:df:5b:00:ee:d1:a6: 60:92:d1:28:7f:a2:84:2b:c9:e2:7a:3a:34:f4:ff: d3:47:57:16:c7:bc:e4:e3:74:88:37:e7:53:ff:a3: cf:b6:d3:17:89:fc:dc:19:c0:25:30:8c:d8:52:14: 9c:03:91:b3:6e:99:1b:57:f1:b1:3b:24:d6:a5:c1: 3d:bb:7c:f9:a0:65:f7:40:d6:77:3a:df:0b:dc:e7: 91:03:8b:ce:74:12:24:7e:8e:94:c8:fc:f8:c0:bf: e0:ae:b3:ef:e3:f4:04:4c:73:74:b9:e9:fe:38:d8: d8:48:de:dd:33:ef:25:84:c3:41:c2:45:ca:55:c4: 37:46:f7:8c:5a:d4:cc:a6:7f:45:c1:51:6d:c9:b0: f5:12:2b:97:3f:b5:ab:6a:a3:65:b3:03:f4:7c:de: ad:34:8d:80:2c:49:6c:a0:d9:92:48:39:90:a8:86: a4:2f:6b:f6:31:16:2f:e3:14:ff:33:1a:5e:4e:60: ad:ab:f9:7b:18:ef:e6:12:0b:04:40:15:a5:b3:68: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FD:8D:85:AE:53:70:90:88:20:78:7D:F3:2E:89:AE:72:8F:D4:0E X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:9f:2c:a0:6b:c4:ff:ab:22:62:dc:b5:76:7e:fb:8e:5d:b6: 88:8a:f1:9f:1b:f5:dc:f8:87:94:ec:0e:da:14:b0:a1:58:be: 54:aa:93:37:09:1c:a4:98:f1:4e:e3:25:81:00:2d:6f:d9:3f: 71:14:78:9b:39:52:eb:8d:d8:e8:0c:1d:92:73:78:98:c3:78: ac:02:fb:a6:df:0a:dc:7c:8f:f2:36:62:c2:bb:0b:8c:85:b9: 21:1f:37:f8:e5:07:ac:fe:15:a7:fb:3e:3f:eb:95:3d:39:4c: 5f:f2:43:b5:52:03:d8:de:f5:d5:39:23:91:30:5b:d9:ac:d5: c4:09:ba:68:f2:72:76:4b:64:1d:ff:40:8b:a3:c5:94:58:b0: ec:06:62:14:d4:15:01:82:3a:e6:9f:09:94:2d:56:c2:ef:19: 50:65:cc:cc:8c:31:28:23:42:af:1b:cc:02:4d:63:db:29:e0: 16:14:15:eb:03:68:7a:c1:f0:f8:20:c6:84:ae:6b:7b:66:d9: 02:4b:b8:98:ea:75:d5:03:dd:6c:9f:83:a7:52:41:33:10:4d: 65:88:f8:ee:de:e6:c8:26:84:f5:63:74:96:df:71:57:11:5e: f8:7a:f1:f2:38:26:23:23:ca:7a:ef:47:1a:ae:5e:c0:bc:68: 1c:e0:1e:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjUwNjMwMjMzMTMzWhcNMjUwNzA3MjMzMTMzWjAYMRYwFAYD VQQDEw02ODYzMWU1NS1lZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA1mzbjWttZXmZPjR4Ks/NcVUWTPljbLv4GuBVXd2cIGZW2HWc3ud5AiqGwF vjuyh5Eg/wrfWwDu0aZgktEof6KEK8niejo09P/TR1cWx7zk43SIN+dT/6PPttMX ifzcGcAlMIzYUhScA5GzbpkbV/GxOyTWpcE9u3z5oGX3QNZ3Ot8L3OeRA4vOdBIk fo6UyPz4wL/grrPv4/QETHN0uen+ONjYSN7dM+8lhMNBwkXKVcQ3RveMWtTMpn9F wVFtybD1EiuXP7WraqNlswP0fN6tNI2ALElsoNmSSDmQqIakL2v2MRYv4xT/Mxpe TmCtq/l7GO/mEgsEQBWls2gTXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL9jYWu U3CQiCB4ffMuia5yj9QOMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3nyyga8T/qyJi3LV2fvuOXbaIivGfG/Xc+IeU7A7aFLChWL5UqpM3 CRykmPFO4yWBAC1v2T9xFHibOVLrjdjoDB2Sc3iYw3isAvum3wrcfI/yNmLCuwuM hbkhHzf45Qes/hWn+z4/65U9OUxf8kO1UgPY3vXVOSORMFvZrNXECbpo8nJ2S2Qd /0CLo8WUWLDsBmIU1BUBgjrmnwmULVbC7xlQZczMjDEoI0KvG8wCTWPbKeAWFBXr A2h6wfD4IMaErmt7ZtkCS7iY6nXVA91sn4OnUkEzEE1liPju3ubIJoT1Y3SW33FX EV74evHyOCYjI8p670carl7AvGgc4B6P -----END CERTIFICATE-----Generated at Wed Jul 2 23:22:10 2025 by rpki-client